last executing test programs: 1m25.556643566s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 1m15.591377773s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 1m6.475113426s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 57.705896547s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 50.621293442s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 43.596017593s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 34.352189706s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 30.855347266s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 20.654504296s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 19.059984945s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 6.335565925s ago: executing program 0 (id=77): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x8, 0x1c, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, r1, 0x81, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x4) 5.236808577s ago: executing program 4 (id=385): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) getpid() (async) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) pipe(&(0x7f0000000800)) (async) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}], 0x70, 0x4040000}}], 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r15) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r16, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r12, 0x40086607, &(0x7f0000000580)=0x63c) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r19, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000200)=""/157, 0x9d}], 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) 2.999746327s ago: executing program 1 (id=758): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, 0x0, 0xa08) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000100)=0x4, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 2.655531536s ago: executing program 2 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x400}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000001ea3cd3f6182534e2a85fba8dd00"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) unshare(0x8040480) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}}, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x400}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000001ea3cd3f6182534e2a85fba8dd00"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) gettid() (async) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) unshare(0x8040480) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}}, 0x0) (async) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x3a) (async) 2.534527411s ago: executing program 3 (id=762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x4, {[@nop, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x6, 0xf989, "e6ff"}, @window={0x3, 0x3, 0x8}, @nop, @nop, @fastopen={0x22, 0xd, '\x00'/11}]}}}}}}}}, 0x0) 2.33831196s ago: executing program 2 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000008800)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008740)=ANY=[], 0xa8}}, 0x0) recvmmsg(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000004c0)=""/102, 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/82, 0x52}], 0x1}, 0xffffffff}], 0x2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000280)=@phonet, &(0x7f0000000000)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) shutdown(r7, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="307cec0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b0000000000"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) 2.018461017s ago: executing program 1 (id=764): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x40, 0x4) r1 = accept(r0, 0x0, &(0x7f0000000040)) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0xc, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000003c0)={0x2, 'pimreg\x00', {0x7fff}, 0x7}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0x128, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x64, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'pimreg\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x13c, r6, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x6, 0xa, "186a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "241e6a37dd"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "b73494430914b0bd91dfaa"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3511bd2ed0"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7b32f73cd934cf2e0ab7d11188"}]}]]}, 0x13c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r7, 0xd19f64759cb8e58f, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb3f9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000c40)={&(0x7f0000000b40)=""/200, 0x100a000, 0x2000, 0x40}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x20c, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xcc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xd93003a7bd825270}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540604}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540104}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}]}]}]}, 0x20c}}, 0x2004c000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x3, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0x80000000, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001080)={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x6, 0x0, 0x400, 0x7fff, 0x100, r11}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000013c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1f0, r6, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x4, 0x0, {0x7, 0x8, 0x0, 0x4}, 0x1, 0xffff, 0x6}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x1c, 0x7e, @random="e4352fa389d829bb70ce5afd35fa25b5dc3dcb44992305bf"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x71, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0xfff}, @ibss={0x6, 0x2, 0x6}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x5, 0x0, {0x4, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x4, 0xa}}, @mic={0x8c, 0x18, {0xe63, "6ae840a9f41f", @long="17f499d7f49d9cbbcbf290b68703b355"}}, @prep={0x83, 0x1f, {{}, 0xb5, 0x9b, @broadcast, 0xfffffffb, @void, 0xa, 0xa1, @broadcast, 0x7}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8001, @void, @void, @void}}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x30, 0x1}, {0x36}, {0x30, 0x1}, {0x1}, {0x25, 0x1}, {0x12, 0x1}, {0x9, 0x1}, {0x1f, 0x1}, {0x60}, {0x3, 0x1}, {0x18}, {0x16, 0x1}, {0x6}, {0x9}, {0x60, 0x1}, {0x6c, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6c, 0x1}, {0x60}, {0x36, 0x1}, {0x6c, 0x1}, {0x6, 0x1}, {0x2}, {0x12}, {0x5}, {0xc, 0x1}]}, @NL80211_ATTR_KEYS={0xd8, 0x51, 0x0, 0x1, [{0x4}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "173ce70c94"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f0ea40c98"}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xa, 0x4, "7a7820783d96"}, @NL80211_KEY_SEQ={0x8, 0x4, "f34c4d12"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x7, 0x0, {0x80000000, 0x4, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0xc, 0x9}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r11, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000015c0)={r13, &(0x7f0000001480)="6d8150d3aacf5f03f0edf452ddf7f1317167cf647b1f7acd9670c8a55a983a2d00b86360bb9aca3da58af28dc6e86f9af1a6fe9cc9ad3f6b0b2fed87ea78a6ae146eb136d89f579608bf1e764a03892a4fda44369d2c2d52e893", &(0x7f0000001500)=""/168, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0xc, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000001680)='syzkaller\x00', 0xb, 0x5a, &(0x7f00000016c0)=""/90, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x3, 0xd, 0xfff, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[r13], &(0x7f0000001800)=[{0x4, 0x5, 0xe, 0x7}], 0x10, 0x400, @void, @value}, 0x94) 1.824983625s ago: executing program 3 (id=765): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f800000000000019000000000000"], 0x48) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x80, 0x2ffffffff}, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@map, 0xffffffffffffffff, 0x19, 0x11, 0xffffffffffffffff, @void, @value}, 0xff36) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20044014) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00420000020002000800050080e14c70d84bc7f47c", @ANYRES32=r5, @ANYBLOB="140012800b0001006c6f7770616e000004000280"], 0x3c}}, 0x4000) sendmsg$NL80211_CMD_SET_KEY(r0, 0x0, 0x44000) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r9, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000c80)}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="679512f062b8", 0x6}, {&(0x7f0000000240)='Y', 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="03620545", 0x4}, {&(0x7f0000001080)="ed2680", 0x3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="fa", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000001140)="02d279", 0x3}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f0000000ec0)="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", 0x142}], 0x5}}], 0x4, 0xf000000) (async) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000080)={0x34, r11, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6e21383}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fedbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990c97470000710000000600ed0043070000"], 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x24008094) 1.326918097s ago: executing program 2 (id=766): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1801000031000100000061e4d8b00c0000000000a8293d3dff140000002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3faeb2f00c8129b28e284ac0589cb8829370d47eb640dc5061dc35817c8a66c29be82fd0069484ad32b4ca9f81e26799578fa4c35696a914436b6c3915d1f7e1facd09c554c552c373942814e27cb343c99be25b666149e42206efdc7840d3a04f21b84c6c71045e6b21838eacc1dc3135b23bb7e83a2f491ac91fe7428aec91cc90c8b6ac8a70548548bbbe8b5ac8e49dc91"], 0x118}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108000000000000000000f9ff00", @ANYRES32=0x0, @ANYBLOB="80400100000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 911.195753ms ago: executing program 3 (id=767): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000004a6339cc00007400000002000000000000000000000200000000000000000000000c0200002d0000000000000001000000000000000000000000000000c4000000000000000000000000000000090000000000000000eba0b0bfdf8710caf3f9212448c10c03001f050000000000000000000000000000000000000000000000fae57fae2b64000100"/157], 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000100), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x6, 0x7fff, 0x42, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x50, 0x5, 0x5}}) socketpair(0x3, 0xa, 0x7, &(0x7f0000000140)={0xffffffffffffffff}) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @mcast2, 0xcf0}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r2, r0, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 827.681131ms ago: executing program 1 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@broadcast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x4c, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x87, 0x0, 0x8, 0x0, 0x0, 0x0, 0x600}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) 789.280658ms ago: executing program 1 (id=769): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4060000000000007111bd0000000000851000000200ecff840000000000000095000000000000009500000000000000eae04b876c2869e62cd3f3757f620576d343ce6dfd718166b43b0611e3af854db64ecc064ed163054bd684109c798aa0148b219168d90153a1a49081ac09680e5cfd224838d5e7f0cb834f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 774.599161ms ago: executing program 3 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000030fcda44c7a64b43d011f4ade66a33aa14000280080001"], 0x58}}, 0x2000000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) 619.659529ms ago: executing program 1 (id=771): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) socket(0x30, 0x2, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000800000000000000000005000000a1ad1d7d7a"], &(0x7f0000000080)=0x29) 515.841255ms ago: executing program 1 (id=772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c00200100"/36, @ANYBLOB="ca24c9c217"], 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c00200100"/36, @ANYBLOB="ca24c9c217"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRES16], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016000400014006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x16, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x1, 0x3, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 393.587959ms ago: executing program 2 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x34, 0x25, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000060001"], 0x44}}, 0x10) listen(r3, 0x0) (async) shutdown(r2, 0x0) (async) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) r6 = accept(r3, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000000)='\x00', 0x1, 0x44001, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x9, 0x4) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x1, [0x9]}, &(0x7f0000000080)=0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) accept$inet(r6, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x490c0) 235.588344ms ago: executing program 2 (id=774): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'batadv0\x00', 'lo\x00'}, 0x0, 0xf0, 0x138, 0x0, {0x0, 0x4c00}, [@common=@dst={{0x48}, {0x0, 0x0, 0xbce0257315b3f3d6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x45c, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x7, 0x1, 0x204, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r5 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmsg$alg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="662ee99888e6ee93e1da33210674de164e8ed5e903dba92178b46429d61180816b15a63c50cd36effcc797c3a06593e5ed63f41f697d3e8d6f9498e41e9c6972d5381fc28a662bc51c2084f6added216cb02a5020f3f0f08c41147845a161c4baea97b8a8733245bc0514b6b6b20e2da7fe9a6bd7895151d3b14eda4c01abf9f0c9d8cb531973abf3a2fe5159a2b20fee84524cd2076a59ebd5730", 0x9b}, {&(0x7f0000000200)="3c9df64e591b0de57322e1b26df7fe56e6d59f15ca1fa52d86339f4ee18c0709798d35bb44c590a40a7c490e", 0x2c}], 0x2, 0x0, 0x0, 0x80004}, 0x4004040) (async) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f00000005c0)=""/194, 0xc2}], 0x2}}], 0x1, 0x43, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_netdev_private(r6, 0x8922, &(0x7f0000000040)="f7618fc5e7ce492ceb4e3a") (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x2, 0x40, "17da37443c42170d9d1ac04afa2c09aa3019e5924f787d6d55ccf6c387c702cf8037f84c379ea272bff46bd24ceed351c23dd96e24370293a1e93517902a56a4"}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000a00038006000280050001003a000000140001800800010064010101080002006401010004000180"], 0x60}}, 0x0) 232.309886ms ago: executing program 3 (id=775): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000018000000460000005b2e08740500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) 133.027864ms ago: executing program 3 (id=776): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000066100000fdffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}]}, 0x3c}}, 0x4000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'bond0\x00'}) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 0s ago: executing program 2 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x12, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffe0}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8400}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x9}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r3, 0x0, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8001}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x0, @local, 0x2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast2}], 0x68) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x164, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x62c}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf2, 0xac, "e0badcafb1a14f1642e23cfba215871707aded9fd8e9bb01ed89a85e6fcf1653bc7c52ff2ffad717668043afd499903eb88617e7bf504369e094aa21013cb3ba435be2feca43f8b2f49f2218886215ce4428719dc4325e88abc832ec8088aa35184f4fb426fa951f63b1b16a043862b4006473858ada983bd91f31e49d584444b7ca48435a21fcd34707cec4d0969908ca886188a6c5c8a05a6c6b416d98feb48f847acf0ef9370d5ae7160629383a997745bdb1cc1bc86922b2b03b7af0f11d745a1575f21a3494851631cbcf7848202d8851ebd1ba9c68b2e4deb978eeb60b092d93e06b6f20097b4e037f0705"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x76d}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 86.688897][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.766237][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.794330][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.827087][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.845053][ T6652] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 86.851261][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.862394][ T6652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.185'. [ 86.873295][ T6210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.921825][ T6210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.982931][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.995713][ T6210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.004913][ T6210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.013768][ T6210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.022835][ T6210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.037778][ T6651] IPVS: Error connecting to the multicast addr [ 87.051916][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 87.077522][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 87.224901][ T6660] ªªªªªª: renamed from veth1_virt_wifi (while UP) [ 87.563597][ T3407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.583760][ T3407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.638486][ T6700] trusted_key: syz.4.198 sent an empty control message without MSG_MORE. [ 87.652676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.670417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.857333][ T6713] netlink: 'syz.1.199': attribute type 13 has an invalid length. [ 87.865130][ T6713] netlink: 'syz.1.199': attribute type 58 has an invalid length. [ 87.929591][ T6719] netlink: 'syz.3.202': attribute type 9 has an invalid length. [ 87.931281][ T6713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.199'. [ 87.969394][ T6719] netlink: 'syz.3.202': attribute type 7 has an invalid length. [ 87.985436][ T6719] netlink: 'syz.3.202': attribute type 8 has an invalid length. [ 88.993006][ T3407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.512937][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.550351][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.584226][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.609133][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.617631][ T5860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.646530][ T6798] netlink: 'syz.4.213': attribute type 142 has an invalid length. [ 89.650649][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.667838][ T6801] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 89.686260][ T3407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.742965][ T6803] bridge0: entered promiscuous mode [ 89.764685][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 89.872363][ T3407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.901921][ T6796] bridge0: left promiscuous mode [ 89.962711][ T3407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.335120][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 90.380898][ T3407] bridge_slave_1: left allmulticast mode [ 90.386601][ T3407] bridge_slave_1: left promiscuous mode [ 90.401759][ T3407] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.413362][ T3407] bridge_slave_0: left allmulticast mode [ 90.419566][ T3407] bridge_slave_0: left promiscuous mode [ 90.425372][ T3407] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.752350][ T6835] xt_TCPMSS: Only works on TCP SYN packets [ 90.880015][ T3407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.891779][ T3407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.902120][ T3407] bond0 (unregistering): Released all slaves [ 91.015556][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.159092][ T6855] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 91.167385][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.174789][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.183411][ T6786] bridge_slave_0: entered allmulticast mode [ 91.191091][ T6786] bridge_slave_0: entered promiscuous mode [ 91.212879][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.227655][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.236567][ T6786] bridge_slave_1: entered allmulticast mode [ 91.244196][ T6786] bridge_slave_1: entered promiscuous mode [ 91.271233][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.308104][ T6856] bond0: (slave bridge0): making interface the new active one [ 91.316356][ T6856] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.413279][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.445234][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.522580][ T6786] team0: Port device team_slave_0 added [ 91.590180][ T3407] hsr_slave_0: left promiscuous mode [ 91.609771][ T3407] hsr_slave_1: left promiscuous mode [ 91.660755][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.677102][ T5849] Bluetooth: hci0: command tx timeout [ 91.683901][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.722796][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.757787][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.835978][ T3407] veth1_macvtap: left promiscuous mode [ 91.881509][ T3407] veth0_macvtap: left promiscuous mode [ 91.905745][ T3407] veth1_vlan: left promiscuous mode [ 91.923757][ T3407] veth0_vlan: left promiscuous mode [ 92.123929][ T6902] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 92.571267][ T3407] team0 (unregistering): Port device team_slave_1 removed [ 92.608586][ T3407] team0 (unregistering): Port device team_slave_0 removed [ 92.968654][ T6786] team0: Port device team_slave_1 added [ 93.150995][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.158154][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.203321][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.310635][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 93.317418][ T6930] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 93.326498][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.353419][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.402329][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.472618][ T6938] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 93.538581][ T6938] Xÿ: entered promiscuous mode [ 93.652286][ T6786] hsr_slave_0: entered promiscuous mode [ 93.683383][ T6786] hsr_slave_1: entered promiscuous mode [ 93.700782][ T6786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.720413][ T6786] Cannot create hsr debugfs directory [ 93.737299][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 93.757415][ T5849] Bluetooth: hci0: command tx timeout [ 93.764243][ T6949] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 93.802041][ T6949] netlink: del zone limit has 4 unknown bytes [ 93.953884][ T6951] netlink: 'syz.2.250': attribute type 29 has an invalid length. [ 93.983166][ T6965] netlink: 'syz.3.252': attribute type 23 has an invalid length. [ 94.007349][ T6965] netlink: 244 bytes leftover after parsing attributes in process `syz.3.252'. [ 94.058859][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 94.225797][ T6976] netlink: 'syz.3.254': attribute type 96 has an invalid length. [ 94.467054][ T6981] netlink: 76 bytes leftover after parsing attributes in process `syz.1.255'. [ 94.620702][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 94.710561][ T6997] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 94.787768][ T7004] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 94.795465][ T7004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.260'. [ 95.292987][ T7032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.470626][ T7047] ebt_among: src integrity fail: 30a [ 95.652552][ T7057] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 95.836829][ T5849] Bluetooth: hci0: command tx timeout [ 95.852819][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 95.970674][ T6786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.002309][ T6786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.019690][ T7074] netlink: 92 bytes leftover after parsing attributes in process `syz.4.278'. [ 96.025660][ T6786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.044766][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 96.059061][ T6786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.181542][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.199231][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.211076][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.218307][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.238850][ T7082] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 96.243127][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.253663][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.460759][ T6786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.486894][ T6786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.521286][ T7096] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.642635][ T7109] Cannot find add_set index 0 as target [ 96.963955][ T7124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.174289][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.573539][ T7147] macsec1: entered promiscuous mode [ 97.589423][ T7147] macvlan1: entered promiscuous mode [ 97.639735][ T6786] veth0_vlan: entered promiscuous mode [ 97.720465][ T6786] veth1_vlan: entered promiscuous mode [ 97.839015][ T6786] veth0_macvtap: entered promiscuous mode [ 97.869995][ T7154] No such timeout policy "syz0" [ 97.873798][ T6786] veth1_macvtap: entered promiscuous mode [ 97.929791][ T5849] Bluetooth: hci0: command tx timeout [ 97.976825][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.987517][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.997510][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.008084][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.018080][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.028618][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.039673][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.074789][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.129437][ T7174] netlink: 'syz.4.300': attribute type 11 has an invalid length. [ 98.139938][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.166073][ T7180] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 98.184751][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.205827][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.226180][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.245345][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.269380][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.310810][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.335227][ T6786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.373423][ T6786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.386571][ T6786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.412521][ T6786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574990][ T7200] __nla_validate_parse: 6 callbacks suppressed [ 98.575009][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 98.592557][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.616626][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.626304][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.626702][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.707392][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'. [ 98.841242][ T7209] FAULT_INJECTION: forcing a failure. [ 98.841242][ T7209] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.857075][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.2.311 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 98.867740][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.877834][ T7209] Call Trace: [ 98.881130][ T7209] [ 98.884080][ T7209] dump_stack_lvl+0x241/0x360 [ 98.888808][ T7209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.894045][ T7209] ? __pfx__printk+0x10/0x10 [ 98.898679][ T7209] ? __pfx_lock_release+0x10/0x10 [ 98.903751][ T7209] should_fail_ex+0x3b0/0x4e0 [ 98.908577][ T7209] _copy_from_user+0x2f/0xc0 [ 98.913214][ T7209] copy_msghdr_from_user+0xae/0x680 [ 98.918462][ T7209] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 98.924290][ T7209] __sys_recvmsg+0x24c/0x3d0 [ 98.928898][ T7209] ? __pfx___sys_recvmsg+0x10/0x10 [ 98.934028][ T7209] ? __mutex_unlock_slowpath+0x21d/0x750 [ 98.939731][ T7209] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.946063][ T7209] ? do_syscall_64+0x100/0x230 [ 98.950832][ T7209] ? do_syscall_64+0xb6/0x230 [ 98.955509][ T7209] do_syscall_64+0xf3/0x230 [ 98.960020][ T7209] ? clear_bhb_loop+0x35/0x90 [ 98.964794][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.970707][ T7209] RIP: 0033:0x7fdcb0b7e719 [ 98.975136][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.994739][ T7209] RSP: 002b:00007fdcb18b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 99.003153][ T7209] RAX: ffffffffffffffda RBX: 00007fdcb0d35f80 RCX: 00007fdcb0b7e719 [ 99.011210][ T7209] RDX: 0000000000012001 RSI: 0000000020002680 RDI: 0000000000000003 [ 99.019180][ T7209] RBP: 00007fdcb18b7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.027152][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.035115][ T7209] R13: 0000000000000000 R14: 00007fdcb0d35f80 R15: 00007ffefef2c4b8 [ 99.043092][ T7209] [ 99.097024][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 99.157026][ T7215] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 99.210954][ T7211] IPv6: sit1: Disabled Multicast RS [ 99.217262][ T7211] sit1: entered allmulticast mode [ 99.265844][ T7215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.298333][ T7215] bond1: (slave bridge1): making interface the new active one [ 99.306516][ T7215] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 99.369143][ T7215] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 99.584810][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 99.682876][ T7237] pim6reg1: entered promiscuous mode [ 99.706767][ T7237] pim6reg1: entered allmulticast mode [ 99.713349][ T7244] netlink: 'syz.2.320': attribute type 3 has an invalid length. [ 99.754977][ T7244] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 99.799210][ T7244] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 99.821806][ T7244] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 99.844880][ T7244] netlink: 199180 bytes leftover after parsing attributes in process `syz.2.320'. [ 100.002756][ T7263] FAULT_INJECTION: forcing a failure. [ 100.002756][ T7263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.028242][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz.1.325 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 100.038886][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.048969][ T7263] Call Trace: [ 100.052248][ T7263] [ 100.055181][ T7263] dump_stack_lvl+0x241/0x360 [ 100.059865][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.065149][ T7263] ? __pfx__printk+0x10/0x10 [ 100.069748][ T7263] ? snprintf+0xda/0x120 [ 100.073994][ T7263] should_fail_ex+0x3b0/0x4e0 [ 100.078674][ T7263] _copy_to_user+0x31/0xb0 [ 100.083092][ T7263] simple_read_from_buffer+0xca/0x150 [ 100.088480][ T7263] proc_fail_nth_read+0x1e9/0x250 [ 100.093520][ T7263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.099078][ T7263] ? rw_verify_area+0x55e/0x6f0 [ 100.103956][ T7263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.109548][ T7263] vfs_read+0x1fc/0xb70 [ 100.113733][ T7263] ? fdget_pos+0x24e/0x320 [ 100.118162][ T7263] ? __pfx_vfs_read+0x10/0x10 [ 100.122850][ T7263] ? __fget_files+0x3f3/0x470 [ 100.127538][ T7263] ? fdget_pos+0x24e/0x320 [ 100.132039][ T7263] ksys_read+0x183/0x2b0 [ 100.136280][ T7263] ? __pfx_ksys_read+0x10/0x10 [ 100.141042][ T7263] ? do_syscall_64+0x100/0x230 [ 100.145806][ T7263] ? do_syscall_64+0xb6/0x230 [ 100.150479][ T7263] do_syscall_64+0xf3/0x230 [ 100.155066][ T7263] ? clear_bhb_loop+0x35/0x90 [ 100.159746][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.165720][ T7263] RIP: 0033:0x7f530cf7d15c [ 100.170176][ T7263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 100.189972][ T7263] RSP: 002b:00007f530ddbb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.198399][ T7263] RAX: ffffffffffffffda RBX: 00007f530d135f80 RCX: 00007f530cf7d15c [ 100.206379][ T7263] RDX: 000000000000000f RSI: 00007f530ddbb0a0 RDI: 0000000000000004 [ 100.214349][ T7263] RBP: 00007f530ddbb090 R08: 0000000000000000 R09: 0000000000000000 [ 100.222314][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.230280][ T7263] R13: 0000000000000000 R14: 00007f530d135f80 R15: 00007fff5e1f6af8 [ 100.238353][ T7263] [ 100.398544][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.474092][ T7274] IPVS: set_ctl: invalid protocol: 22 172.30.0.2:20002 [ 100.627671][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.670089][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.694262][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.780278][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.788076][ T5860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.799116][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.823647][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.238404][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 102.888886][ T5860] Bluetooth: hci0: command tx timeout [ 103.050669][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.066159][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.087567][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.102666][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.111156][ T7319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.264893][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.330353][ T7360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.716150][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 103.727269][ T7386] syzkaller0: create flow: hash 144206745 index 2 [ 103.751451][ T6476] syzkaller0: tun_net_xmit 76 [ 103.759531][ T6476] syzkaller0: tun_net_xmit 48 [ 103.776945][ T969] syzkaller0: tun_net_xmit 76 [ 103.788148][ T8] syzkaller0: tun_net_xmit 76 [ 103.813326][ T11] bridge_slave_1: left allmulticast mode [ 103.822887][ T11] bridge_slave_1: left promiscuous mode [ 103.832688][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.845486][ T11] bridge_slave_0: left allmulticast mode [ 103.851951][ T11] bridge_slave_0: left promiscuous mode [ 103.859003][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.148783][ T5893] syzkaller0: tun_net_xmit 76 [ 104.289970][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.305062][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.316016][ T11] bond0 (unregistering): Released all slaves [ 104.373061][ T7386] syzkaller0: delete flow: hash 144206745 index 2 [ 104.427709][ T5850] syzkaller0: tun_net_xmit 76 [ 104.959993][ T5849] Bluetooth: hci0: command tx timeout [ 106.143031][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.171395][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.183062][ T7277] bridge_slave_0: entered allmulticast mode [ 106.202385][ T7277] bridge_slave_0: entered promiscuous mode [ 106.263120][ T7420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.435593][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.444170][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.470574][ T7277] bridge_slave_1: entered allmulticast mode [ 106.507000][ T7277] bridge_slave_1: entered promiscuous mode [ 106.701348][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.788818][ T7447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.875828][ T11] hsr_slave_0: left promiscuous mode [ 106.882291][ T11] hsr_slave_1: left promiscuous mode [ 106.891423][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.899353][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.927429][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.935258][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.988752][ T11] veth1_macvtap: left promiscuous mode [ 107.002387][ T11] veth0_macvtap: left promiscuous mode [ 107.011190][ T11] veth1_vlan: left promiscuous mode [ 107.027336][ T11] veth0_vlan: left promiscuous mode [ 107.037091][ T5849] Bluetooth: hci0: command 0x040f tx timeout [ 107.807069][ T11] team0 (unregistering): Port device team_slave_1 removed [ 107.848792][ T11] team0 (unregistering): Port device team_slave_0 removed [ 108.274669][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.444399][ T7277] team0: Port device team_slave_0 added [ 108.534126][ T7277] team0: Port device team_slave_1 added [ 108.544790][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 108.574357][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 108.662237][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.672707][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.706245][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.734513][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.755378][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.807027][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.957044][ T7509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.373'. [ 108.960725][ T7277] hsr_slave_0: entered promiscuous mode [ 108.994678][ T7277] hsr_slave_1: entered promiscuous mode [ 109.003186][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.011607][ T7277] Cannot create hsr debugfs directory [ 109.116843][ T5860] Bluetooth: hci0: command 0x040f tx timeout [ 109.526957][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 109.689558][ T5841] syz-executor (5841) used greatest stack depth: 18576 bytes left [ 109.890038][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.090933][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.107986][ T7560] netlink: 'syz.2.386': attribute type 6 has an invalid length. [ 110.279339][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 110.315587][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.454289][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.468043][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.476629][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.489362][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.499564][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.510805][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.519053][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.546492][ T7277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.571079][ T7277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.599445][ T7277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.619316][ T7277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.962453][ T12] bond0 (unregistering): (slave bridge0): Releasing active interface [ 111.212051][ T5860] Bluetooth: hci0: command 0x040f tx timeout [ 111.245536][ T12] bond0 (unregistering): Released all slaves [ 111.284317][ T12] bond1 (unregistering): Released all slaves [ 111.412157][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 111.468068][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'. [ 111.490392][ T7604] ax25_connect(): syz.3.394 uses autobind, please contact jreuter@yaina.de [ 111.527404][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 111.590913][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.659541][ T7610] netlink: 256 bytes leftover after parsing attributes in process `syz.2.396'. [ 111.674003][ T7606] wg2: entered promiscuous mode [ 111.698384][ T7606] team0: Device wg2 is of different type [ 111.809919][ T12] hsr_slave_0: left promiscuous mode [ 111.829543][ T12] hsr_slave_1: left promiscuous mode [ 111.860296][ T12] veth0_to_batadv: left allmulticast mode [ 111.866181][ T12] veth0_to_batadv: left promiscuous mode [ 111.888652][ T12] veth1_macvtap: left promiscuous mode [ 111.896018][ T12] veth0_macvtap: left promiscuous mode [ 111.903400][ T12] veth1_vlan: left promiscuous mode [ 111.910025][ T12] veth0_vlan: left promiscuous mode [ 112.348019][ T7627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.399'. [ 112.361744][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 112.429589][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.399'. [ 112.557264][ T5860] Bluetooth: hci3: command tx timeout [ 112.831646][ T7628] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 112.849432][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 112.882106][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.939253][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.952770][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.960961][ T7580] bridge_slave_0: entered allmulticast mode [ 112.968550][ T7580] bridge_slave_0: entered promiscuous mode [ 113.020012][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.030589][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.038290][ T7580] bridge_slave_1: entered allmulticast mode [ 113.044782][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 113.046247][ T7580] bridge_slave_1: entered promiscuous mode [ 113.071424][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.078547][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.106097][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.113255][ T6472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.193641][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.217246][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.367684][ T7650] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 113.414868][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.440054][ T7650] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.471985][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 113.483424][ T7580] team0: Port device team_slave_0 added [ 113.502378][ T7580] team0: Port device team_slave_1 added [ 113.552269][ T7650] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:fc4d:66ff:feb7:3611 error=-28 [ 113.594263][ T7277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.633661][ T7655] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.404'. [ 113.675024][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.693540][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.775486][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.821974][ T7664] ipip0: entered promiscuous mode [ 113.857248][ T12] IPVS: stop unused estimator thread 0... [ 113.926202][ T7650] infiniband syz1: set active [ 113.955622][ T7650] infiniband syz1: added team_slave_0 [ 114.108903][ T7650] RDS/IB: syz1: added [ 114.120806][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.127665][ T7650] smc: adding ib device syz1 with port count 1 [ 114.137461][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.150129][ T7650] smc: ib device syz1 port 1 has pnetid [ 114.199923][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.642595][ T5860] Bluetooth: hci3: command tx timeout [ 116.539995][ T7580] hsr_slave_0: entered promiscuous mode [ 116.553024][ T7580] hsr_slave_1: entered promiscuous mode [ 116.564237][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.575394][ T7580] Cannot create hsr debugfs directory [ 116.577741][ T7762] __nla_validate_parse: 3 callbacks suppressed [ 116.577758][ T7762] netlink: 152 bytes leftover after parsing attributes in process `syz.2.412'. [ 116.590171][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.716811][ T5860] Bluetooth: hci3: command tx timeout [ 117.228413][ T7792] ieee802154 phy0 wpan0: encryption failed: -126 [ 117.237931][ T7277] veth0_vlan: entered promiscuous mode [ 117.273244][ T7277] veth1_vlan: entered promiscuous mode [ 117.439962][ T7277] veth0_macvtap: entered promiscuous mode [ 117.466542][ T7277] veth1_macvtap: entered promiscuous mode [ 117.516410][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.535659][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.547260][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.557805][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.569944][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.592640][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.603978][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.614630][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.625267][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.636541][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.696441][ T7277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.726834][ T7277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.736286][ T7277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.757964][ T7277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.903200][ T7580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.960545][ T7580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.067948][ T7580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.110799][ T7580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.204153][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.230822][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.275057][ T7814] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.421'. [ 118.286203][ T7808] netlink: 'syz.1.420': attribute type 10 has an invalid length. [ 118.332225][ T7808] syz_tun: entered promiscuous mode [ 118.377519][ T7808] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.471540][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.494692][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.540404][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.595381][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.767119][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.774310][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.797452][ T5860] Bluetooth: hci3: command tx timeout [ 118.817022][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.824337][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.992035][ T7822] syzkaller0: entered promiscuous mode [ 119.021143][ T7822] syzkaller0: entered allmulticast mode [ 119.197097][ T6476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.266517][ T6476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.703567][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.720337][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.728453][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.741175][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.761649][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.780002][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.810169][ T6476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.959703][ T6476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.390977][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 121.459457][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.628997][ T6476] bridge_slave_1: left allmulticast mode [ 121.634873][ T6476] bridge_slave_1: left promiscuous mode [ 121.641703][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.658842][ T6476] bridge_slave_0: left allmulticast mode [ 121.664866][ T6476] bridge_slave_0: left promiscuous mode [ 121.672058][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.849430][ T5860] Bluetooth: hci0: command tx timeout [ 122.112327][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.124448][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.135553][ T6476] bond0 (unregistering): Released all slaves [ 122.375127][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 122.582142][ T7833] chnl_net:caif_netlink_parms(): no params data found [ 122.661560][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 123.279889][ T6476] hsr_slave_0: left promiscuous mode [ 123.286515][ T6476] hsr_slave_1: left promiscuous mode [ 123.294680][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.302650][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.314582][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.322145][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.341619][ T6476] veth1_macvtap: left promiscuous mode [ 123.347349][ T6476] veth0_macvtap: left promiscuous mode [ 123.353051][ T6476] veth1_vlan: left promiscuous mode [ 123.359425][ T6476] veth0_vlan: left promiscuous mode [ 123.496892][ T7920] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.439'. [ 123.743711][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 123.781322][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 123.916961][ T5860] Bluetooth: hci0: command tx timeout [ 124.124850][ T7911] hsr0: entered promiscuous mode [ 124.131043][ T7911] macsec1: entered promiscuous mode [ 124.159115][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.167090][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.174786][ T7833] bridge_slave_0: entered allmulticast mode [ 124.184099][ T7833] bridge_slave_0: entered promiscuous mode [ 124.193240][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.201426][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.209739][ T7833] bridge_slave_1: entered allmulticast mode [ 124.218859][ T7833] bridge_slave_1: entered promiscuous mode [ 124.252569][ T7580] veth0_vlan: entered promiscuous mode [ 124.400560][ T7833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.417790][ T7580] veth1_vlan: entered promiscuous mode [ 124.447864][ T7924] syzkaller1: entered promiscuous mode [ 124.453389][ T7924] syzkaller1: entered allmulticast mode [ 124.464607][ T7833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.501465][ T7924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.539422][ T7929] netlink: 'syz.3.442': attribute type 8 has an invalid length. [ 124.635219][ T7833] team0: Port device team_slave_0 added [ 124.661441][ T7833] team0: Port device team_slave_1 added [ 124.823316][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.832553][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.892407][ T7833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.911405][ T7833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.924347][ T7833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.951035][ T7948] xt_CONNSECMARK: invalid mode: 0 [ 124.953229][ T7948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.447'. [ 124.971528][ T7833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.047634][ T7580] veth0_macvtap: entered promiscuous mode [ 125.119652][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 125.221128][ T7580] veth1_macvtap: entered promiscuous mode [ 125.350253][ T7964] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 125.355529][ T7833] hsr_slave_0: entered promiscuous mode [ 125.418731][ T7833] hsr_slave_1: entered promiscuous mode [ 125.436732][ T7833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.444417][ T7833] Cannot create hsr debugfs directory [ 125.467089][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.496871][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.506919][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.526759][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.547958][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.647864][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.664435][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.696744][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.726793][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.748919][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.858872][ T7974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.453'. [ 126.032020][ T5860] Bluetooth: hci0: command tx timeout [ 126.078219][ T7982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.455'. [ 126.097590][ T7580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.106444][ T7580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.140059][ T7580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.154010][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 126.167722][ T7580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.190561][ T7973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.454'. [ 126.381663][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 126.755723][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.790901][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.164712][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.176320][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.349852][ T8038] vlan2: entered promiscuous mode [ 127.406505][ T8041] __nla_validate_parse: 3 callbacks suppressed [ 127.406524][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 127.432645][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 127.505583][ T8044] x_tables: duplicate underflow at hook 3 [ 127.564309][ T7833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.589754][ T7833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.749012][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.781938][ T7833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.796542][ T7833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.889464][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.923277][ T8052] Bluetooth: MGMT ver 1.23 [ 127.939769][ T8051] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 128.001073][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.474'. [ 128.046510][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.088518][ T5849] Bluetooth: hci0: command tx timeout [ 128.142210][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.156528][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.170519][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.190608][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.200368][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.211076][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.254322][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.743619][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.793041][ T12] bridge_slave_1: left allmulticast mode [ 128.811812][ T12] bridge_slave_1: left promiscuous mode [ 128.837516][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.861354][ T12] bridge_slave_0: left allmulticast mode [ 128.878319][ T12] bridge_slave_0: left promiscuous mode [ 128.884160][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.548050][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.565113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.576169][ T12] bond0 (unregistering): Released all slaves [ 129.604532][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.626515][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'. [ 129.659512][ T8093] netlink: 64 bytes leftover after parsing attributes in process `syz.3.482'. [ 129.681741][ T8093] tipc: Invalid UDP bearer configuration [ 129.681793][ T8093] tipc: Enabling of bearer rejected, failed to enable media [ 129.844935][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.852208][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.893162][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.900364][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.981255][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 129.999584][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.157054][ T5860] Bluetooth: hci0: command 0x0c20 tx timeout [ 130.301714][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 130.317903][ T5860] Bluetooth: hci3: command tx timeout [ 130.534321][ T12] hsr_slave_0: left promiscuous mode [ 130.544274][ T12] hsr_slave_1: left promiscuous mode [ 130.589791][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.612886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.636190][ T8170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.491'. [ 130.656614][ T8170] netlink: 'syz.3.491': attribute type 4 has an invalid length. [ 130.669838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.688416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.767025][ T12] veth1_macvtap: left promiscuous mode [ 130.776193][ T12] veth0_macvtap: left promiscuous mode [ 130.793543][ T12] veth1_vlan: left promiscuous mode [ 130.812536][ T12] veth0_vlan: left promiscuous mode [ 131.497840][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.537905][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.945993][ T8177] lo speed is unknown, defaulting to 1000 [ 131.946645][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 131.986322][ T8177] lo speed is unknown, defaulting to 1000 [ 131.989870][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 132.021059][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.057136][ T8177] lo speed is unknown, defaulting to 1000 [ 132.237002][ T5860] Bluetooth: hci0: command 0x0c20 tx timeout [ 132.268252][ T8177] infiniband syz2: set down [ 132.272853][ T8177] infiniband syz2: added lo [ 132.280103][ T8177] syz2: rxe_create_cq: returned err = -12 [ 132.286516][ T8177] infiniband syz2: Couldn't create ib_mad CQ [ 132.317554][ T8177] infiniband syz2: Couldn't open port 1 [ 132.329199][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.351840][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.370947][ T8177] RDS/IB: syz2: added [ 132.375756][ T8177] smc: adding ib device syz2 with port count 1 [ 132.376145][ T8065] bridge_slave_0: entered allmulticast mode [ 132.390320][ T8065] bridge_slave_0: entered promiscuous mode [ 132.405247][ T8224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.499'. [ 132.416881][ T5860] Bluetooth: hci3: command tx timeout [ 132.423942][ T5895] lo speed is unknown, defaulting to 1000 [ 132.426909][ T8177] smc: ib device syz2 port 1 has pnetid [ 132.430286][ T5895] lo speed is unknown, defaulting to 1000 [ 132.454475][ T8177] lo speed is unknown, defaulting to 1000 [ 132.461718][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.475559][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.519573][ T8065] bridge_slave_1: entered allmulticast mode [ 132.552254][ T8065] bridge_slave_1: entered promiscuous mode [ 132.611731][ T7833] veth0_vlan: entered promiscuous mode [ 132.630334][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.667904][ T7833] veth1_vlan: entered promiscuous mode [ 132.690373][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.793312][ T8177] lo speed is unknown, defaulting to 1000 [ 132.868103][ T8065] team0: Port device team_slave_0 added [ 132.908549][ T8065] team0: Port device team_slave_1 added [ 133.044212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.144294][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.151701][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.178080][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.194992][ T7833] veth0_macvtap: entered promiscuous mode [ 133.210205][ T8177] lo speed is unknown, defaulting to 1000 [ 133.233799][ T7833] veth1_macvtap: entered promiscuous mode [ 133.289637][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.296627][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.323290][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.394040][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.404609][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.414555][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.425045][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.440669][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.526626][ T8065] hsr_slave_0: entered promiscuous mode [ 133.538166][ T8065] hsr_slave_1: entered promiscuous mode [ 133.549916][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.557899][ T8065] Cannot create hsr debugfs directory [ 133.565780][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.576747][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.586735][ T7833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.597402][ T7833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.608724][ T7833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.625726][ T8177] lo speed is unknown, defaulting to 1000 [ 133.666469][ T7833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.675822][ T7833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.689968][ T7833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.707655][ T7833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.964885][ T8177] lo speed is unknown, defaulting to 1000 [ 133.972214][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.994240][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.098932][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.117028][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.254530][ T8177] lo speed is unknown, defaulting to 1000 [ 134.477744][ T5860] Bluetooth: hci3: command tx timeout [ 134.719788][ T8065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.782502][ T8065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.817464][ T8065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.849250][ T8065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.003845][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.043970][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.077731][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.084971][ T6472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.114985][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.122180][ T6472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.269811][ T6477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.524716][ T6477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.586259][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.609766][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.621209][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.646094][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'. [ 135.646342][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.667754][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.676053][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.829804][ T6477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.894592][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.063378][ T6477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.341112][ T8330] lo speed is unknown, defaulting to 1000 [ 136.467164][ T6477] bridge_slave_1: left allmulticast mode [ 136.472867][ T6477] bridge_slave_1: left promiscuous mode [ 136.477847][ T8371] Bluetooth: MGMT ver 1.23 [ 136.509706][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.556977][ T5860] Bluetooth: hci3: command tx timeout [ 136.563111][ T6477] bridge_slave_0: left allmulticast mode [ 136.574071][ T6477] bridge_slave_0: left promiscuous mode [ 136.580271][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.013080][ T6477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.023882][ T6477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.035140][ T6477] bond0 (unregistering): Released all slaves [ 137.060589][ T8377] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.069222][ T8377] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.077560][ T8377] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.085758][ T8377] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.094711][ T8384] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 137.234247][ T8384] gre1: entered promiscuous mode [ 137.411727][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.528'. [ 137.423727][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.528'. [ 137.485798][ T8065] veth0_vlan: entered promiscuous mode [ 137.585791][ T8065] veth1_vlan: entered promiscuous mode [ 137.757392][ T5860] Bluetooth: hci0: command tx timeout [ 137.841885][ T8412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.530'. [ 138.043972][ T6477] hsr_slave_0: left promiscuous mode [ 138.083001][ T6477] hsr_slave_1: left promiscuous mode [ 138.106373][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.118246][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.132903][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.140884][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.163454][ T6477] veth1_macvtap: left promiscuous mode [ 138.169178][ T6477] veth0_macvtap: left promiscuous mode [ 138.174827][ T6477] veth1_vlan: left promiscuous mode [ 138.180242][ T6477] veth0_vlan: left promiscuous mode [ 138.705195][ T6477] team0 (unregistering): Port device team_slave_1 removed [ 138.765880][ T6477] team0 (unregistering): Port device team_slave_0 removed [ 139.132701][ T8065] veth0_macvtap: entered promiscuous mode [ 139.206902][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 139.239800][ T8065] veth1_macvtap: entered promiscuous mode [ 139.405996][ T8442] Driver unsupported XDP return value 0 on prog (id 166) dev N/A, expect packet loss! [ 139.420419][ T8453] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 139.438459][ T8453] netlink: 'syz.1.538': attribute type 3 has an invalid length. [ 139.466852][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.484991][ T8453] netlink: 216 bytes leftover after parsing attributes in process `syz.1.538'. [ 139.496188][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.518436][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.535461][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.558104][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.702954][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.724148][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.745413][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 139.763976][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.816762][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.837474][ T5860] Bluetooth: hci0: command tx timeout [ 139.844377][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.863825][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.900991][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.929387][ T8330] bridge_slave_0: entered allmulticast mode [ 139.947921][ T8330] bridge_slave_0: entered promiscuous mode [ 140.022290][ T8065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.051274][ T8065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.065853][ T8065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.087618][ T8065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.114667][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.133607][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.148437][ T8330] bridge_slave_1: entered allmulticast mode [ 140.162527][ T8330] bridge_slave_1: entered promiscuous mode [ 140.163797][ T8480] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 140.295891][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.312414][ T8489] netlink: 'syz.3.544': attribute type 39 has an invalid length. [ 140.345567][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.352693][ T8492] netlink: 152 bytes leftover after parsing attributes in process `syz.2.546'. [ 140.443534][ T8330] team0: Port device team_slave_0 added [ 140.477593][ T8330] team0: Port device team_slave_1 added [ 140.534565][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.552895][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.599827][ T5895] IPVS: starting estimator thread 0... [ 140.626183][ T8330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.703219][ T8497] IPVS: using max 26 ests per chain, 62400 per kthread [ 140.714630][ T8490] lo speed is unknown, defaulting to 1000 [ 140.715633][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.745812][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.811133][ T8330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.920524][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 140.934608][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.961468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.118087][ T6472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.125960][ T6472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.186253][ T8330] hsr_slave_0: entered promiscuous mode [ 141.214725][ T8330] hsr_slave_1: entered promiscuous mode [ 141.253357][ T8330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.262361][ T8330] Cannot create hsr debugfs directory [ 141.542631][ T8529] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 141.608731][ T8503] lo speed is unknown, defaulting to 1000 [ 141.916926][ T5860] Bluetooth: hci0: command tx timeout [ 141.942526][ T6472] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.109197][ T6472] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.307203][ T6472] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.350299][ T8511] lo speed is unknown, defaulting to 1000 [ 142.474145][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.484616][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.494148][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.502653][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.510742][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.518640][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.565714][ T6472] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.737384][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 142.906625][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 142.969055][ T8549] lo speed is unknown, defaulting to 1000 [ 143.282752][ T6472] bridge_slave_1: left allmulticast mode [ 143.290001][ T6472] bridge_slave_1: left promiscuous mode [ 143.297286][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.340134][ T6472] bridge_slave_0: left allmulticast mode [ 143.345845][ T6472] bridge_slave_0: left promiscuous mode [ 143.366048][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.948805][ T6472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.959446][ T6472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.970238][ T6472] bond0 (unregistering): Released all slaves [ 143.996923][ T5860] Bluetooth: hci0: command tx timeout [ 144.006620][ T8330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.121851][ T8330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.134690][ T8330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.149589][ T8330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.561635][ T5860] Bluetooth: hci3: command tx timeout [ 144.671499][ T8549] chnl_net:caif_netlink_parms(): no params data found [ 144.847663][ T6472] hsr_slave_0: left promiscuous mode [ 144.871008][ T6472] hsr_slave_1: left promiscuous mode [ 144.885434][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.907740][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.938432][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.946274][ T6472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.034849][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 145.053693][ T6472] veth1_macvtap: left promiscuous mode [ 145.061576][ T6472] veth0_macvtap: left promiscuous mode [ 145.067256][ T6472] veth1_vlan: left promiscuous mode [ 145.072620][ T6472] veth0_vlan: left promiscuous mode [ 145.701282][ T6472] team0 (unregistering): Port device team_slave_1 removed [ 145.756554][ T6472] team0 (unregistering): Port device team_slave_0 removed [ 146.374927][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.413578][ T8614] netlink: 'syz.3.564': attribute type 21 has an invalid length. [ 146.446874][ T8614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.564'. [ 146.456063][ T8614] netlink: 'syz.3.564': attribute type 4 has an invalid length. [ 146.480487][ T8614] netlink: 'syz.3.564': attribute type 5 has an invalid length. [ 146.504745][ T8614] netlink: 3 bytes leftover after parsing attributes in process `syz.3.564'. [ 146.546112][ T8619] veth0_vlan: entered allmulticast mode [ 146.636945][ T5860] Bluetooth: hci3: command tx timeout [ 146.709747][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.723804][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.730927][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.787443][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.794618][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.847879][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.855702][ T8549] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.868885][ T8549] bridge_slave_0: entered allmulticast mode [ 146.876397][ T8549] bridge_slave_0: entered promiscuous mode [ 146.913598][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.922597][ T8549] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.935061][ T8549] bridge_slave_1: entered allmulticast mode [ 146.951636][ T8549] bridge_slave_1: entered promiscuous mode [ 147.033161][ T8549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.065308][ T8549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.133149][ T8549] team0: Port device team_slave_0 added [ 147.151554][ T8549] team0: Port device team_slave_1 added [ 147.200121][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.215968][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.248482][ T8549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.263302][ T8549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.271048][ T8549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.305173][ T8549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.360279][ T8549] hsr_slave_0: entered promiscuous mode [ 147.366542][ T8549] hsr_slave_1: entered promiscuous mode [ 147.375592][ T8549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.384560][ T8549] Cannot create hsr debugfs directory [ 147.433007][ T8696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.569'. [ 147.514031][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.524542][ T8698] xt_limit: Overflow, try lower: 65536/2147483648 [ 147.575485][ T8698] xt_limit: Overflow, try lower: 65536/2147483648 [ 147.811153][ T8330] veth0_vlan: entered promiscuous mode [ 147.881657][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.575'. [ 147.917752][ T8330] veth1_vlan: entered promiscuous mode [ 147.979746][ T8330] veth0_macvtap: entered promiscuous mode [ 148.046433][ T8330] veth1_macvtap: entered promiscuous mode [ 148.047811][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 148.082916][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.576'. [ 148.128991][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.140972][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.167407][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.201026][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.228435][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.255594][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.280142][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.301466][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.314609][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.336213][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.394641][ T8735] syzkaller0: entered promiscuous mode [ 148.400565][ T8735] syzkaller0: entered allmulticast mode [ 148.491447][ T8330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.500580][ T8330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.509445][ T8330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.518684][ T8330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.719740][ T5849] Bluetooth: hci3: command tx timeout [ 149.757157][ T5849] Bluetooth: hci0: command 0x0401 tx timeout [ 149.758152][ T5860] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 150.278162][ T8549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.295109][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.323104][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.358067][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 150.392556][ T8549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.464412][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 150.517876][ T8549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.542654][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.557739][ T8549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.580966][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.678031][ T8783] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.702745][ T8783] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.796855][ T5860] Bluetooth: hci3: command tx timeout [ 150.829036][ T8783] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.844412][ T8783] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.924667][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.946264][ T8783] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.961859][ T8783] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.005265][ T8549] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.064910][ T8783] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.076952][ T8783] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.097910][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.105061][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.114610][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.121822][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.171220][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.232199][ T8783] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.242177][ T8783] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.267901][ T8783] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.293687][ T8783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.338929][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.357138][ T8783] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.367509][ T8783] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.385241][ T8783] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.400213][ T8783] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.461782][ T8549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.545160][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.628328][ T8549] veth0_vlan: entered promiscuous mode [ 151.639149][ T8549] veth1_vlan: entered promiscuous mode [ 151.659803][ T8549] veth0_macvtap: entered promiscuous mode [ 151.668512][ T8549] veth1_macvtap: entered promiscuous mode [ 151.722389][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.744704][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 151.756969][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.786733][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.816846][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.837300][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.856777][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.878578][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.917652][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.984449][ T8808] vlan0: entered promiscuous mode [ 152.068092][ T8815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.122890][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.158752][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.179320][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.181881][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.196939][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.217821][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.221250][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.239530][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.254117][ T8549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.265207][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.270886][ T8549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.283469][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.290046][ T8549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.326421][ T8549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.335748][ T8549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.344772][ T8549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.353634][ T8549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.622494][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.657284][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.715613][ T12] bridge_slave_1: left allmulticast mode [ 152.739022][ T12] bridge_slave_1: left promiscuous mode [ 152.744774][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.779623][ T12] bridge_slave_0: left allmulticast mode [ 152.785285][ T12] bridge_slave_0: left promiscuous mode [ 152.793095][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.104987][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.116087][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.128038][ T12] bond0 (unregistering): Released all slaves [ 153.157739][ T8820] lo speed is unknown, defaulting to 1000 [ 153.203943][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.236911][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.333130][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 153.382968][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 153.404480][ T8869] netlink: 'syz.2.602': attribute type 4 has an invalid length. [ 153.423764][ T8869] netlink: 152 bytes leftover after parsing attributes in process `syz.2.602'. [ 153.695469][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 153.872318][ T8889] netlink: 'syz.3.606': attribute type 21 has an invalid length. [ 153.892130][ T8889] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.901285][ T8889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.908945][ T8889] IPv6: NLM_F_CREATE should be set when creating new route [ 153.916430][ T8889] IPv6: NLM_F_CREATE should be set when creating new route [ 153.923738][ T8889] IPv6: NLM_F_CREATE should be set when creating new route [ 154.082591][ T8906] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 154.127018][ T8906] netlink: 216 bytes leftover after parsing attributes in process `syz.3.609'. [ 154.136034][ T8906] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 154.309960][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 154.398031][ T5860] Bluetooth: hci0: command tx timeout [ 154.817782][ T12] hsr_slave_0: left promiscuous mode [ 154.830147][ T12] hsr_slave_1: left promiscuous mode [ 154.839003][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.846428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.868911][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.887474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.910012][ T12] veth1_macvtap: left promiscuous mode [ 154.915715][ T12] veth0_macvtap: left promiscuous mode [ 154.921576][ T12] veth1_vlan: left promiscuous mode [ 154.927883][ T12] veth0_vlan: left promiscuous mode [ 155.438456][ T12] team0 (unregistering): Port device team_slave_1 removed [ 155.516274][ T12] team0 (unregistering): Port device team_slave_0 removed [ 155.581245][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.592517][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.604408][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.621144][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.631581][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.639263][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.934593][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.941860][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.951611][ T8820] bridge_slave_0: entered allmulticast mode [ 155.959209][ T8820] bridge_slave_0: entered promiscuous mode [ 156.015242][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 156.036899][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 156.064832][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 156.117685][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 156.129726][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.137486][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.149639][ T8964] xt_l2tp: invalid flags combination: c [ 156.155882][ T8820] bridge_slave_1: entered allmulticast mode [ 156.166255][ T8820] bridge_slave_1: entered promiscuous mode [ 156.262329][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.274390][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.354838][ T8820] team0: Port device team_slave_0 added [ 156.402710][ T8820] team0: Port device team_slave_1 added [ 156.479134][ T5849] Bluetooth: hci0: command tx timeout [ 156.549111][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.571565][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.602388][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.640328][ T8959] lo speed is unknown, defaulting to 1000 [ 156.649511][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.659577][ T8982] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.675971][ T8982] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 156.683803][ T8982] team0: Device ipvlan2 is already an upper device of the team interface [ 156.770236][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.777370][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.822455][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.848617][ T8986] __nla_validate_parse: 52 callbacks suppressed [ 156.848636][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 156.868511][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 156.881114][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'. [ 156.893706][ T8986] Bluetooth: MGMT ver 1.23 [ 156.960701][ T8820] hsr_slave_0: entered promiscuous mode [ 156.987071][ T8820] hsr_slave_1: entered promiscuous mode [ 156.993878][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.029224][ T8820] Cannot create hsr debugfs directory [ 157.146157][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.316566][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.428390][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.678915][ T5849] Bluetooth: hci3: command tx timeout [ 157.702547][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.742868][ T9039] netlink: 'syz.2.636': attribute type 8 has an invalid length. [ 157.754856][ T9030] ip6gretap1: entered promiscuous mode [ 157.765359][ T9038] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 157.767321][ T9030] ip6gretap1: entered allmulticast mode [ 157.902047][ T9040] bridge7: entered promiscuous mode [ 157.915637][ T9040] bridge7: entered allmulticast mode [ 158.165537][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 158.262256][ T9053] hsr0: left promiscuous mode [ 158.316314][ T9059] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 158.329672][ T8959] chnl_net:caif_netlink_parms(): no params data found [ 158.372373][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 158.467035][ T1150] bridge_slave_1: left allmulticast mode [ 158.472740][ T1150] bridge_slave_1: left promiscuous mode [ 158.521471][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.560978][ T1150] bridge_slave_0: left allmulticast mode [ 158.565045][ T5849] Bluetooth: hci0: command tx timeout [ 158.583807][ T1150] bridge_slave_0: left promiscuous mode [ 158.601847][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.632258][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 158.668697][ T9075] xt_l2tp: v2 tid > 0xffff: 150994944 [ 158.690793][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 158.710921][ T9079] netlink: 'syz.2.642': attribute type 15 has an invalid length. [ 158.981427][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.992902][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.003194][ T1150] bond0 (unregistering): Released all slaves [ 159.039177][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 159.058372][ T9048] lo speed is unknown, defaulting to 1000 [ 159.629231][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 159.718467][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.727571][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.736040][ T8959] bridge_slave_0: entered allmulticast mode [ 159.743456][ T8959] bridge_slave_0: entered promiscuous mode [ 159.751778][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.757468][ T5849] Bluetooth: hci3: command tx timeout [ 159.766154][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.773480][ T8959] bridge_slave_1: entered allmulticast mode [ 159.783669][ T8959] bridge_slave_1: entered promiscuous mode [ 159.840463][ T9107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 159.896568][ T9107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.009860][ T9107] vlan3: entered promiscuous mode [ 160.015440][ T9107] dummy0: entered promiscuous mode [ 160.029646][ T9107] team0: Port device vlan3 added [ 160.090485][ T9109] lo speed is unknown, defaulting to 1000 [ 160.099734][ T9120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.653'. [ 160.112902][ T8959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.134048][ T8959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.195201][ T8959] team0: Port device team_slave_0 added [ 160.231546][ T8959] team0: Port device team_slave_1 added [ 160.268723][ T8820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.289877][ T8820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.308860][ T9123] tipc: Started in network mode [ 160.324016][ T9123] tipc: Node identity ffffffff, cluster identity 4711 [ 160.393509][ T9123] tipc: Node number set to 4294967295 [ 160.416559][ T8820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.434943][ T8820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.452449][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.469043][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.534929][ T8959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.621517][ T1150] hsr_slave_0: left promiscuous mode [ 160.638836][ T5849] Bluetooth: hci0: command tx timeout [ 160.645138][ T1150] hsr_slave_1: left promiscuous mode [ 160.652289][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.666990][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.679032][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.686598][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.711518][ T1150] veth1_macvtap: left promiscuous mode [ 160.718406][ T1150] veth0_macvtap: left promiscuous mode [ 160.724127][ T1150] veth1_vlan: left promiscuous mode [ 160.734081][ T1150] veth0_vlan: left promiscuous mode [ 160.769597][ T9129] netlink: 'syz.2.657': attribute type 11 has an invalid length. [ 161.115516][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 161.162165][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 161.521519][ T8959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.529103][ T8959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.557657][ T8959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.678321][ T8959] hsr_slave_0: entered promiscuous mode [ 161.694663][ T8959] hsr_slave_1: entered promiscuous mode [ 161.715253][ T8959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.734503][ T8959] Cannot create hsr debugfs directory [ 161.837139][ T5849] Bluetooth: hci3: command tx timeout [ 162.006111][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.037500][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.047480][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.051626][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.067148][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.210322][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.270066][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.277248][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.292190][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.299384][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.405434][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.662'. [ 162.410787][ T8820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.721752][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.762758][ T8959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.768567][ T9160] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.793741][ T8959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.838679][ T8820] veth0_vlan: entered promiscuous mode [ 162.851238][ T8820] veth1_vlan: entered promiscuous mode [ 162.873686][ T8820] veth0_macvtap: entered promiscuous mode [ 162.882648][ T8820] veth1_macvtap: entered promiscuous mode [ 162.897442][ T8959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.924650][ T8959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.963302][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.979556][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.989640][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.000122][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.011170][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.021819][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.032370][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.042387][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.053220][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.064471][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.075208][ T8820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.084024][ T8820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.092811][ T8820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.101946][ T8820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.136035][ T9171] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 163.237172][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.246001][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.272263][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.282879][ T9171] ieee802154 phy0 wpan0: encryption failed: -126 [ 163.309178][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.334149][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.429348][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.433689][ T9180] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 163.471850][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.600833][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.652036][ T8959] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.823190][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.832384][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.846584][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.853808][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.877200][ T9171] lo speed is unknown, defaulting to 1000 [ 163.901024][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.908186][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.917162][ T5849] Bluetooth: hci3: command tx timeout [ 164.157795][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.231521][ T9210] tipc: New replicast peer: 255.255.255.255 [ 164.253728][ T9210] tipc: Enabled bearer , priority 10 [ 164.777357][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.947319][ T8959] veth0_vlan: entered promiscuous mode [ 165.019553][ T8959] veth1_vlan: entered promiscuous mode [ 165.100170][ T8959] veth0_macvtap: entered promiscuous mode [ 165.122564][ T8959] veth1_macvtap: entered promiscuous mode [ 165.150007][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.164029][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.175187][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.206877][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.226729][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.239314][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.257891][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.275093][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.305712][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.326964][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.341542][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.360201][ T8959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.374115][ T8959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.386146][ T8959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.403350][ T8959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.413142][ T8959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.423410][ T8959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.435791][ T8959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.504013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.522969][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.558562][ T6478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.566450][ T6478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.682192][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.817941][ T9262] dccp_v4_rcv: dropped packet with invalid checksum [ 166.129600][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.140298][ T9286] xt_recent: hitcount (1073741824) is larger than allowed maximum (65535) [ 166.316967][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.326071][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.334474][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.357097][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.374886][ T5860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.386642][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.431094][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.483015][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 166.503456][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.627986][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'. [ 166.693816][ T1150] bridge_slave_1: left allmulticast mode [ 166.710419][ T1150] bridge_slave_1: left promiscuous mode [ 166.728239][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.749328][ T1150] bridge_slave_0: left allmulticast mode [ 166.763556][ T1150] bridge_slave_0: left promiscuous mode [ 166.781253][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.450525][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'. [ 167.572105][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.582263][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.590353][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.636176][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.663181][ T5860] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.680843][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.723261][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.734015][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.744283][ T1150] bond0 (unregistering): Released all slaves [ 167.756236][ T9296] lo speed is unknown, defaulting to 1000 [ 167.756285][ T9324] netlink: 'syz.1.686': attribute type 12 has an invalid length. [ 167.776328][ T9351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 167.777608][ T9324] netlink: 'syz.1.686': attribute type 29 has an invalid length. [ 167.793736][ T9324] netlink: 148 bytes leftover after parsing attributes in process `syz.1.686'. [ 168.111270][ T9361] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 168.290725][ T9345] lo speed is unknown, defaulting to 1000 [ 168.477692][ T5860] Bluetooth: hci0: command tx timeout [ 168.970217][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 169.068332][ T1150] hsr_slave_0: left promiscuous mode [ 169.078417][ T9395] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 169.099200][ T1150] hsr_slave_1: left promiscuous mode [ 169.106494][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.114663][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.123723][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.132159][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.157106][ T1150] veth1_macvtap: left promiscuous mode [ 169.162870][ T1150] veth0_macvtap: left promiscuous mode [ 169.169314][ T1150] veth1_vlan: left promiscuous mode [ 169.174853][ T1150] veth0_vlan: left promiscuous mode [ 169.708553][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 169.755304][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 169.762731][ T5860] Bluetooth: hci3: command tx timeout [ 170.385953][ T9392] lo speed is unknown, defaulting to 1000 [ 170.570728][ T5860] Bluetooth: hci0: command tx timeout [ 170.633401][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.655626][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.662953][ T9296] bridge_slave_0: entered allmulticast mode [ 170.670592][ T9296] bridge_slave_0: entered promiscuous mode [ 170.690287][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.697514][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.704757][ T9296] bridge_slave_1: entered allmulticast mode [ 170.724861][ T9296] bridge_slave_1: entered promiscuous mode [ 170.750223][ T9345] chnl_net:caif_netlink_parms(): no params data found [ 170.846343][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.903290][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.088590][ T9400] lo speed is unknown, defaulting to 1000 [ 171.089282][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.117440][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.124936][ T9345] bridge_slave_0: entered allmulticast mode [ 171.132138][ T9345] bridge_slave_0: entered promiscuous mode [ 171.143178][ T9296] team0: Port device team_slave_0 added [ 171.172696][ T9296] team0: Port device team_slave_1 added [ 171.219243][ T9429] netlink: 'syz.2.702': attribute type 10 has an invalid length. [ 171.253978][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.272819][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.293480][ T9345] bridge_slave_1: entered allmulticast mode [ 171.309702][ T9345] bridge_slave_1: entered promiscuous mode [ 171.412649][ T9429] team0: Device hsr_slave_0 failed to register rx_handler [ 171.466785][ T9429] syz.2.702 (9429) used greatest stack depth: 18352 bytes left [ 171.590112][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.598835][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.631466][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.652039][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.660351][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.687302][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.739877][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.787611][ T9345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.826221][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.847040][ T5860] Bluetooth: hci3: command tx timeout [ 171.855355][ T9345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.864726][ T9439] veth0_to_hsr: entered promiscuous mode [ 171.974779][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.997919][ T9296] hsr_slave_0: entered promiscuous mode [ 172.006202][ T9296] hsr_slave_1: entered promiscuous mode [ 172.028681][ T9296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.043253][ T9296] Cannot create hsr debugfs directory [ 172.121648][ T9439] hsr_slave_0 (unregistering): left promiscuous mode [ 172.174195][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.325164][ T9456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.705'. [ 172.336063][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 172.358610][ T9345] team0: Port device team_slave_0 added [ 172.371677][ T9345] team0: Port device team_slave_1 added [ 172.460426][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 172.489704][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.500784][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.528725][ T9345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.537703][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 172.620029][ T9345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.627608][ T9345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.653618][ T5860] Bluetooth: hci0: command tx timeout [ 172.659495][ T9345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.691407][ T1150] bridge_slave_1: left allmulticast mode [ 172.697468][ T1150] bridge_slave_1: left promiscuous mode [ 172.703119][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.796827][ T1150] bridge_slave_0: left allmulticast mode [ 172.802666][ T1150] bridge_slave_0: left promiscuous mode [ 172.829257][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.359814][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.371094][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.382589][ T1150] bond0 (unregistering): Released all slaves [ 173.396176][ T9462] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 173.558733][ T9345] hsr_slave_0: entered promiscuous mode [ 173.565077][ T9345] hsr_slave_1: entered promiscuous mode [ 173.571977][ T9345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.581282][ T9345] Cannot create hsr debugfs directory [ 173.829861][ T9490] lo speed is unknown, defaulting to 1000 [ 173.917567][ T5860] Bluetooth: hci3: command tx timeout [ 174.019983][ T9495] can: request_module (can-proto-0) failed. [ 174.314132][ T1150] hsr_slave_0: left promiscuous mode [ 174.324771][ T1150] hsr_slave_1: left promiscuous mode [ 174.331526][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.343886][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.352046][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.359870][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.376351][ T1150] veth1_macvtap: left promiscuous mode [ 174.382175][ T1150] veth0_macvtap: left promiscuous mode [ 174.387892][ T1150] veth1_vlan: left promiscuous mode [ 174.393254][ T1150] veth0_vlan: left promiscuous mode [ 174.722689][ T5860] Bluetooth: hci0: command tx timeout [ 174.781253][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 174.874890][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 175.459083][ T9510] netlink: 256 bytes leftover after parsing attributes in process `syz.3.713'. [ 175.605668][ T9296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.676003][ T9296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.707729][ T9296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.720966][ T9296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.948198][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.996883][ T5860] Bluetooth: hci3: command tx timeout [ 176.079227][ T9345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.145675][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.180845][ T9345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.243971][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 176.266742][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 176.289168][ T9345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.329045][ T9345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.395828][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.403016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.442659][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.449896][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.710914][ T9345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.772914][ T9345] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.795179][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.802404][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.818231][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.825432][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.876498][ T9345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.979286][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.110128][ T9296] veth0_vlan: entered promiscuous mode [ 177.150207][ T9296] veth1_vlan: entered promiscuous mode [ 177.224169][ T9296] veth0_macvtap: entered promiscuous mode [ 177.243825][ T9296] veth1_macvtap: entered promiscuous mode [ 177.285181][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.303032][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.330247][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.367135][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.394763][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.430404][ T9584] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 177.489759][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.510451][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.527252][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 177.543057][ T9296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.554121][ T9296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.605057][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.651321][ T9345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.717844][ T9296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.726602][ T9296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.778304][ T9296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.793438][ T9296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.849073][ T9607] nftables ruleset with unbound chain [ 178.065185][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.097469][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.108134][ T9620] netlink: 'syz.2.731': attribute type 2 has an invalid length. [ 178.147586][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.161516][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.428407][ T9345] veth0_vlan: entered promiscuous mode [ 178.471459][ T9345] veth1_vlan: entered promiscuous mode [ 178.529366][ T9345] veth0_macvtap: entered promiscuous mode [ 178.569994][ T9345] veth1_macvtap: entered promiscuous mode [ 178.627709][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.649826][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.673283][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.697557][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.731208][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.757050][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.768440][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.784385][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.811377][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.840592][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.871709][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.891391][ T9345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.902894][ T9345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.933394][ T9345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.012434][ T9345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.040156][ T9345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.058030][ T9345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.067406][ T9345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.127285][ T9669] netlink: 'syz.1.740': attribute type 23 has an invalid length. [ 179.170056][ T9669] netlink: 244 bytes leftover after parsing attributes in process `syz.1.740'. [ 179.278537][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.556383][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.587025][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.594971][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.628835][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.640359][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.924753][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.019905][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.342289][ T12] bridge_slave_1: left allmulticast mode [ 180.360393][ T12] bridge_slave_1: left promiscuous mode [ 180.366869][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.412422][ T12] bridge_slave_0: left allmulticast mode [ 180.419636][ T12] bridge_slave_0: left promiscuous mode [ 180.425374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.517308][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.526131][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.542180][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.551252][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.559459][ T5153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.567391][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.743424][ T9723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.745'. [ 180.921014][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.931178][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.939596][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.947865][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.962897][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.970883][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.044327][ T9733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.061941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.075933][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.093483][ T12] bond0 (unregistering): Released all slaves [ 181.202949][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 181.212515][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 181.710067][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 181.730787][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 181.871441][ T9728] lo speed is unknown, defaulting to 1000 [ 182.068791][ T9778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 182.126851][ T9715] lo speed is unknown, defaulting to 1000 [ 182.422819][ T9797] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 182.465604][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 182.543399][ T9797] wlan1: mtu less than device minimum [ 182.565666][ T9797] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 182.637565][ T5860] Bluetooth: hci0: command tx timeout [ 182.997040][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.005437][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.025420][ T9728] bridge_slave_0: entered allmulticast mode [ 183.038150][ T5860] Bluetooth: hci3: command tx timeout [ 183.039300][ T9728] bridge_slave_0: entered promiscuous mode [ 183.076300][ T12] hsr_slave_0: left promiscuous mode [ 183.094868][ T12] hsr_slave_1: left promiscuous mode [ 183.105659][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.120306][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.138568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.151395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.176016][ T12] veth1_macvtap: left promiscuous mode [ 183.188890][ T12] veth0_macvtap: left promiscuous mode [ 183.195340][ T12] veth1_vlan: left promiscuous mode [ 183.201642][ T12] veth0_vlan: left promiscuous mode [ 183.490956][ T9846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.765'. [ 183.836086][ T12] team0 (unregistering): Port device team_slave_1 removed [ 183.885626][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.340445][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.347928][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.355120][ T9728] bridge_slave_1: entered allmulticast mode [ 184.363263][ T9728] bridge_slave_1: entered promiscuous mode [ 184.619853][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 184.645097][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 184.675872][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.684489][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.718866][ T5153] Bluetooth: hci0: command tx timeout [ 184.874974][ T9852] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 184.946381][ T9880] netlink: 'syz.1.772': attribute type 21 has an invalid length. [ 184.962747][ T9880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.985373][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.038541][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.117080][ T5153] Bluetooth: hci3: command tx timeout [ 185.129594][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 185.182501][ T9728] team0: Port device team_slave_0 added [ 185.208869][ T9728] team0: Port device team_slave_1 added [ 185.346399][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.359683][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.386844][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.404591][ T9900] ------------[ cut here ]------------ [ 185.410375][ T9900] WARNING: CPU: 0 PID: 9900 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 185.410767][ T9715] chnl_net:caif_netlink_parms(): no params data found [ 185.419813][ T9900] Modules linked in: [ 185.419851][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.2.777 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.419876][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 185.419890][ T9900] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 185.419920][ T9900] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 185.419942][ T9900] RSP: 0018:ffffc90003aff078 EFLAGS: 00010283 [ 185.419961][ T9900] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 185.419978][ T9900] RDX: ffffc90004fb1000 RSI: 0000000000000b44 RDI: 0000000000000b45 [ 185.419991][ T9900] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11006072c94 [ 185.420006][ T9900] R10: dffffc0000000000 R11: ffffed1006072c95 R12: dffffc0000000000 [ 185.514997][ T9900] R13: ffff8880303963c0 R14: 00000000ffffffea R15: 0000000000000000 [ 185.523046][ T9900] FS: 00007fdcb18b76c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 185.532043][ T9900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.538779][ T9900] CR2: 0000001b30c17ff8 CR3: 0000000032eb0000 CR4: 00000000003526f0 [ 185.546840][ T9900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.554849][ T9900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.563090][ T9900] Call Trace: [ 185.566385][ T9900] [ 185.569380][ T9900] ? __warn+0x168/0x4e0 [ 185.573641][ T9900] ? sk_skb_reason_drop+0x87/0x380 [ 185.578853][ T9900] ? report_bug+0x2b3/0x500 [ 185.583385][ T9900] ? sk_skb_reason_drop+0x87/0x380 [ 185.588591][ T9900] ? handle_bug+0x60/0x90 [ 185.592942][ T9900] ? exc_invalid_op+0x1a/0x50 [ 185.597701][ T9900] ? asm_exc_invalid_op+0x1a/0x20 [ 185.602751][ T9900] ? sk_skb_reason_drop+0x76/0x380 [ 185.607937][ T9900] ? sk_skb_reason_drop+0x86/0x380 [ 185.613083][ T9900] ? sk_skb_reason_drop+0x87/0x380 [ 185.618290][ T9900] ? sk_skb_reason_drop+0x86/0x380 [ 185.623427][ T9900] ? ip_rcv_finish_core+0x129f/0x1b50 [ 185.628889][ T9900] ip_rcv_finish_core+0xfde/0x1b50 [ 185.634033][ T9900] ip_sublist_rcv+0x3b1/0xab0 [ 185.638798][ T9900] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 185.644035][ T9900] ? skb_orphan+0xae/0xd0 [ 185.648447][ T9900] ? __pfx_ip_rcv_finish+0x10/0x10 [ 185.653592][ T9900] ip_list_rcv+0x42b/0x480 [ 185.658091][ T9900] ? __pfx_ip_list_rcv+0x10/0x10 [ 185.663057][ T9900] ? __pfx_ip_list_rcv+0x10/0x10 [ 185.668169][ T9900] __netif_receive_skb_list_core+0x94e/0x980 [ 185.674187][ T9900] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 185.680863][ T9900] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 185.687449][ T9900] ? read_tsc+0x9/0x20 [ 185.691549][ T9900] ? timekeeping_get_ns+0x2c0/0x420 [ 185.696838][ T9900] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 185.703197][ T9900] netif_receive_skb_list_internal+0xa51/0xe30 [ 185.709476][ T9900] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 185.715837][ T9900] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 185.722609][ T9900] ? __pfx_eth_type_trans+0x10/0x10 [ 185.727888][ T9900] ? __phys_addr+0xba/0x170 [ 185.732423][ T9900] ? build_skb_around+0x111/0x260 [ 185.737565][ T9900] ? __xdp_build_skb_from_frame+0x313/0x650 [ 185.743530][ T9900] netif_receive_skb_list+0x55/0x4b0 [ 185.748902][ T9900] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 185.754379][ T9900] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 185.760365][ T9900] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 185.765936][ T9900] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 185.771796][ T9900] ? synchronize_rcu+0x11b/0x360 [ 185.776800][ T9900] ? __pfx_synchronize_rcu+0x10/0x10 [ 185.782129][ T9900] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 185.788456][ T9900] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 185.794457][ T9900] ? _copy_from_user+0x99/0xc0 [ 185.799376][ T9900] ? bpf_test_init+0x15a/0x180 [ 185.804175][ T9900] ? xdp_convert_md_to_buff+0x5b/0x330 [ 185.809705][ T9900] bpf_prog_test_run_xdp+0x805/0x11e0 [ 185.815100][ T9900] ? __pfx_lock_release+0x10/0x10 [ 185.820184][ T9900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.826005][ T9900] ? __fget_files+0x29/0x470 [ 185.830660][ T9900] ? fput+0x1a8/0x230 [ 185.834676][ T9900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 185.840544][ T9900] bpf_prog_test_run+0x2e4/0x360 [ 185.845510][ T9900] __sys_bpf+0x48d/0x810 [ 185.849821][ T9900] ? __pfx___sys_bpf+0x10/0x10 [ 185.854627][ T9900] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.860720][ T9900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.867130][ T9900] ? do_syscall_64+0x100/0x230 [ 185.871920][ T9900] __x64_sys_bpf+0x7c/0x90 [ 185.876536][ T9900] do_syscall_64+0xf3/0x230 [ 185.881086][ T9900] ? clear_bhb_loop+0x35/0x90 [ 185.885786][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.891735][ T9900] RIP: 0033:0x7fdcb0b7e719 [ 185.896166][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.915859][ T9900] RSP: 002b:00007fdcb18b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.924345][ T9900] RAX: ffffffffffffffda RBX: 00007fdcb0d35f80 RCX: 00007fdcb0b7e719 [ 185.932379][ T9900] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 185.940425][ T9900] RBP: 00007fdcb0bf175e R08: 0000000000000000 R09: 0000000000000000 [ 185.948489][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.956478][ T9900] R13: 0000000000000000 R14: 00007fdcb0d35f80 R15: 00007ffefef2c4b8 [ 185.964524][ T9900] [ 185.967611][ T9900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.974901][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.2.777 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 185.985503][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 185.995554][ T9900] Call Trace: [ 185.998840][ T9900] [ 186.001755][ T9900] dump_stack_lvl+0x241/0x360 [ 186.006428][ T9900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.011647][ T9900] ? __pfx__printk+0x10/0x10 [ 186.016225][ T9900] ? _printk+0xd5/0x120 [ 186.020382][ T9900] ? __init_begin+0x41000/0x41000 [ 186.025419][ T9900] ? vscnprintf+0x5d/0x90 [ 186.029744][ T9900] panic+0x349/0x880 [ 186.033625][ T9900] ? __warn+0x177/0x4e0 [ 186.037765][ T9900] ? __pfx_panic+0x10/0x10 [ 186.042163][ T9900] ? show_trace_log_lvl+0x3b2/0x410 [ 186.047355][ T9900] __warn+0x34b/0x4e0 [ 186.051325][ T9900] ? sk_skb_reason_drop+0x87/0x380 [ 186.056425][ T9900] report_bug+0x2b3/0x500 [ 186.060748][ T9900] ? sk_skb_reason_drop+0x87/0x380 [ 186.065846][ T9900] handle_bug+0x60/0x90 [ 186.069998][ T9900] exc_invalid_op+0x1a/0x50 [ 186.074531][ T9900] asm_exc_invalid_op+0x1a/0x20 [ 186.079369][ T9900] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 186.085077][ T9900] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 186.104667][ T9900] RSP: 0018:ffffc90003aff078 EFLAGS: 00010283 [ 186.110730][ T9900] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 186.118704][ T9900] RDX: ffffc90004fb1000 RSI: 0000000000000b44 RDI: 0000000000000b45 [ 186.126692][ T9900] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11006072c94 [ 186.134682][ T9900] R10: dffffc0000000000 R11: ffffed1006072c95 R12: dffffc0000000000 [ 186.142648][ T9900] R13: ffff8880303963c0 R14: 00000000ffffffea R15: 0000000000000000 [ 186.150611][ T9900] ? sk_skb_reason_drop+0x76/0x380 [ 186.155710][ T9900] ? sk_skb_reason_drop+0x86/0x380 [ 186.160833][ T9900] ? sk_skb_reason_drop+0x86/0x380 [ 186.165950][ T9900] ? ip_rcv_finish_core+0x129f/0x1b50 [ 186.171333][ T9900] ip_rcv_finish_core+0xfde/0x1b50 [ 186.176474][ T9900] ip_sublist_rcv+0x3b1/0xab0 [ 186.181145][ T9900] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 186.186325][ T9900] ? skb_orphan+0xae/0xd0 [ 186.190647][ T9900] ? __pfx_ip_rcv_finish+0x10/0x10 [ 186.195759][ T9900] ip_list_rcv+0x42b/0x480 [ 186.200164][ T9900] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.205449][ T9900] ? __pfx_ip_list_rcv+0x10/0x10 [ 186.210380][ T9900] __netif_receive_skb_list_core+0x94e/0x980 [ 186.216474][ T9900] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 186.223056][ T9900] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 186.229545][ T9900] ? read_tsc+0x9/0x20 [ 186.233600][ T9900] ? timekeeping_get_ns+0x2c0/0x420 [ 186.238790][ T9900] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 186.245125][ T9900] netif_receive_skb_list_internal+0xa51/0xe30 [ 186.251271][ T9900] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 186.257593][ T9900] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 186.264258][ T9900] ? __pfx_eth_type_trans+0x10/0x10 [ 186.269811][ T9900] ? __phys_addr+0xba/0x170 [ 186.274323][ T9900] ? build_skb_around+0x111/0x260 [ 186.279341][ T9900] ? __xdp_build_skb_from_frame+0x313/0x650 [ 186.285228][ T9900] netif_receive_skb_list+0x55/0x4b0 [ 186.290595][ T9900] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 186.296045][ T9900] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 186.301936][ T9900] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 186.307474][ T9900] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 186.313278][ T9900] ? synchronize_rcu+0x11b/0x360 [ 186.318218][ T9900] ? __pfx_synchronize_rcu+0x10/0x10 [ 186.323526][ T9900] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 186.329764][ T9900] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 186.335653][ T9900] ? _copy_from_user+0x99/0xc0 [ 186.340407][ T9900] ? bpf_test_init+0x15a/0x180 [ 186.345162][ T9900] ? xdp_convert_md_to_buff+0x5b/0x330 [ 186.350618][ T9900] bpf_prog_test_run_xdp+0x805/0x11e0 [ 186.355998][ T9900] ? __pfx_lock_release+0x10/0x10 [ 186.361018][ T9900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.366837][ T9900] ? __fget_files+0x29/0x470 [ 186.371475][ T9900] ? fput+0x1a8/0x230 [ 186.375486][ T9900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.381301][ T9900] bpf_prog_test_run+0x2e4/0x360 [ 186.386413][ T9900] __sys_bpf+0x48d/0x810 [ 186.390654][ T9900] ? __pfx___sys_bpf+0x10/0x10 [ 186.395417][ T9900] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.401391][ T9900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.407708][ T9900] ? do_syscall_64+0x100/0x230 [ 186.412478][ T9900] __x64_sys_bpf+0x7c/0x90 [ 186.416904][ T9900] do_syscall_64+0xf3/0x230 [ 186.421424][ T9900] ? clear_bhb_loop+0x35/0x90 [ 186.426109][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.431989][ T9900] RIP: 0033:0x7fdcb0b7e719 [ 186.436420][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.456013][ T9900] RSP: 002b:00007fdcb18b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.464415][ T9900] RAX: ffffffffffffffda RBX: 00007fdcb0d35f80 RCX: 00007fdcb0b7e719 [ 186.472379][ T9900] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 186.480340][ T9900] RBP: 00007fdcb0bf175e R08: 0000000000000000 R09: 0000000000000000 [ 186.488298][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.496257][ T9900] R13: 0000000000000000 R14: 00007fdcb0d35f80 R15: 00007ffefef2c4b8 [ 186.504240][ T9900] [ 186.507392][ T9900] Kernel Offset: disabled [ 186.511713][ T9900] Rebooting in 86400 seconds..