last executing test programs: 1m18.199421413s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 1m5.231716348s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 51.956655698s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 38.365487989s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 24.137873438s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 13.020130436s ago: executing program 3 (id=431): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @null, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x10, 0x5, 0x3, {{0x22, 0x4, 0x0, 0x2f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x7, 0xe, "0ee71e780c91d0672dc8a6ab"}]}, @rr={0x7, 0x7, 0xac, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0xc3, 0x1, 0x8, [{@multicast1}, {@rand_addr=0x64010102, 0x800}, {@loopback, 0x81}, {@broadcast, 0x400}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x5}, {@multicast2, 0x9}]}, @noop, @ssrr={0x89, 0xb, 0x21, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0xd, 0x1, 0x3, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x700, 0x7, 0x1, 0x1, {{0x30, 0x4, 0x3, 0x6, 0xc0, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @local, {[@end, @noop, @timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0xe, [{@loopback, 0x4bf5}, {@remote, 0x5}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0xd, [{@local, 0xe3}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@multicast2, 0x100}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x10000}, {@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0xc, [{@empty, 0x800}]}, @ssrr={0x89, 0x7, 0x6e, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @end, @generic={0x88, 0xe, "8954502dbbddcec0798fe508"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x52, [@loopback, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x20, 0x1, 0x0, 0xa0b6, {{0x1d, 0x4, 0x0, 0x27, 0x74, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x7}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "9f47e7582c330bb9f36259127e1e66"}, {0x1, 0xa, "a00c85133f4329f9"}, {0x2, 0x9, "985a280dcffbab"}, {0x7, 0x8, "e4659e56a52a"}, {0x2, 0x11, "529d1de38049cca689ff2964684f17"}, {0x7, 0x7, "c2a62f776d"}, {0x0, 0x2}, {0x6, 0x3, "c8"}, {0x1, 0x3, 'i'}]}, @end]}}}}}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x1, 0x1}, 0x6) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x2}, 0x2}], 0x1, 0x40, &(0x7f0000000800)={0x0, 0x989680}) (async) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000840)) r5 = epoll_create(0x7df) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x2, 0x3}, 0x100, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'tunl0\x00', r2, 0x7, 0x40, 0xd, 0x1000, {{0x11, 0x4, 0x1, 0x2b, 0x44, 0x66, 0x0, 0xd, 0x4, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x2b, 0x7a, [@multicast2, @broadcast, @rand_addr=0x64010101, @empty, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) epoll_pwait(r3, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x6, 0x360, &(0x7f0000000b00)={[0x8]}, 0x8) write(r0, &(0x7f0000000b40)="5360026b9cb5d2e2ab70bc342067843e8e5ed954b3cf5d004b9fb5a2137e966f1238739b6a8a197444798f2e25798a8248336a16c81144e144f79dccaa94f37e30f854bfd455f370c4b2c7a0006fffa618ad0585e83c539a107c2389f160a273bb43af281318e2f36165141dcd2568265fb33d08a2e585cd830d8935201f94d7b15381423992f100ce752b6ef9bb6e525d68b6165ab6f77ef7d6fab31d429880e5b00a44db4fab8b4e78fd0ee833c0db42ba0e3482654913a8c4", 0xba) (async) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'io'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}, {0x2d, 'net'}]}, 0x2a) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000cc0)={@none, 0x1, 0x5, 0xfff, 0x1000, 0x3, "3dd88020c9da9bc4eb462998640368f2ec3113ec76a90a26efbc1a90a816a21d49e1a9ccb370e52d3fa5c0d61f8ab99bd16b820dcd75791adfe849abf9d20508650d9e99c5338f2edeeb861964901bcd31a6bf3c5653746ad381efb01e84448aa01de9f1ec14c10b364c7dfa75942ce6920521a1c49c835b3ba44aa8c662f7ab"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x1, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000045) epoll_pwait(r0, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x4, 0x100, &(0x7f0000000ec0)={[0x1]}, 0x8) (async) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000f00)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netdevsim0\x00'}}, 0x1e) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000fc0)={'ip_vti0\x00', &(0x7f0000000f40)={'syztnl1\x00', r4, 0x20, 0x1, 0x8001, 0x9, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x0, [{@loopback, 0x9}, {@multicast2, 0xe0}, {@multicast2, 0x85}]}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001000)={0x10, 0x4, 0x66, 0x6, 0x8}) 3.277313401s ago: executing program 4 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="8c16000000000000000000000000000000002308", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x301}, 0x14}}, 0x0) 3.174778935s ago: executing program 0 (id=1272): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaa868e0122f37aaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000052e50f00000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3100330080000000ffffffffffff080211000000505050505050000000000000000000006400ad826f1e331822822a01"], 0x50}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 2.894821771s ago: executing program 4 (id=1276): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x31, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) 2.394712827s ago: executing program 0 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140007800600040000040000060005"], 0x5c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x9, 0x8, 0xffffff28, 0x7, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x68, 0x0, 0x8, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x34, 0xe4, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x10000}, {@multicast1, 0x6}, {@local, 0xffffff7f}, {@rand_addr=0x64010101, 0x1}]}, @cipso={0x86, 0x1f, 0x2, [{0x6, 0xa, "e127708d398c1a02"}, {0x7, 0xf, "4020afefecad261d2e156f8fef"}]}, @ssrr={0x89, 0x7, 0xf4, [@dev={0xac, 0x14, 0x14, 0x22}]}, @lsrr={0x83, 0xb, 0xab, [@empty, @loopback]}, @timestamp={0x44, 0x28, 0x3f, 0x0, 0x9, [0x6, 0x8, 0x1, 0xffff, 0x2, 0x4ae, 0x7, 0x7, 0x800]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x9, 0xf}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x401, 0x3}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfd4a}, @qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7ff}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.110678559s ago: executing program 0 (id=1281): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xc5, "9f1fb6e366292e26333894931e11d44d7eb2c37b0f32e02a2adca0fcb08741ced6db7d6c1b3c56c3c1a23bf00c5a4b22501b0761598f2d46d18d20b3f3365864df288b7d96b9aecb710a9e6d3ac84e95573fa18e730af8e0ac30f70861ad1052aaa4fbfb595ff2945e0075ff7fc268862147795a766e2ebdd47c2830332ed558bd242bd428fd2e208a55bfdd4927dcaf840c5d0e6f050661318a2e1746c73bc961fc4c6429138166bc8401bb6e9edd4c9dd83382b29bc31660d7a9d6c64f06d4a186fa2d35"}, &(0x7f0000000180)=0xcd) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x17, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.038786575s ago: executing program 2 (id=1282): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r0, 0x0, 0x0) syz_emit_ethernet(0x2053, &(0x7f0000000000)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "030004", 0x201d, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x1ff, "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"}, {0xe, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000002080), &(0x7f00000020c0)=0x4) r1 = socket$kcm(0x29, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) accept(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x2053, &(0x7f0000000000)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "030004", 0x201d, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x1ff, "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"}, {0xe, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000002080), &(0x7f00000020c0)=0x4) (async) socket$kcm(0x29, 0x5, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) 1.820397165s ago: executing program 2 (id=1284): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3bab00000000000000002e1100000e0001"], 0x50}}, 0x0) syz_emit_ethernet(0x11f, &(0x7f0000000800)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x111, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2}, {0x0, 0x17c1, 0xfd, 0x0, @gue={{0x1, 0x1, 0x1, 0x0, 0x0, @void}, "0f96f4f7a9d6d1ac9934fe5c77dba808a82dc4c6a8fc65be2cca3ba75fc8b066f1961ee5a7374f73be7c392e9ccd92c5d8f0c6c5b5a1fa7ed383d69af5ef29bd42959d439573d708059e5bd1ccdb7b51bd5d0dfd2da3846e1387b97b0dbf3addddf0073a716daf465e67d0a43fe2730c518eb14ac7ef33274930387dc57cfacfad353c0f69db8750c1bb54fb3a739e674c3745c8e325e6323fbb609418e6ababd357a6afd0ccb1c36c54a359eb6f35471c576fe54a7f7b5853ec31f953415cb3f728911116d37d524ca0bfa71ad091277a01c95a4ac526482ce4f11d9127b3d7eb8cb0467af201b133c84a7621dd614ea2"}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002100002800c00028008000180000000000c000440001000"], 0xec}}, 0x0) r7 = socket(0x18, 0x5, 0x9) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x80800) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x600}) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0xffffffffffffff39) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r3, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000f1c0d0000000000000000000c00450072646d615a6300fa5810f04304be1373d900"], 0x1c}}, 0x0) 1.686831069s ago: executing program 0 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000008000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 1.332541189s ago: executing program 1 (id=1287): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800001f4db925af3b919402008700000400008004001880fefc953a0ea50868498995182b30d3be2213919e623583297d5a0b"], 0x18}], 0x1}, 0x0) 1.234696913s ago: executing program 1 (id=1288): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090a0000000000000000080000800800030000000000"], 0x20}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) (async) sendto$packet(r4, &(0x7f0000000480)='?', 0x590, 0x0, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x10, 0x8080, 0x7, 0x0, {{0x6, 0x4, 0x0, 0x16, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x6c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}}, 0xc000) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="c99b5738180123160300000000000000ff0f", 0x12) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0xfffd}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 1.233546959s ago: executing program 4 (id=1289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x10, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc}, 0xe) 1.117782415s ago: executing program 0 (id=1290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x2000000000000143, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x800) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @private2, 0x2}, 0x1c) (async) sendmmsg(r8, &(0x7f0000000340)=[{{&(0x7f0000000140)=@phonet={0x23, 0x9, 0x1, 0x8}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="ad4ec2f426fa01835b687fdaa5bdf0954feb1f96829e0b0d2ec09397a022f43ad7f4d45e97a9c513fc6deba3f819c12f479d17a30c301fc2d67ef5ce68142430a3f0af9758ca1c019b1737cc97fb50db6f445bc10c29f3faf7153eb73c27b2ebc50a777745710139", 0x68}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="60000000000000000a010000790500008fe74e06ecb2b2070664b8d4306fc2e64e08db39ab6c53115ee5bb9fd5985e9b1a4ff64f862ea2aeea36a0fecf02d9ef6fb61230e6161e7eb93b5f0c87de6810f2d0c168181e2dd963e7a62427e200003800000000000000ff0000000600000004ef017b6cc867f10ce19a67af0e57ddac48a12d6a87d13b52af47584c97fcaddb1ce8530000000098000000000000001901000006000000b5c93fec9757341df7446505e7698450082eb74b6ffea441361251644ff8f7f93e28c2679043512ffe76523d4f828356517f979406643287c8b3e9c65b22bfc920975393d1e2abe26b76e838fd7c16374ec15e324b05d0255d36a99b2e1fe0a0ece55e30fd91dcf546b1d7fd6115f3d70607751c7c576bd4da948ebac9f36c000000000000000000"], 0x130}}], 0x1, 0x4000804) 1.083973067s ago: executing program 2 (id=1291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000080001000010"], 0x1c}}, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000100001002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="a0fdad88ec4200004a000100bbbbbbbbbbbb0000"], 0x2c}}, 0x0) 966.652573ms ago: executing program 1 (id=1292): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001114010000000000000000000800010000000000cd06cfc3863b6cef108338d1acf1cada89e488075ddc48b47ec9a7fd964302"], 0x18}}, 0x0) socket(0x2, 0x3, 0x67) (async) r1 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e3}, 0x6e) (async) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e3}, 0x6e) clock_gettime(0x0, &(0x7f00000027c0)) recvmmsg(r0, &(0x7f0000006e80)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000001380)=""/175, 0xaf}, {&(0x7f0000001440)=""/151, 0x97}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/149, 0x95}, {&(0x7f0000000240)}], 0x9, &(0x7f00000002c0)=""/39, 0x27}, 0x7}, {{&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000002700)=""/67, 0x43}, {&(0x7f0000007040)=""/228, 0xe4}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/212, 0xd4}, {&(0x7f0000004980)=""/200, 0xc8}, {&(0x7f0000004a80)=""/40, 0x28}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/4096, 0x1000}], 0x9, &(0x7f0000006b80)=""/102, 0x66}, 0xcc1d}, {{&(0x7f0000006c00)=@xdp, 0x80, &(0x7f0000007000)=[{&(0x7f0000006c80)=""/181, 0xb5}, {&(0x7f0000006d40)=""/192, 0xc0}], 0x2, &(0x7f0000006e40)=""/27, 0x1b}, 0xfffffff8}], 0x4, 0x10102, &(0x7f0000006fc0)={0x77359400}) 966.141891ms ago: executing program 4 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2a, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) 848.705274ms ago: executing program 0 (id=1294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000022d900060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xbb95, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000580)=""/203, 0xcb, 0x0, &(0x7f0000000680)=""/243, 0xf3}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2db3, 0x0, 0x1, 0x804, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x7ff80000, 0x10}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%-010d \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0511000004000000040000000400000041000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="b07b0282baddea78aff81b05d8f421e098110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018420000040000000000000000000000185900000d0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x47, &(0x7f00000004c0)=""/71, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x10, 0x3, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r8, r9, r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, r12], 0x0, 0x10, 0xc1, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = socket$kcm(0xa, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={{r11}, 0x31, 0x10001, 0x8000}) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x890b, &(0x7f0000000000)) 773.084821ms ago: executing program 1 (id=1295): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000180000040d000000000015000400000000a004030000da9fd2ba64ab52380000000015000100000000c005010000d8eb60535549aaff0100"/76], 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r4, &(0x7f0000000280)=@xdp, &(0x7f0000000340)=0x80, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x40080c4}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) 771.518983ms ago: executing program 2 (id=1296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='9p_client_res\x00', 0xffffffffffffffff, 0x0, 0x33}, 0x18) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x5, 0x3, 0x394, {0xb, @ah_ip4_spec={@private=0xa010102, @loopback, 0x5, 0x7}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0x9, 0xa01e, [0xa, 0x1000]}, @ah_ip4_spec={@empty, @multicast1, 0x3, 0x5}, {0x0, @random="d195e96a859c", 0x4, 0x2, [0x2, 0x7]}, 0xf40, 0x2}, 0x3, [0x0, 0x8, 0x7]}}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x40010) r10 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) listen(r10, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001180)={0x1474, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x1f7}, @nested={0xfa, 0x143, 0x0, 0x1, [@generic="fbdc6e7133ceeb48ee1aa33dba3c0f6011f84c301ea44d675086592a4e278b487ef4fc10a2a9422c1c824a19e135fdf5cf63a7b0b9049920ecba1e3907d1525e7c2cfe6e782861b5ac4243421dc97570c5e74b08f82a61819979294116228233265a32abdc634244de431d2056df65876b1de2722b9f1626eb908d86970b86eaff5e3c357855bb2194055480780fc95b77453714829132eb3e833813d6f0e12d232c6e1e568e87720f48ea0aeb106ae3c78fd99e6f4fb70b58f558ac37757809c5468a699deeb2532eff2f9356ec63baa00ef07bc41c55431081b03f67a31dfff64bb012c9167eaa6853c25d88d268774c01ac626e50"]}, @typed={0x4, 0x80}, @nested={0x111, 0x9c, 0x0, 0x1, [@generic="7bdbf7a5139620d37010650bec4eeada63c9cac2d7015cde2306730fdf7d7de3a3130b087b4d79ed042257729904d825894e4a02ebb0b90ef8c0813cd6e476cbd821fc60751dd2dcc5a12b05090c9dfc09c3bfab4f7c8201e2084281430183ab861110b4f6d827bed06e70f19e0683ee27a7cef2a8c0fee332152b88b92d755d1290002d9106de387687d903e1d6239149ab02d66af2f1b40e0bb42e7997c2d0b8522ffa86a2f19eb251f8cc2e1a8774256ec595547c2ebee38e009c58b384e6f126cd8f840c511a64a17961402d4a606fbe1fdfa6c39eaaff2beea97c0e20b0e7772241b38ce7863d2dc630c6", @generic="552ec51f8541ed6d588c9c919233a2019ea721a7", @nested={0x4, 0xfa}, @typed={0x8, 0x13a, 0x0, 0x0, @pid=r5}]}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@empty}, @nested={0x9a, 0x10f, 0x0, 0x1, [@generic="cfcc066382b77c194556aa99c46aea7b185a8c19d5013cfe553dbba1562b0f31a8a7d0286d51c1763f122554c83e2c3741f209f3ce633f5446b63cf2c1c7baadc6fa05b48473a8b4b79bed867346ad70d448fc02ecf89eea2cdf1cbbaa2d9c50943307d7913edb89ab439f33fa970d3da3c2477d17d963ea108db3143c95b126e103c5c96a79fffb95e8fc3bad48", @nested={0x4, 0x132}, @nested={0x4, 0x102}]}, @generic="6ee931899e97d296a8108ebfa00939640d3a1e15dded25e2d09661d71c9d3ff050fa4fa6488722f376bed1317237ace72c96849ade4e37304ca05e6a6341", @generic="99785be9cd48babd5ec4fd8635468e7447aacad7c3ecbb1301e8c108db2b3d2f4cec5199322a6952bfd89c2132d28691697e819becca9d7ee1ee8be930a0846c1803108e87cbd79c7d303ef422b53960d1b979b12ff72b4b40fd432d6b408a3dc3b3", @typed={0x8, 0x115, 0x0, 0x0, @ipv4=@remote}, @nested={0x10f8, 0xa1, 0x0, 0x1, [@typed={0x8, 0x48, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x89, 0x0, 0x0, @u32=0xf}, @generic="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", @nested={0x4, 0xdd}, @nested={0x4, 0x4}, @generic="6c43212f4a5d7357cbbf3cb4d4b2015033c4bfe60108c530948d22a50f2ebcf5bf7a255569a2eac5166da1b78c456600e4bc1ebbb3e663a192fc6d2a2d0941e797a752924372b23e4545ce87feafe20c655ab43b85e81a2079573484e0affd3576b42d76bb22f94c2044af2d6a7dc5b5f66f3c0ab487603773178882a39d36fc05529ed9e0e3df288ecec5c9d19bdfa4e504bafc419c71135112e2d28adffd9d6f5426b00a68d11ace422342fa86011f6195c05b6c027dfce74dba5f89ad844565d95cd5686cbf674259e29a57f48baa53dbecc230f03142", @nested={0x4, 0x104}]}]}, 0x1474}, {&(0x7f0000002600)={0x11a0, 0x41, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x7e, 0x0, 0x0, @pid=r6}, @nested={0x10e2, 0x1b, 0x0, 0x1, [@generic="c7ae7b3916eb2f206ffae821f71d41f3f6db883fdeb488edace8f244aafc4738aab88f9a4776ca84ef4b913dcc2b50b4d83f4ee6d70b37d9e69088cf501205d91b19a728230a768745a2dbcc1b4d5fa2e4bf855eb6e56c7730b54f0f1fd0bc30bdd8141af46df4cea838ff628e6a5aea972d8ffad36d9942c9ccaed60d2a3c412bfbbeae4b7432690bfe4418bf38c0752d95782acd40bdd60aa1bf103ab2f340ebadb251ab03c5a0d2b5afb6493f45282ce2fa54cd35101097a0042ddc22", @generic="f5199766d782938d433846dfe590e3e010db871b3070ab49", @nested={0x4, 0xf}, @generic="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", @nested={0x4, 0x82}]}, @generic="feac69f1ac73c1b7e4e9df910b62e7e1475a7eeeaec7c418679921e8e7fcf5a6dcf3a4ae1cc9a110ffd397ce0cb49e77329b198c87ee319dd29f74b1bc115df70cb56a5ab7a1de873b31c5e99d2bff95c6349d9be31bf7763be5078c0f2f693993104e816ea37c728149b6", @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @nested={0x30, 0x17, 0x0, 0x1, [@nested={0x4, 0x53}, @nested={0x4, 0x97}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r7}, @typed={0x14, 0x58, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @nested={0x4, 0x40}, @nested={0x4, 0x10f}]}]}, 0x11a0}], 0x2, &(0x7f0000000240)=[@rights={{0x28, 0x1, 0x1, [r2, r2, r8, r9, r11, r12]}}], 0x28, 0x800}, 0x24000040) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x12, 0x0, r4, 0x10041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r14, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r15, &(0x7f0000000000), 0x8) listen(r15, 0x0) listen(r14, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) 714.889659ms ago: executing program 4 (id=1297): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x2, 0x10162, 0x0) mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x2000004, 0x110, r0, 0x72da3000) 503.886357ms ago: executing program 4 (id=1298): r0 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000380)={r7, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r7, 0x7}, &(0x7f00000000c0)=0x8) 323.235473ms ago: executing program 1 (id=1299): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000008c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0500530080000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="60000e0080000000ffffffffffff0802110000000802110000000000000000000000ca0064000100c1b36f3d05baa0c52a01052d1a10001200000080000000000d0007000400000000040500000007710700ff00ff0200607606a2021d00040004000e80080008000d00000000e8000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x7ccf9f79e8eab74b}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000680)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x3}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)="0b1adda48e63c81bf4905c08a72773e9d1c5da8ebf693276ee6441fd710464d8d3a48081ee425d933b3ff243dfd35cd80ebdb003b1a7b105dded8d2fc6", 0x3d}, {&(0x7f00000004c0)="b0a3242fe2a252e6245d5fbe45d3c2a599897e0ad29442118f287a34b300ccf702132d05bdd7e253d17650c5a190241f3c25", 0x32}, {&(0x7f0000000700)="82a064ff1f5dbb70039fce1479b7d85a02fe39cf7257186af3ad4599dfcbb024dfa512e483b60977972fc5d627b68621ad42af3c3334517a2f57a24de0d7dd2ad5834c545fe1b574edd146339b5a447eec4179eba3b619c3de71502aa5e2ce3919a55deba9939478adf8809b75ed8ca2789d3f6603a93ae7ae5b464e2a12ebdb233b146136e0a4a74e38fe2b5c966838a68901a6abef5b2892e0ecd3d4b6b97421187592802976603233300049bf27ec018fe13eb65e6852a6434630fec8f7fdd31a9964b52563bb9c7786fce1922ded1615d894aa20b991ee4652f638f4fcde03d4ddbf137d6a21b346f88e02d65132f9147ce07015a6f1273a", 0xfa}], 0x3, &(0x7f0000000900)}}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)="c9b31e77bbcfe113ca4e5ecbb1518f53518f760654c3596067d05ee04ad49cc604bfd6fdaefd2c9d7e84ecaa727485ee4c5d8dc5de788b9e5b96fed91d2b526cd3dc835fa61fc86e1c1c2492959c18bd699095bb647002e0226e86aa55000e8fea1292", 0x63}, {&(0x7f0000000a40)="f0c1b42e4c80e76c75ef55c9c25d4746d4bae15136814a8cb9b8b87e79bac61a47e62ec5e3d1c40d3899b50d3fbe0320f6971aef0c6d7828684cbf0ab94a7eac6c80abb3a85651ad749e177ee41864c4c0252d5aae396a876519e7b82a048d51516fc62ae77606deb881d9a29330a9d7e23919a6499e96ab7c46f39dab69c14c97896ba4bcaf08d53a34c50c966455d1b47f1a0c601470491502f6ebb9d71df7bef49f19cc8e4c2a3a7546", 0xab}, {&(0x7f0000000b00)="1d19ba8ba75ec70cc332ed0541de32efa493295d09a1b80c3b9123c7d8ef9afa38c35e637e222c3be2719fe285b495344edf1e378eb7be", 0x37}, {&(0x7f0000000b40)="ff27238d51a4771bb1", 0x9}, {&(0x7f0000000b80)="7c57c6c59d617d907d974a46aeb93f8bc12cee9b300c58e10f65095e10a5e618eae8f86d69578183b6d8731fda7fda9be224c89d82f2acb45c7d8fa3da5b6499e69618bc9c3a70074039d27f0067acc0e133a86491faf06b71d1ff006e57ed583e3dbd83523aaece14240f3119e295f08407427f1cb5b0002c5e281721580dc42c50151615bbef0363a29718779d9286527a04", 0x93}, {&(0x7f0000000c40)="4266390404cca7859131d24be781916a1e5bd1f6255ba152be51d71a651079f6d1f97bd1591a67d072227265adee382de4979cb335d47c575cadc5aeb1e26f038efd5dce49fbca7c9f8a51ebf9907f523367c21f5a59fcb54fa5c12f1d480e471c709012069fc91e403e9198a08a6dc8da41040d73592e7c98f65e2ea85519eef0", 0x81}, {&(0x7f0000000d00)="5aa4a6158a9d6b0b018b6235cb2edebe6335fc8e29d3c25d5d7e5cb6b40f489450febe3616d875ff501b0956cf3014039c5711f677882b7c33307a06cb06c2a5a9d56023d6326b3633b6f37b0c825a367df0c1238639d925aa3372a803702c5b6be3ecfb34cb71cf93fb37d5332abbf2796ffe4f1df095f05e4eafcac92ec166c28eaf928d9ff4cba26c1bfd8bfbb0b7b1714c53383a8824f95b1fa9e9027335bbe581cfac6c8a42a1cb2961affbfd0923aa892dfb59997844667011cf77c8458b170e96fda64c5b5a2e2863a139661f1b", 0xd1}], 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/401], 0x68}}], 0x2, 0x20004001) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x41000}, 0x8884) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x3fa, 0x400, 0x70bd28, 0x25dfdbfb, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x24008890) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x823e, 0xd8b4, 0x7, 0x3, 0x100}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r8, 0x43b8, 0xfffe, 0x8, 0x0, 0x2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="98000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x47, '\x00', r7, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000003d00)={'lo\x00', {0x2, 0x4e23, @local}}) 170.563262ms ago: executing program 2 (id=1300): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8000000, 0x0, 0x1, 0x10}, 0x401, 0x1, 0x9, 0x1, 0x2, 0x19, 0x10, 0x14, 0x7, 0xc, {0x3ff, 0xf9, 0x6, 0x3, 0x9, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000002c0)=0x27) write(r0, &(0x7f00000000c0)='Q\x00\x00\x00\x00\x00', 0x6) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000000000000000000000000000000000000043702ab9fad191fcf00ebe6802ba53dc76a3e458aae7206f4292e5506389d8661dc5f9447f218377b0559fe3c09cf616fb6d4805862d", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.208468ms ago: executing program 2 (id=1301): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) 0s ago: executing program 1 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x1, 0x8}, {0x0, 0x5}, {0x0, 0x8000}, {0x2, 0xc}, {0x9}, {0x9, 0x401}, {0x4, 0x3ff}]}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x6}, {0x9, 0x6}, {0xe}, {0x8, 0x3}, {0x0, 0x7fff}, {0x10, 0x3}]}, @const={0x0, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/103, 0xab, 0x67, 0x0, 0xb5, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400003d00000000000100000008000b40000000003c000480240001800b0001007470726f787900001400028008000140000000000800034000000016140001800a00010072616e6765000000040002800900010073797a30"], 0xd8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x1, 0x8}, {0x0, 0x5}, {0x0, 0x8000}, {0x2, 0xc}, {0x9}, {0x9, 0x401}, {0x4, 0x3ff}]}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x6}, {0x9, 0x6}, {0xe}, {0x8, 0x3}, {0x0, 0x7fff}, {0x10, 0x3}]}, @const={0x0, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/103, 0xab, 0x67, 0x0, 0xb5, 0x0, @void, @value}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400003d00000000000100000008000b40000000003c000480240001800b0001007470726f787900001400028008000140000000000800034000000016140001800a00010072616e6765000000040002800900010073797a30"], 0xd8}}, 0x0) (async) kernel console output (not intermixed with test programs): 0.320847][ T5935] IPv6: Can't replace route, no match found [ 80.358357][ T5935] IPv6: Can't replace route, no match found [ 80.394709][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.418289][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.428853][ T5935] IPv6: Can't replace route, no match found [ 80.439230][ T5935] IPv6: Can't replace route, no match found [ 80.470373][ T5935] IPv6: Can't replace route, no match found [ 80.519614][ T5935] IPv6: Can't replace route, no match found [ 80.527505][ T5935] IPv6: Can't replace route, no match found [ 80.540239][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.542867][ T5935] IPv6: Can't replace route, no match found [ 80.563794][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.736415][ T5949] Zero length message leads to an empty skb [ 80.752711][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.795593][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.866391][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.874385][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.259637][ T5961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.295735][ T5961] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 81.362559][ T5967] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 81.532319][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 81.602328][ T5846] Bluetooth: hci0: command tx timeout [ 81.633964][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.656377][ T5846] Bluetooth: hci2: command tx timeout [ 81.659342][ T5847] Bluetooth: hci1: command tx timeout [ 81.662983][ T55] Bluetooth: hci3: command tx timeout [ 81.673601][ T5835] Bluetooth: hci4: command tx timeout [ 81.680724][ T5982] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 81.689581][ T5982] netlink: 228 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.699216][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.708661][ T5981] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 81.716781][ T5981] netlink: 228 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.725682][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.768183][ T5980] tipc: Started in network mode [ 81.783358][ T5980] tipc: Node identity 0a91dbdf9992, cluster identity 4711 [ 81.800766][ T5980] tipc: Enabled bearer , priority 0 [ 81.843141][ T5980] syzkaller0: entered promiscuous mode [ 81.856665][ T5980] syzkaller0: entered allmulticast mode [ 81.935755][ T5980] tipc: Resetting bearer [ 81.944279][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.958034][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.971189][ T5979] tipc: Resetting bearer [ 81.990815][ T5979] tipc: Disabling bearer [ 82.212657][ T5997] netlink: 'syz.1.26': attribute type 8 has an invalid length. [ 82.324752][ T6000] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.849100][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 82.905154][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.921411][ T6025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.285295][ T6048] netlink: 'syz.0.43': attribute type 5 has an invalid length. [ 83.687042][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.056029][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 84.346352][ T6092] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 84.396063][ T6092] nbd: couldn't find a device at index 20 [ 84.424231][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.521721][ T6100] Unsupported ieee802154 address type: 0 [ 84.773267][ T6111] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 84.782726][ T6113] netlink: set zone limit has 8 unknown bytes [ 85.258903][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.554049][ T6145] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 85.566262][ T6145] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 85.576922][ T6141] ip6t_srh: unknown srh invflags A757 [ 86.012445][ T6173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.140032][ T6213] netlink: 'syz.2.101': attribute type 10 has an invalid length. [ 87.210736][ T6213] macvlan0: entered promiscuous mode [ 87.227434][ T6213] macvlan0: entered allmulticast mode [ 87.275860][ T6213] veth1_vlan: entered allmulticast mode [ 87.738673][ T9] cfg80211: failed to load regulatory.db [ 87.769626][ T6213] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 87.850171][ T6226] __nla_validate_parse: 13 callbacks suppressed [ 87.850194][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 88.024570][ T6232] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 88.086304][ T6232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.105'. [ 88.124439][ T6241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 88.472270][ T6260] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 88.527758][ T6267] netlink: 'syz.1.114': attribute type 13 has an invalid length. [ 88.570997][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 88.637371][ T6267] veth0_macvtap: left promiscuous mode [ 88.643387][ T6267] macvtap0: entered allmulticast mode [ 88.661883][ T6267] macvtap0: refused to change device tx_queue_len [ 88.883373][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.121'. [ 88.916390][ T6279] geneve2: entered promiscuous mode [ 88.933820][ T6279] geneve2: entered allmulticast mode [ 89.034727][ T6277] bridge0: port 3(gretap0) entered blocking state [ 89.047637][ T6277] bridge0: port 3(gretap0) entered disabled state [ 89.054533][ T6277] gretap0: entered allmulticast mode [ 89.063114][ T6277] gretap0: entered promiscuous mode [ 89.070452][ T6277] bridge0: port 3(gretap0) entered blocking state [ 89.077307][ T6277] bridge0: port 3(gretap0) entered forwarding state [ 89.469620][ T6300] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 89.532718][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 89.545745][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'. [ 89.560766][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 89.571963][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 89.607878][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'. [ 89.625470][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'. [ 89.639545][ T6305] netlink: 'syz.4.130': attribute type 15 has an invalid length. [ 89.717470][ T6310] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 89.847977][ T6316] netlink: 'syz.1.131': attribute type 3 has an invalid length. [ 89.902373][ T6320] syz.0.134[6320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.902484][ T6320] syz.0.134[6320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.911375][ T6313] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 89.936080][ T6320] syz.0.134[6320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.990251][ T6313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.028658][ T6313] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.037902][ T6327] netlink: 'syz.4.135': attribute type 29 has an invalid length. [ 90.067209][ T6313] syz.2.132 (6313) used greatest stack depth: 18448 bytes left [ 90.096043][ T6327] netlink: 'syz.4.135': attribute type 29 has an invalid length. [ 90.345364][ T6339] geneve2: entered promiscuous mode [ 90.362971][ T6339] geneve2: entered allmulticast mode [ 90.432306][ T6345] macvlan2: entered promiscuous mode [ 90.475573][ T6345] macvlan2: entered allmulticast mode [ 90.740132][ T6359] openvswitch: netlink: Multiple metadata blocks provided [ 91.198118][ T6376] Illegal XDP return value 951538730 on prog (id 31) dev N/A, expect packet loss! [ 91.484538][ T6374] syz_tun: entered promiscuous mode [ 91.501669][ T6374] syz_tun: left promiscuous mode [ 91.815197][ T6403] netlink: 'syz.4.157': attribute type 29 has an invalid length. [ 91.943081][ T6409] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 92.099899][ T6420] IPv6: sit1: Disabled Multicast RS [ 92.386880][ T6431] x_tables: duplicate underflow at hook 1 [ 92.409129][ T6431] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 93.054807][ T6468] __nla_validate_parse: 10 callbacks suppressed [ 93.054829][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'. [ 93.100276][ T6474] netlink: 104 bytes leftover after parsing attributes in process `syz.0.180'. [ 93.236403][ T6469] xt_CT: No such helper "snmp" [ 93.656971][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 93.747278][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 93.765376][ T6503] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.813154][ T6509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.072446][ T6519] validate_nla: 3 callbacks suppressed [ 94.072501][ T6519] netlink: 'syz.2.196': attribute type 4 has an invalid length. [ 94.579094][ T6545] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 94.591132][ T6541] netlink: 'syz.4.204': attribute type 2 has an invalid length. [ 94.626486][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 94.751357][ T6552] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 94.805546][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 94.928529][ T6557] bond1: entered promiscuous mode [ 94.933656][ T6557] bond1: entered allmulticast mode [ 94.939712][ T6557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.209580][ T6582] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.216'. [ 95.459959][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 95.478463][ T6589] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.218'. [ 95.488625][ T6589] netlink: zone id is out of range [ 95.493930][ T6589] netlink: zone id is out of range [ 95.500276][ T6589] netlink: zone id is out of range [ 95.509107][ T6589] netlink: zone id is out of range [ 95.518005][ T6589] netlink: zone id is out of range [ 95.532527][ T6589] netlink: zone id is out of range [ 95.550184][ T6589] netlink: zone id is out of range [ 96.236762][ T6624] netlink: 144 bytes leftover after parsing attributes in process `syz.1.228'. [ 96.309307][ T6624] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.455200][ T6636] IPv6: sit1: Disabled Multicast RS [ 96.483584][ T6636] sit1: entered allmulticast mode [ 96.590528][ T6643] x_tables: duplicate underflow at hook 4 [ 96.883945][ T6655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.891319][ T6655] IPv6: NLM_F_CREATE should be set when creating new route [ 96.898666][ T6655] IPv6: NLM_F_CREATE should be set when creating new route [ 97.285546][ T6669] netlink: 'syz.3.245': attribute type 11 has an invalid length. [ 97.642077][ T6680] IPv6: sit1: Disabled Multicast RS [ 97.663699][ T6680] sit1: entered allmulticast mode [ 97.794954][ T6688] netlink: 'syz.3.249': attribute type 3 has an invalid length. [ 98.071098][ T6705] __nla_validate_parse: 2 callbacks suppressed [ 98.071120][ T6705] netlink: 168 bytes leftover after parsing attributes in process `syz.1.253'. [ 98.701060][ T6725] batman_adv: batadv0: Adding interface: ip6gretap1 [ 98.707969][ T6725] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.734100][ T6725] batman_adv: batadv0: Interface activated: ip6gretap1 [ 99.072954][ T6755] netlink: 'syz.1.261': attribute type 25 has an invalid length. [ 99.105381][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 99.214777][ T6758] netlink: 'syz.1.261': attribute type 25 has an invalid length. [ 99.232595][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 99.315028][ T6759] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 99.389291][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 99.406308][ T6770] netlink: 2 bytes leftover after parsing attributes in process `syz.1.266'. [ 99.664058][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 99.676604][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 99.698768][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 99.717244][ T6784] netlink: 72 bytes leftover after parsing attributes in process `syz.1.270'. [ 99.754590][ T6784] net_ratelimit: 6 callbacks suppressed [ 99.754609][ T6784] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 99.963768][ T6802] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 100.023160][ T6805] sctp: [Deprecated]: syz.2.274 (pid 6805) Use of int in maxseg socket option. [ 100.023160][ T6805] Use struct sctp_assoc_value instead [ 100.184504][ T6818] Cannot find add_set index 0 as target [ 100.262114][ T6818] xt_CT: No such helper "snmp_trap" [ 100.548872][ T6832] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 100.859251][ T6842] syz.3.284 (6842) used greatest stack depth: 18096 bytes left [ 101.119197][ T6856] x_tables: duplicate underflow at hook 1 [ 101.138275][ T6861] netlink: 'syz.0.290': attribute type 21 has an invalid length. [ 101.278713][ T6853] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 101.505138][ T6870] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.554703][ T6875] macvlan0: entered allmulticast mode [ 101.562405][ T6875] veth1_vlan: entered allmulticast mode [ 101.584102][ T6876] veth1_vlan: left allmulticast mode [ 101.637745][ T6876] macvlan0 (unregistering): left allmulticast mode [ 101.944896][ T6887] vlan1: entered promiscuous mode [ 101.973639][ T6886] vlan1: left promiscuous mode [ 101.995524][ T6899] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 102.024134][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.683281][ T6932] Bluetooth: MGMT ver 1.23 [ 103.056155][ T6950] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 103.108882][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.117954][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.157820][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.165039][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.173461][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.180792][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.198475][ T6950] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.258739][ T6960] __nla_validate_parse: 9 callbacks suppressed [ 103.258772][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 103.300617][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 103.367497][ T6962] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 103.582724][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 103.618708][ T6973] tc_dump_action: action bad kind [ 103.659306][ T6978] tipc: Enabling not permitted [ 103.677154][ T6978] tipc: Enabling of bearer rejected, failed to enable media [ 103.689183][ T6978] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 103.716153][ T6978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.326'. [ 103.734580][ T6976] wireguard: wg1: Could not create IPv4 socket [ 103.779556][ T6979] netlink: 'syz.2.324': attribute type 21 has an invalid length. [ 103.815396][ T6979] netlink: 'syz.2.324': attribute type 20 has an invalid length. [ 103.876194][ T6979] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.118902][ T7001] openvswitch: netlink: IP tunnel dst address not specified [ 104.486311][ T7021] vlan1: entered promiscuous mode [ 104.564289][ T7019] vlan1: left promiscuous mode [ 105.389382][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 105.692113][ T7082] netlink: 'syz.2.355': attribute type 33 has an invalid length. [ 105.716714][ T7082] netlink: 152 bytes leftover after parsing attributes in process `syz.2.355'. [ 105.763835][ T7087] netlink: 44 bytes leftover after parsing attributes in process `syz.4.356'. [ 105.836517][ T7091] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 105.846478][ T7091] tipc: Enabled bearer , priority 10 [ 105.966665][ T7094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.451350][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.366'. [ 106.481508][ T7117] unsupported nlmsg_type 40 [ 106.541924][ T7123] rdma_op ffff88802b42a1f0 conn xmit_rdma 0000000000000000 [ 106.659506][ T7126] vlan2: entered allmulticast mode [ 106.853754][ T7135] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 106.904642][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.934104][ T7135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 106.944279][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 106.967301][ T9] tipc: Node number set to 2466503647 [ 106.991246][ T7142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.452731][ T7167] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 107.471514][ T7167] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 107.503837][ T7167] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 107.520243][ T7167] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 107.694740][ T7178] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 107.797574][ T7177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.830330][ T7182] netlink: 'syz.0.389': attribute type 4 has an invalid length. [ 107.845543][ T7182] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.854085][ T7186] netem: change failed [ 108.076092][ T7190] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 108.102906][ T7198] vcan0: tx drop: invalid sa for name 0x0800000000000000 [ 108.454054][ T7212] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 108.474223][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.552879][ T7212] bond0: (slave team0): Enslaving as an active interface with an up link [ 108.597541][ T7215] netlink: 'syz.1.400': attribute type 49 has an invalid length. [ 108.666570][ T7214] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.038992][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.403'. [ 109.194426][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 109.741615][ T7237] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 109.748798][ T25] IPVS: starting estimator thread 0... [ 109.751161][ T7238] Bluetooth: MGMT ver 1.23 [ 109.774514][ T7237] tipc: Started in network mode [ 109.780098][ T7237] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.796647][ T7237] tipc: Enabled bearer , priority 10 [ 109.846219][ T7239] IPVS: using max 19 ests per chain, 45600 per kthread [ 109.890486][ T7243] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 109.995385][ T7256] tipc: Can't bind to reserved service type 2 [ 110.069861][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.412'. [ 110.346224][ T7276] netlink: 64 bytes leftover after parsing attributes in process `syz.0.417'. [ 110.358685][ T7281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'. [ 110.368865][ T7280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'. [ 110.460094][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c4dc00: rx timeout, send abort [ 110.470157][ C0] vcan0: j1939_tp_rxtimer: 0xffff888011c4c800: rx timeout, send abort [ 110.478721][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011c4dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.494329][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011c4c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.509219][ T7284] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.420'. [ 110.556857][ T7284] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 110.631020][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 110.715627][ T7294] validate_nla: 1 callbacks suppressed [ 110.715648][ T7294] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 110.722780][ T7289] bond2: entered allmulticast mode [ 110.740219][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 110.797164][ T9] tipc: Node number set to 2886997162 [ 110.826722][ T7289] bond2 (unregistering): Released all slaves [ 111.023514][ T7307] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.516423][ T7328] netlink: 80 bytes leftover after parsing attributes in process `syz.1.434'. [ 111.797234][ T7333] wg2: entered promiscuous mode [ 111.810893][ T7333] wg2: entered allmulticast mode [ 111.864683][ T7338] netlink: 'syz.1.438': attribute type 15 has an invalid length. [ 111.908385][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.923110][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.935954][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.994936][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.004922][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.021515][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.501894][ T7344] chnl_net:caif_netlink_parms(): no params data found [ 112.677011][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.684856][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.692832][ T7344] bridge_slave_0: entered allmulticast mode [ 112.700828][ T7344] bridge_slave_0: entered promiscuous mode [ 112.709890][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.741885][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.751145][ T7344] bridge_slave_1: entered allmulticast mode [ 112.759502][ T7344] bridge_slave_1: entered promiscuous mode [ 112.783743][ T7399] 0·: renamed from hsr0 (while UP) [ 112.796180][ T7399] 0·: entered promiscuous mode [ 112.801755][ T7399] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 112.918968][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.959398][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.087672][ T7344] team0: Port device team_slave_0 added [ 113.108969][ T7344] team0: Port device team_slave_1 added [ 113.207935][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.215059][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.242409][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.256567][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.289741][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.333278][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.429829][ T7344] hsr_slave_0: entered promiscuous mode [ 113.437614][ T7344] hsr_slave_1: entered promiscuous mode [ 113.446087][ T7344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.466663][ T7344] Cannot create hsr debugfs directory [ 113.738671][ T7344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.889249][ T7344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.040499][ T7344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.105245][ T7437] netlink: 'syz.2.462': attribute type 21 has an invalid length. [ 114.115286][ T7437] netlink: 'syz.2.462': attribute type 11 has an invalid length. [ 114.136984][ T5835] Bluetooth: hci3: command tx timeout [ 114.166541][ T7444] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 114.294496][ T7344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.617760][ T7471] __nla_validate_parse: 6 callbacks suppressed [ 114.617783][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 114.681436][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 114.755757][ T7344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.795149][ T7344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.854624][ T7344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.958540][ T7485] bond2: entered promiscuous mode [ 115.001791][ T7344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.036140][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 115.092858][ T7491] netlink: 'syz.0.472': attribute type 4 has an invalid length. [ 115.160897][ T7497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.476'. [ 115.266260][ T7497] netlink: 52 bytes leftover after parsing attributes in process `syz.1.476'. [ 115.293663][ T7497] netlink: 52 bytes leftover after parsing attributes in process `syz.1.476'. [ 115.293998][ T7504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.310569][ T7497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.334039][ T7504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.339180][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 115.347812][ T7504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.398000][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.454791][ T7506] IPVS: Error joining to the multicast group [ 115.492298][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.511754][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.519864][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.552828][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.560146][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.630403][ T7344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.643301][ T7344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.710554][ T7520] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 115.724206][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 115.740525][ T7520] ipvlan2: entered allmulticast mode [ 115.751978][ T7520] veth0_vlan: entered allmulticast mode [ 115.867735][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.925392][ T7528] tipc: Enabled bearer , priority 10 [ 115.949904][ T7344] veth0_vlan: entered promiscuous mode [ 115.963937][ T7344] veth1_vlan: entered promiscuous mode [ 116.018152][ T7344] veth0_macvtap: entered promiscuous mode [ 116.032246][ T7344] veth1_macvtap: entered promiscuous mode [ 116.054563][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.066181][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.077755][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.090071][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.100348][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.111527][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.121836][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.132610][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.144423][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.155404][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.167366][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.216073][ T5835] Bluetooth: hci3: command tx timeout [ 116.226325][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.230708][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.484'. [ 116.237053][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.256494][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.267184][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.277293][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.288072][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.298678][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.309390][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.319682][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.330433][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.343685][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.178138][ T7344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.204840][ T7344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.240058][ T7344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.269652][ T7344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.296085][ T5835] Bluetooth: hci3: command tx timeout [ 118.483148][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.484490][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.499366][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.509710][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.685182][ T7560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.496'. [ 119.186507][ T7576] netlink: 'syz.0.501': attribute type 30 has an invalid length. [ 119.194464][ T7576] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 119.215085][ T7582] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 119.236411][ T7576] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 119.377154][ T7592] trusted_key: syz.4.510 sent an empty control message without MSG_MORE. [ 119.528480][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.832161][ T7607] netlink: 'syz.4.514': attribute type 13 has an invalid length. [ 119.870886][ T7607] veth0_macvtap: left promiscuous mode [ 119.902910][ T7607] macvtap0: entered allmulticast mode [ 119.958377][ T7607] macvtap0: refused to change device tx_queue_len [ 120.412150][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.413415][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.430710][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.439758][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.459390][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.472876][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.496773][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.514594][ T7642] __nla_validate_parse: 3 callbacks suppressed [ 120.514615][ T7642] netlink: 52 bytes leftover after parsing attributes in process `syz.1.522'. [ 120.786334][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 120.814132][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.818899][ T7654] netlink: 10 bytes leftover after parsing attributes in process `syz.4.525'. [ 121.099495][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 121.208099][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.249122][ T7671] netlink: 76 bytes leftover after parsing attributes in process `syz.0.531'. [ 121.263391][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 121.662343][ T35] bridge_slave_1: left allmulticast mode [ 121.669188][ T35] bridge_slave_1: left promiscuous mode [ 121.690723][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.750806][ T35] bridge_slave_0: left allmulticast mode [ 121.765702][ T35] bridge_slave_0: left promiscuous mode [ 121.802263][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.869355][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 121.950992][ T7706] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 122.113743][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 122.531967][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.576398][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.593021][ T35] bond0 (unregistering): Released all slaves [ 122.606005][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.617199][ T5835] Bluetooth: hci3: command tx timeout [ 122.623826][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.631670][ T7637] bridge_slave_0: entered allmulticast mode [ 122.639407][ T7637] bridge_slave_0: entered promiscuous mode [ 122.845715][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.863093][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.884047][ T7637] bridge_slave_1: entered allmulticast mode [ 122.892001][ T7734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.546'. [ 122.900298][ T7637] bridge_slave_1: entered promiscuous mode [ 123.177380][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 123.187273][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.211008][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.218545][ T7734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.319346][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.372284][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.490936][ T7755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.550'. [ 124.005358][ T7637] team0: Port device team_slave_0 added [ 124.058937][ T35] hsr_slave_0: left promiscuous mode [ 124.074576][ T35] hsr_slave_1: left promiscuous mode [ 124.091301][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.114733][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.131319][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.150685][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.213671][ T35] veth1_macvtap: left promiscuous mode [ 124.242321][ T35] veth0_macvtap: left promiscuous mode [ 124.260309][ T35] veth1_vlan: left promiscuous mode [ 124.289281][ T35] veth0_vlan: left promiscuous mode [ 124.695957][ T5835] Bluetooth: hci3: command tx timeout [ 125.272549][ T35] team0 (unregistering): Port device team_slave_1 removed [ 125.315989][ T35] team0 (unregistering): Port device team_slave_0 removed [ 125.745338][ T7637] team0: Port device team_slave_1 added [ 125.957811][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.985876][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.049113][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.089037][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.117110][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.220670][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.345477][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 126.348503][ T29] audit: type=1107 audit(1735192155.865:2): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 126.451057][ T7841] netlink: 'syz.1.567': attribute type 4 has an invalid length. [ 126.723479][ T7637] hsr_slave_0: entered promiscuous mode [ 126.761489][ T7637] hsr_slave_1: entered promiscuous mode [ 126.776401][ T5835] Bluetooth: hci3: command tx timeout [ 126.789524][ T7637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.813573][ T7637] Cannot create hsr debugfs directory [ 126.896070][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 127.270033][ T7877] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 127.355728][ T7877] hsr0: entered promiscuous mode [ 127.380778][ T7877] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 127.418714][ T7877] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 127.443775][ T7877] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 128.056749][ T7899] syzkaller1: entered promiscuous mode [ 128.066072][ T7899] syzkaller1: entered allmulticast mode [ 128.077548][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 128.508991][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.558947][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.601182][ T7927] netlink: 'syz.1.586': attribute type 11 has an invalid length. [ 128.856450][ T5835] Bluetooth: hci3: command tx timeout [ 129.042289][ T7934] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 129.060707][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.275519][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.593'. [ 129.316375][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 129.432380][ T7637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.433416][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 129.478249][ T7637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.506192][ T7637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.539405][ T7637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.578729][ T7959] tipc: Failed to remove unknown binding: 66,1,1/2466503647:2308894836/2308894838 [ 129.829773][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.911995][ T7637] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.947184][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.954373][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.015417][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.022735][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.472110][ T8003] raw_sendmsg: syz.0.605 forgot to set AF_INET. Fix it! [ 130.755196][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.777968][ T8016] xt_l2tp: unknown flags: 18 [ 130.848659][ T8018] netlink: 140 bytes leftover after parsing attributes in process `syz.2.607'. [ 130.897606][ T7637] veth0_vlan: entered promiscuous mode [ 130.904091][ T8016] netlink: 'syz.2.607': attribute type 33 has an invalid length. [ 130.930894][ T7637] veth1_vlan: entered promiscuous mode [ 131.098500][ T7637] veth0_macvtap: entered promiscuous mode [ 131.126682][ T8028] x_tables: duplicate underflow at hook 2 [ 131.160059][ T7637] veth1_macvtap: entered promiscuous mode [ 131.226399][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.267139][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.318628][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.340949][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.364120][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.382151][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.402520][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.438023][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.472507][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.526042][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.570102][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.675407][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.710514][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.735204][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.764851][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 131.766087][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.805604][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.835230][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 131.840454][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.894511][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.935921][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.969320][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.990531][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.012016][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.067930][ T7637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.116341][ T7637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.125113][ T7637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.172678][ T7637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.297661][ T8066] veth0_to_hsr: entered promiscuous mode [ 132.493142][ T8083] vxcan1: tx address claim with dest, not broadcast [ 132.771210][ T8069] hsr_slave_0 (unregistering): left promiscuous mode [ 132.781691][ T8086] netlink: 'syz.1.624': attribute type 2 has an invalid length. [ 132.799574][ T8086] netlink: 'syz.1.624': attribute type 9 has an invalid length. [ 132.829466][ T8086] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.624'. [ 132.864233][ T8078] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 133.126512][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132905][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324802][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.386035][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.444854][ T8098] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 133.570880][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.606261][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.317405][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 134.328110][ T8119] netlink: 13 bytes leftover after parsing attributes in process `syz.1.634'. [ 134.583705][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 134.656340][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880336cc800: rx timeout, send abort [ 134.723744][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.783526][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.791570][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.817184][ T8144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.827789][ T8144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.041923][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'. [ 135.059636][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.084141][ T8153] netlink: 'syz.1.640': attribute type 4 has an invalid length. [ 135.109726][ T8153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.640'. [ 135.164687][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880336cc800: abort rx timeout. Force session deactivation [ 135.253374][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.423953][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.424184][ T8156] netlink: 100 bytes leftover after parsing attributes in process `syz.2.642'. [ 135.457506][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.475539][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.484955][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.535457][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.563274][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.572506][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.686927][ T8170] netlink: 72 bytes leftover after parsing attributes in process `syz.4.644'. [ 136.187711][ T8196] x_tables: unsorted underflow at hook 2 [ 136.197887][ T63] bridge_slave_1: left allmulticast mode [ 136.203578][ T63] bridge_slave_1: left promiscuous mode [ 136.267737][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.268219][ T8197] netlink: 'syz.0.649': attribute type 8 has an invalid length. [ 136.294830][ T63] bridge_slave_0: left allmulticast mode [ 136.315003][ T63] bridge_slave_0: left promiscuous mode [ 136.353713][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.692441][ T8223] netlink: 'syz.4.654': attribute type 4 has an invalid length. [ 136.920744][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.933608][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.945316][ T63] bond0 (unregistering): Released all slaves [ 136.966238][ T8185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.077659][ T8229] netlink: 'syz.2.658': attribute type 2 has an invalid length. [ 137.102290][ T8229] netlink: 'syz.2.658': attribute type 2 has an invalid length. [ 137.193171][ T8160] chnl_net:caif_netlink_parms(): no params data found [ 137.479956][ T8245] __nla_validate_parse: 1 callbacks suppressed [ 137.479978][ T8245] netlink: 256 bytes leftover after parsing attributes in process `syz.2.663'. [ 137.656157][ T5835] Bluetooth: hci3: command tx timeout [ 137.687829][ T63] hsr_slave_0: left promiscuous mode [ 137.695992][ T8256] netlink: 'syz.2.665': attribute type 30 has an invalid length. [ 137.721832][ T63] hsr_slave_1: left promiscuous mode [ 137.736816][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.753096][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.764576][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.805239][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 137.814361][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.879128][ T63] veth1_macvtap: left promiscuous mode [ 138.884733][ T63] veth0_macvtap: left promiscuous mode [ 138.932883][ T63] veth1_vlan: left promiscuous mode [ 138.958507][ T63] veth0_vlan: left promiscuous mode [ 139.749713][ T5835] Bluetooth: hci3: command tx timeout [ 139.843343][ T63] team0 (unregistering): Port device team_slave_1 removed [ 139.883421][ T63] team0 (unregistering): Port device team_slave_0 removed [ 139.889833][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880272bd000: rx timeout, send abort [ 139.903364][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dc9ec00: rx timeout, send abort [ 139.912066][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880272bd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.926511][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dc9ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 140.348110][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.355718][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.363302][ T8160] bridge_slave_0: entered allmulticast mode [ 140.371952][ T8160] bridge_slave_0: entered promiscuous mode [ 140.383222][ T8256] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.388973][ T8258] erspan0: mtu less than device minimum [ 140.526702][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.535893][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.543188][ T8160] bridge_slave_1: entered allmulticast mode [ 140.565742][ T8160] bridge_slave_1: entered promiscuous mode [ 140.753208][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.803751][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 140.822301][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.085540][ T8160] team0: Port device team_slave_0 added [ 141.134675][ T8160] team0: Port device team_slave_1 added [ 141.312151][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.325986][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.361037][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.404934][ T8329] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 141.425145][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.432895][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.468275][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.722883][ T8160] hsr_slave_0: entered promiscuous mode [ 141.762657][ T8160] hsr_slave_1: entered promiscuous mode [ 141.785876][ T8160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.793917][ T8160] Cannot create hsr debugfs directory [ 141.826077][ T5835] Bluetooth: hci3: command tx timeout [ 142.035241][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'. [ 142.078822][ T8353] netlink: 'syz.1.690': attribute type 2 has an invalid length. [ 142.125572][ T8359] netlink: 2804 bytes leftover after parsing attributes in process `syz.1.690'. [ 142.207775][ T8371] sctp: [Deprecated]: syz.4.695 (pid 8371) Use of int in max_burst socket option. [ 142.207775][ T8371] Use struct sctp_assoc_value instead [ 142.439579][ T8381] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 142.507351][ T8381] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.794099][ T8392] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 142.941496][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.703'. [ 142.956674][ T8407] xt_l2tp: v2 doesn't support IP mode [ 143.176883][ T8410] veth0_vlan: left promiscuous mode [ 143.205745][ T8410] veth0_vlan: entered promiscuous mode [ 143.414562][ T8160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.476664][ T8424] netlink: 144 bytes leftover after parsing attributes in process `syz.4.708'. [ 143.486301][ T8160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.521979][ T8160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.559481][ T8431] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.710'. [ 143.569098][ T8431] openvswitch: netlink: Message has 44053 unknown bytes. [ 143.596715][ T8160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.773731][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.711'. [ 143.916079][ T5835] Bluetooth: hci3: command tx timeout [ 143.985317][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.102872][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.158045][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.165179][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.263292][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.270520][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.321467][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 144.439799][ T8160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.609249][ T8478] Cannot find add_set index 0 as target [ 144.716958][ T8483] veth0_vlan: entered allmulticast mode [ 144.911545][ T8489] ªªªªªª: renamed from vlan0 [ 144.936360][ T8494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.725'. [ 144.962354][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.044221][ T8160] veth0_vlan: entered promiscuous mode [ 145.061875][ T8160] veth1_vlan: entered promiscuous mode [ 145.138941][ T8160] veth0_macvtap: entered promiscuous mode [ 145.161309][ T8160] veth1_macvtap: entered promiscuous mode [ 145.218184][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.251841][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.276614][ T8512] ip6t_srh: unknown srh invflags A757 [ 145.291400][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.323864][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.357120][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.383875][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.409151][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.433107][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.465423][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.488905][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.499794][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.510000][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.520595][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.530538][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.541541][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.551627][ T8160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.562232][ T8160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.573561][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.584286][ T8160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.593144][ T8160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.602211][ T8160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.611143][ T8160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.807381][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.815309][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.889518][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.909437][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.306004][ T8535] wg1: entered promiscuous mode [ 146.500219][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 146.827079][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'. [ 146.827637][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'. [ 146.878744][ T8558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.094321][ T8570] xt_CT: No such helper "pptp" [ 147.254075][ T8586] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 147.470906][ T8589] netlink: 'syz.1.747': attribute type 3 has an invalid length. [ 147.495059][ T8589] netlink: 766 bytes leftover after parsing attributes in process `syz.1.747'. [ 147.703250][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.246432][ T8606] netlink: 92 bytes leftover after parsing attributes in process `syz.4.753'. [ 148.307095][ T8609] netlink: 92 bytes leftover after parsing attributes in process `syz.4.753'. [ 148.344870][ T8613] netlink: 'syz.0.754': attribute type 15 has an invalid length. [ 148.708845][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.740092][ T8630] xt_HMARK: spi-set and port-set can't be combined [ 148.936820][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.066960][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.077902][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.087153][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.095266][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.186471][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.238749][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.379579][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.056254][ T35] bridge_slave_1: left allmulticast mode [ 150.061988][ T35] bridge_slave_1: left promiscuous mode [ 150.074422][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.091549][ T35] bridge_slave_0: left allmulticast mode [ 150.101190][ T35] bridge_slave_0: left promiscuous mode [ 150.117477][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.618139][ T8698] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.795610][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.812703][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.823327][ T35] bond0 (unregistering): Released all slaves [ 150.836739][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 151.496216][ T55] Bluetooth: hci3: command tx timeout [ 151.508780][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.536175][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.543499][ T8641] bridge_slave_0: entered allmulticast mode [ 151.567944][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.783'. [ 151.619461][ T8641] bridge_slave_0: entered promiscuous mode [ 151.650821][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.665020][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.682821][ T8641] bridge_slave_1: entered allmulticast mode [ 151.705002][ T8641] bridge_slave_1: entered promiscuous mode [ 151.733734][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 151.826152][ T8751] netlink: 'syz.0.788': attribute type 4 has an invalid length. [ 151.834672][ T8751] netlink: 152 bytes leftover after parsing attributes in process `syz.0.788'. [ 152.037950][ T35] hsr_slave_0: left promiscuous mode [ 152.044376][ T35] hsr_slave_1: left promiscuous mode [ 152.055589][ T8757] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 152.064039][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.076013][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.084099][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.092115][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.118504][ T35] veth1_macvtap: left promiscuous mode [ 152.129421][ T35] veth0_macvtap: left promiscuous mode [ 152.139216][ T35] veth1_vlan: left promiscuous mode [ 152.144617][ T35] veth0_vlan: left promiscuous mode [ 152.712393][ T35] team0 (unregistering): Port device team_slave_1 removed [ 152.797592][ T35] team0 (unregistering): Port device team_slave_0 removed [ 152.948244][ T8772] openvswitch: netlink: Message has 8 unknown bytes. [ 153.357312][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.367081][ T8757] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 153.385512][ T8757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.401228][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 153.457094][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.576169][ T55] Bluetooth: hci3: command tx timeout [ 153.709926][ T8641] team0: Port device team_slave_0 added [ 153.741596][ T8641] team0: Port device team_slave_1 added [ 154.068634][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 154.108034][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.127066][ T8811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.803'. [ 154.137057][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.213203][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.316690][ T8808] bridge0: port 3(gretap0) entered disabled state [ 154.323578][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.332679][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.444761][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.479064][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.591832][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.948900][ T8641] hsr_slave_0: entered promiscuous mode [ 154.990646][ T8641] hsr_slave_1: entered promiscuous mode [ 155.010169][ T8641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.024393][ T8641] Cannot create hsr debugfs directory [ 155.543723][ T8863] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 155.557004][ T8863] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 155.655957][ T55] Bluetooth: hci3: command tx timeout [ 155.807972][ T8878] x_tables: duplicate underflow at hook 2 [ 155.881985][ T8878] dvmrp0: entered allmulticast mode [ 156.062781][ T8885] vlan0: entered promiscuous mode [ 156.318934][ T8905] tipc: Started in network mode [ 156.323887][ T8905] tipc: Node identity ac14140f, cluster identity 4711 [ 156.342967][ T8905] tipc: New replicast peer: 255.255.255.255 [ 156.362332][ T8905] tipc: Enabled bearer , priority 10 [ 156.420209][ T8641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.481164][ T8641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.504544][ T8641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.538003][ T8641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.883761][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'. [ 156.931067][ T8924] netlink: 'syz.1.826': attribute type 8 has an invalid length. [ 156.987478][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'. [ 157.006469][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.048937][ T8924] ip6gretap0: entered promiscuous mode [ 157.083946][ T8924] batadv_slave_1: entered promiscuous mode [ 157.179952][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.329341][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.336625][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.346251][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.353416][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.409561][ T8943] tap0: tun_chr_ioctl cmd 1074025677 [ 157.415148][ T8943] tap0: linktype set to 778 [ 157.486112][ T5886] tipc: Node number set to 2886997007 [ 157.740776][ T5835] Bluetooth: hci3: command tx timeout [ 157.964234][ T8969] tipc: Enabled bearer , priority 0 [ 157.984554][ T8969] tipc: Resetting bearer [ 158.097561][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.302472][ T8641] veth0_vlan: entered promiscuous mode [ 158.370237][ T8641] veth1_vlan: entered promiscuous mode [ 158.396160][ T8991] netlink: 'syz.2.839': attribute type 11 has an invalid length. [ 158.454659][ T8641] veth0_macvtap: entered promiscuous mode [ 158.538759][ T8641] veth1_macvtap: entered promiscuous mode [ 158.565531][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.598497][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.635953][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.679760][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.706060][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.740220][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.750868][ T9017] netlink: 'syz.2.843': attribute type 28 has an invalid length. [ 158.758826][ T9017] netlink: 'syz.2.843': attribute type 3 has an invalid length. [ 158.766810][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.777559][ T9017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.843'. [ 158.786712][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.821389][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.923182][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.972132][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.994676][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.012881][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.023358][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.043863][ T9026] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 159.054759][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.085486][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.116028][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.137574][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.166954][ T9026] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 159.174175][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 159.205952][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 159.274915][ T8641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.300575][ T8641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.313744][ T8641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.331086][ T8641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.610337][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.618621][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.741092][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.749473][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.826307][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 160.032781][ T9065] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 160.150863][ T9062] delete_channel: no stack [ 160.179949][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 160.366942][ T9089] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 160.415975][ T9089] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 160.426262][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 160.713439][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.865'. [ 160.807329][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 160.833530][ T3477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.957845][ T9119] netlink: 6 bytes leftover after parsing attributes in process `syz.0.866'. [ 160.969984][ T9119] bridge: RTM_NEWNEIGH with invalid ether address [ 161.186994][ T3477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.405481][ T3477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.554691][ T3477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.972406][ T3477] bridge_slave_1: left allmulticast mode [ 161.997187][ T3477] bridge_slave_1: left promiscuous mode [ 162.023242][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.070595][ T3477] bridge_slave_0: left allmulticast mode [ 162.085273][ T3477] bridge_slave_0: left promiscuous mode [ 162.093664][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.236920][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 162.282552][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.294313][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.326857][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.335328][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.344833][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.352597][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.669546][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.680581][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.691989][ T3477] bond0 (unregistering): Released all slaves [ 163.257321][ T9203] xt_CT: No such helper "pptp" [ 163.764723][ T3477] hsr_slave_0: left promiscuous mode [ 163.771337][ T9238] syz.4.889[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.771442][ T9238] syz.4.889[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.799321][ T3477] hsr_slave_1: left promiscuous mode [ 163.814041][ T9238] syz.4.889[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.898412][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.921243][ T9245] x_tables: duplicate underflow at hook 3 [ 163.937268][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.977072][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.984565][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.062409][ T3477] veth1_macvtap: left promiscuous mode [ 164.073211][ T3477] veth0_macvtap: left promiscuous mode [ 164.086415][ T3477] veth1_vlan: left promiscuous mode [ 164.092096][ T3477] veth0_vlan: left promiscuous mode [ 164.456915][ T55] Bluetooth: hci3: command tx timeout [ 164.544200][ T9264] __nla_validate_parse: 3 callbacks suppressed [ 164.544218][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 164.731903][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 164.782277][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 165.029437][ T5886] IPVS: starting estimator thread 0... [ 165.126282][ T9268] IPVS: using max 18 ests per chain, 43200 per kthread [ 165.438613][ T9167] chnl_net:caif_netlink_parms(): no params data found [ 165.603698][ T9282] netlink: 188 bytes leftover after parsing attributes in process `syz.2.900'. [ 165.613132][ T9282] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 165.834577][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 166.074845][ T9282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.093564][ T9282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.117195][ T9282] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 166.130601][ T9282] veth1_vlan: left allmulticast mode [ 166.148845][ T9282] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 166.192943][ T9282] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 166.213653][ T9282] bond0 (unregistering): Released all slaves [ 166.292345][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.323830][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.358303][ T9167] bridge_slave_0: entered allmulticast mode [ 166.379382][ T9167] bridge_slave_0: entered promiscuous mode [ 166.413337][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.437453][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.489131][ T9167] bridge_slave_1: entered allmulticast mode [ 166.523902][ T9167] bridge_slave_1: entered promiscuous mode [ 166.536284][ T55] Bluetooth: hci3: command tx timeout [ 166.622646][ T9318] veth0_to_hsr: invalid flags given to default FDB implementation [ 166.721735][ T9330] tipc: Trying to set illegal importance in message [ 166.730633][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.767244][ T9332] netlink: 44 bytes leftover after parsing attributes in process `syz.4.910'. [ 166.777903][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.788507][ T9332] netlink: 43 bytes leftover after parsing attributes in process `syz.4.910'. [ 166.800281][ T9332] netlink: 'syz.4.910': attribute type 5 has an invalid length. [ 166.809076][ T9332] netlink: 43 bytes leftover after parsing attributes in process `syz.4.910'. [ 166.826098][ T9330] netlink: 'syz.0.909': attribute type 3 has an invalid length. [ 166.834916][ T9330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.909'. [ 166.943650][ T9167] team0: Port device team_slave_0 added [ 167.009997][ T9167] team0: Port device team_slave_1 added [ 167.121457][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.156067][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.194934][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 167.225944][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.297206][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.304214][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.365934][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.537230][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 167.712818][ T9167] hsr_slave_0: entered promiscuous mode [ 167.723062][ T9167] hsr_slave_1: entered promiscuous mode [ 167.755969][ T9167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.763794][ T9167] Cannot create hsr debugfs directory [ 167.879385][ T9375] ip6tnl2: entered promiscuous mode [ 168.179170][ T9395] dvmrp1: entered allmulticast mode [ 168.211377][ T9395] dvmrp0: left allmulticast mode [ 168.251447][ T9395] dvmrp1: left allmulticast mode [ 168.616161][ T55] Bluetooth: hci3: command tx timeout [ 168.962986][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 169.938566][ T9167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.016930][ T9167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.067446][ T9167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.161856][ T9167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.331185][ T9478] __nla_validate_parse: 1 callbacks suppressed [ 170.331207][ T9478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.945'. [ 170.680135][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.712306][ T55] Bluetooth: hci3: command tx timeout [ 170.789625][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.894020][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.901233][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.994910][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.002137][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.089331][ T9520] netlink: 5 bytes leftover after parsing attributes in process `syz.0.956'. [ 171.439809][ T9528] can: request_module (can-proto-0) failed. [ 171.581043][ T9546] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20004 [ 171.692796][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.844007][ T9167] veth0_vlan: entered promiscuous mode [ 171.857765][ T9557] pim6reg1: entered promiscuous mode [ 171.869543][ T9557] pim6reg1: entered allmulticast mode [ 171.884883][ T9167] veth1_vlan: entered promiscuous mode [ 171.973162][ T9167] veth0_macvtap: entered promiscuous mode [ 172.021941][ T9167] veth1_macvtap: entered promiscuous mode [ 172.029890][ T9557] can: request_module (can-proto-0) failed. [ 172.144195][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.174490][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.203065][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.251519][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.294293][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.322935][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.358916][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.401818][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.438941][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.504196][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.515087][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 172.554116][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.581687][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 172.589412][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.611380][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.621603][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.632527][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.642592][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.653597][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.664765][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.693992][ T9596] team0: No ports can be present during mode change [ 172.736790][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 172.748642][ T9167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.758242][ T9167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.771763][ T9167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.807742][ T9167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.233548][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.242895][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.319379][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.327341][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.718537][ T9650] block nbd0: not configured, cannot reconfigure [ 173.976473][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 174.211644][ T9673] netlink: 92 bytes leftover after parsing attributes in process `syz.0.986'. [ 174.412821][ T1335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.464765][ T9677] net veth1_virt_wifi : renamed from virt_wifi0 [ 174.613767][ T1335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.741799][ T1335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.812922][ T1335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.070369][ T1335] bridge_slave_1: left allmulticast mode [ 175.106682][ T1335] bridge_slave_1: left promiscuous mode [ 175.112617][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.163457][ T1335] bridge_slave_0: left allmulticast mode [ 175.185959][ T1335] bridge_slave_0: left promiscuous mode [ 175.191772][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.417314][ T9721] Cannot find del_set index 65531 as target [ 175.691415][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.701468][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.710394][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.725525][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.745133][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.757116][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.071719][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.087997][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.102808][ T1335] bond0 (unregistering): Released all slaves [ 176.333277][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.996'. [ 176.366798][ T9747] netlink: 9 bytes leftover after parsing attributes in process `syz.4.997'. [ 176.386482][ T9747] 0·: renamed from hsr_slave_1 (while UP) [ 176.584054][ T9747] 0·: entered allmulticast mode [ 176.598379][ T9747] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 176.667276][ T9756] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.823081][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 176.929602][ T9778] veth1_macvtap: left promiscuous mode [ 177.276929][ T9789] wg2: entered promiscuous mode [ 177.292221][ T9789] wg2: entered allmulticast mode [ 177.312769][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'. [ 177.412533][ T1335] hsr_slave_0: left promiscuous mode [ 177.422304][ T1335] hsr_slave_1: left promiscuous mode [ 177.438816][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.451608][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.462706][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.470685][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.496557][ T1335] veth1_macvtap: left promiscuous mode [ 177.502158][ T1335] veth0_macvtap: left promiscuous mode [ 177.512181][ T1335] veth1_vlan: left promiscuous mode [ 177.517602][ T1335] veth0_vlan: left promiscuous mode [ 177.816286][ T5835] Bluetooth: hci3: command tx timeout [ 177.961875][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 178.004180][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 178.535099][ T9730] chnl_net:caif_netlink_parms(): no params data found [ 178.606222][ T9801] bond3: entered promiscuous mode [ 178.614984][ T9801] bond3: entered allmulticast mode [ 178.633028][ T9801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.835903][ T9822] netlink: 'syz.2.1012': attribute type 4 has an invalid length. [ 179.019738][ T9836] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 179.073882][ T9730] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.092930][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.141951][ T9730] bridge_slave_0: entered allmulticast mode [ 179.195547][ T9730] bridge_slave_0: entered promiscuous mode [ 179.246328][ T9730] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.313843][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.327590][ T9730] bridge_slave_1: entered allmulticast mode [ 179.345752][ T9730] bridge_slave_1: entered promiscuous mode [ 179.509028][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 179.520463][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 179.533922][ T9730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.574553][ T9861] netlink: 'syz.4.1018': attribute type 2 has an invalid length. [ 179.601490][ T9730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.614434][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 179.654090][ T9868] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1019'. [ 179.663963][ T9868] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1019'. [ 179.681854][ T9868] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1019'. [ 179.906217][ T5835] Bluetooth: hci3: command tx timeout [ 179.929320][ T9730] team0: Port device team_slave_0 added [ 179.988983][ T9730] team0: Port device team_slave_1 added [ 180.092000][ T9886] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 180.112485][ T9730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.142297][ T9730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.171921][ T9730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.232576][ T9730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.255929][ T9730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.353860][ T9730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.530401][ T9730] hsr_slave_0: entered promiscuous mode [ 180.549038][ T9730] hsr_slave_1: entered promiscuous mode [ 180.616429][ T9730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.629808][ T9730] Cannot create hsr debugfs directory [ 180.673583][ T9915] sock: sock_set_timeout: `syz.0.1030' (pid 9915) tries to set negative timeout [ 181.207681][ T9944] netlink: 'syz.4.1035': attribute type 12 has an invalid length. [ 181.436884][ T9960] openvswitch: netlink: EtherType 50a is less than min 600 [ 181.706661][ T9955] syzkaller0: entered promiscuous mode [ 181.712205][ T9955] syzkaller0: entered allmulticast mode [ 181.976147][ T5835] Bluetooth: hci3: command tx timeout [ 182.824446][ T9984] __nla_validate_parse: 1 callbacks suppressed [ 182.824470][ T9984] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1047'. [ 183.682049][ T9983] netem: change failed [ 183.866297][ T9989] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 183.907600][ T9730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.947769][ T9989] bridge0: port 3(team0) entered blocking state [ 183.954175][ T9989] bridge0: port 3(team0) entered disabled state [ 184.000664][ T9989] team0: entered allmulticast mode [ 184.026752][ T9989] team_slave_0: entered allmulticast mode [ 184.043592][ T9989] team_slave_1: entered allmulticast mode [ 184.057098][ T5835] Bluetooth: hci3: command tx timeout [ 184.070884][ T9989] team0: entered promiscuous mode [ 184.088513][ T9989] team_slave_0: entered promiscuous mode [ 184.135199][ T9989] team_slave_1: entered promiscuous mode [ 184.165543][ T9989] bridge0: port 3(team0) entered blocking state [ 184.172034][ T9989] bridge0: port 3(team0) entered forwarding state [ 184.202637][ T9730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.247460][ T9730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.406032][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 184.706205][ T9730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.965194][T10041] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 184.982102][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.048055][ T9730] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.067064][T10041] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 185.100314][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.107535][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.179816][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.187036][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.260361][T10053] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1062'. [ 185.296378][T10053] netlink: 'syz.0.1062': attribute type 9 has an invalid length. [ 185.858042][ T9730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.004086][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1072'. [ 186.024910][T10093] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 186.048633][ T9730] veth0_vlan: entered promiscuous mode [ 186.082705][T10100] syzkaller1: entered promiscuous mode [ 186.096885][T10100] syzkaller1: entered allmulticast mode [ 186.128174][ T9730] veth1_vlan: entered promiscuous mode [ 186.161260][T10095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.197313][T10106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1072'. [ 186.276160][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 186.328105][ T9730] veth0_macvtap: entered promiscuous mode [ 186.380220][ T9730] veth1_macvtap: entered promiscuous mode [ 186.449323][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.493841][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.515998][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.547865][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.569237][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.598002][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.640833][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.670658][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.697012][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.808661][T10126] IPv6: sit3: Disabled Multicast RS [ 186.884124][ T9] hid-generic 0005:04F3:0058.0001: item fetching failed at offset 0/1 [ 186.901699][ T9] hid-generic 0005:04F3:0058.0001: probe with driver hid-generic failed with error -22 [ 186.987483][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.998428][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.008565][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.019927][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.030392][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.041367][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.066356][ T9730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.091319][ T9730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.116490][ T9730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.206967][ T9730] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.236466][ T9730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.245246][ T9730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.284178][ T9730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.557704][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.565587][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.654486][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.671796][T10170] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 187.686391][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.757135][T10175] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1088'. [ 187.798575][T10168] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.256182][T10212] netlink: 'syz.4.1095': attribute type 4 has an invalid length. [ 188.506563][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 188.565154][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.594468][T10221] delete_channel: no stack [ 188.721220][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.026389][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.206833][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.536365][ T63] bridge_slave_1: left allmulticast mode [ 189.542098][ T63] bridge_slave_1: left promiscuous mode [ 189.548277][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.668649][ T63] bridge_slave_0: left allmulticast mode [ 189.701350][ T63] bridge_slave_0: left promiscuous mode [ 189.752570][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.767133][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.776300][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.787926][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.797718][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.805205][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.812274][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.406947][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.419685][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.432490][ T63] bond0 (unregistering): Released all slaves [ 190.612953][T10297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.675304][T10300] IPv6: sit1: Disabled Multicast RS [ 190.688081][T10300] sit1: entered allmulticast mode [ 190.928448][ T63] hsr_slave_0: left promiscuous mode [ 191.027037][ T63] hsr_slave_1: left promiscuous mode [ 191.034729][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.047667][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.067785][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.083961][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.138829][ T63] veth1_macvtap: left promiscuous mode [ 191.144427][ T63] veth0_macvtap: left promiscuous mode [ 191.178084][ T63] veth1_vlan: left promiscuous mode [ 191.192396][ T63] veth0_vlan: left promiscuous mode [ 191.299543][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1118'. [ 191.901150][ T5835] Bluetooth: hci3: command tx timeout [ 191.966854][ T63] team0 (unregistering): Port device team_slave_1 removed [ 192.011690][ T63] team0 (unregistering): Port device team_slave_0 removed [ 192.679217][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 192.728016][T10267] chnl_net:caif_netlink_parms(): no params data found [ 192.799347][T10356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 192.947391][T10368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.954707][T10368] IPv6: NLM_F_CREATE should be set when creating new route [ 193.314377][T10267] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.368964][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.376494][T10267] bridge_slave_0: entered allmulticast mode [ 193.383743][T10267] bridge_slave_0: entered promiscuous mode [ 193.399280][T10267] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.406650][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.413921][T10267] bridge_slave_1: entered allmulticast mode [ 193.421352][T10267] bridge_slave_1: entered promiscuous mode [ 193.637614][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.668972][T10387] pim6reg1: entered promiscuous mode [ 193.671201][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 193.674311][T10387] pim6reg1: entered allmulticast mode [ 193.680709][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.892614][T10267] team0: Port device team_slave_0 added [ 193.925438][T10267] team0: Port device team_slave_1 added [ 193.980160][ T5835] Bluetooth: hci3: command tx timeout [ 194.124302][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.145893][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.187468][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 194.204769][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.206643][T10433] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 194.264088][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.294752][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.363046][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.477936][T10267] hsr_slave_0: entered promiscuous mode [ 194.493895][T10267] hsr_slave_1: entered promiscuous mode [ 194.521683][T10267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.541947][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548534][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565932][T10267] Cannot create hsr debugfs directory [ 194.723141][T10458] tipc: Enabling of bearer rejected, already enabled [ 195.330053][T10490] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1150'. [ 195.356728][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 195.679492][T10511] xt_TCPMSS: Only works on TCP SYN packets [ 195.812402][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 195.842221][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 195.928586][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 196.058277][ T5847] Bluetooth: hci3: command tx timeout [ 196.069816][T10267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.148196][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 196.179968][T10267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.220662][T10267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.256385][T10267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.529216][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.590017][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.616017][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 196.622302][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 196.640315][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.647528][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.743106][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.750353][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.794071][T10267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.824395][T10267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.856585][T10566] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 196.958241][T10566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.217166][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 197.381296][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 197.412074][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.442960][T10595] gretap2: entered allmulticast mode [ 197.598258][T10267] veth0_vlan: entered promiscuous mode [ 197.609926][T10267] veth1_vlan: entered promiscuous mode [ 197.667379][T10267] veth0_macvtap: entered promiscuous mode [ 197.677664][T10267] veth1_macvtap: entered promiscuous mode [ 197.730975][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.746642][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.765893][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.785853][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.795729][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.820724][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.830681][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.841198][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.852437][T10267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.866558][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.877123][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.887549][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.898539][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.908759][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.919467][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.929670][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.940430][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.953317][T10267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.964259][T10267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.973090][T10267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.982564][T10267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.991478][T10267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.138254][ T55] Bluetooth: hci3: command tx timeout [ 198.194330][T10627] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 198.203652][T10620] veth5: entered allmulticast mode [ 198.355329][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.392704][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.648844][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.714257][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.004314][T10659] __nla_validate_parse: 2 callbacks suppressed [ 199.004338][T10659] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1187'. [ 199.032593][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1188'. [ 199.297325][T10671] geneve1: mtu less than device minimum [ 199.305183][T10671] geneve1: mtu less than device minimum [ 199.444147][T10682] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 199.477886][T10676] wg2: left promiscuous mode [ 199.482567][T10676] wg2: left allmulticast mode [ 199.527918][T10676] team0: Device wg2 is of different type [ 199.566400][T10682] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 199.686526][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1192'. [ 199.940299][ T1126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.964283][T10706] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 200.107770][ T1126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.183321][T10706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.222652][T10711] bond2: (slave gretap1): making interface the new active one [ 200.240432][T10711] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 200.378058][ T1126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.485224][ T1126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.643535][ T1126] bridge_slave_1: left allmulticast mode [ 200.650360][ T1126] bridge_slave_1: left promiscuous mode [ 200.664571][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.675566][ T1126] bridge_slave_0: left allmulticast mode [ 200.689722][ T1126] bridge_slave_0: left promiscuous mode [ 200.695536][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.067729][T10753] syz.4.1199[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.068489][T10753] syz.4.1199[10753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.146640][T10752] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002 [ 201.707383][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.718076][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.735484][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.787296][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.795563][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.804414][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.818354][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.848224][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.861454][ T1126] bond0 (unregistering): Released all slaves [ 201.931285][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 201.995897][T10759] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 202.217715][T10779] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.225633][T10779] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.892027][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1211'. [ 203.036091][ T1126] hsr_slave_0: left promiscuous mode [ 203.246149][ T1126] hsr_slave_1: left promiscuous mode [ 203.257015][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.268055][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.315247][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.341558][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.434337][ T1126] veth1_macvtap: left promiscuous mode [ 203.447601][ T1126] veth0_macvtap: left promiscuous mode [ 203.458868][ T1126] veth1_vlan: left promiscuous mode [ 203.473555][ T1126] veth0_vlan: left promiscuous mode [ 203.761689][T10841] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1213'. [ 203.779389][T10841] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 203.900007][ T5835] Bluetooth: hci3: command tx timeout [ 204.204388][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 204.247476][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 204.757416][T10835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.818425][T10847] batadv_slave_1: entered promiscuous mode [ 204.821687][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'. [ 204.824481][T10847] batadv_slave_1: entered allmulticast mode [ 205.028346][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 205.075397][T10769] chnl_net:caif_netlink_parms(): no params data found [ 205.254026][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 205.283567][T10867] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1221'. [ 205.356558][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.379709][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.419929][T10769] bridge_slave_0: entered allmulticast mode [ 205.455363][T10769] bridge_slave_0: entered promiscuous mode [ 205.483114][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.505963][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.536178][T10769] bridge_slave_1: entered allmulticast mode [ 205.543411][T10769] bridge_slave_1: entered promiscuous mode [ 205.615523][T10884] netlink: 'syz.4.1223': attribute type 10 has an invalid length. [ 205.629781][T10882] netlink: 'syz.1.1222': attribute type 25 has an invalid length. [ 205.637960][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 205.718705][T10884] team0: Port device netdevsim0 added [ 205.727421][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'. [ 205.728932][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.767621][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.878321][T10769] team0: Port device team_slave_0 added [ 205.911353][T10769] team0: Port device team_slave_1 added [ 205.961674][T10894] netlink: 'syz.4.1225': attribute type 10 has an invalid length. [ 205.976079][ T5835] Bluetooth: hci3: command tx timeout [ 206.008990][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.036421][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.086187][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.103412][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.112433][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.141492][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.358482][T10769] hsr_slave_0: entered promiscuous mode [ 206.396398][T10769] hsr_slave_1: entered promiscuous mode [ 206.535377][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.554393][T10769] Cannot create hsr debugfs directory [ 206.581914][T10912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.594391][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.605101][T10912] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.614535][T10912] netlink: 'syz.2.1231': attribute type 2 has an invalid length. [ 206.623212][T10912] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.968261][T10929] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.989957][T10933] netlink: zone id is out of range [ 206.995143][T10933] netlink: zone id is out of range [ 207.027827][T10933] netlink: zone id is out of range [ 207.054582][T10933] netlink: get zone limit has 8 unknown bytes [ 207.065171][T10935] bond0: option mode: unable to set because the bond device has slaves [ 207.293157][T10945] team0: Device is already in use. [ 207.326485][T10949] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.359629][T10950] netlink: 'syz.4.1242': attribute type 39 has an invalid length. [ 208.084149][ T5835] Bluetooth: hci3: command tx timeout [ 208.215480][T10993] xt_SECMARK: invalid mode: 0 [ 208.267952][T10993] xt_SECMARK: invalid mode: 0 [ 208.272877][T10993] xt_SECMARK: invalid mode: 0 [ 208.333483][ T5886] hid-generic 0005:04F3:0058.0002: item fetching failed at offset 0/1 [ 208.358174][ T5886] hid-generic 0005:04F3:0058.0002: probe with driver hid-generic failed with error -22 [ 208.558199][T11011] netlink: 'syz.4.1259': attribute type 142 has an invalid length. [ 208.604311][T10769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.614911][T11020] netlink: 'syz.4.1259': attribute type 142 has an invalid length. [ 208.628803][T10769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.702774][T10769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.737892][T10769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.910285][T11037] tipc: Started in network mode [ 208.934525][T11037] tipc: Node identity ac14140f, cluster identity 4711 [ 208.958263][T11037] tipc: New replicast peer: 255.255.255.255 [ 208.976627][T11037] tipc: Enabled bearer , priority 10 [ 209.198624][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.294956][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.469671][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.476935][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.555365][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.562675][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.635895][T11079] netlink: 'syz.1.1274': attribute type 75 has an invalid length. [ 210.095967][ T9] tipc: Node number set to 2886997007 [ 210.137657][ T55] Bluetooth: hci3: command tx timeout [ 210.207864][T11099] netlink: 'syz.2.1277': attribute type 3 has an invalid length. [ 210.215666][T11099] __nla_validate_parse: 41 callbacks suppressed [ 210.215686][T11099] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1277'. [ 210.327483][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.669337][T10769] veth0_vlan: entered promiscuous mode [ 210.747434][T10769] veth1_vlan: entered promiscuous mode [ 210.884584][T10769] veth0_macvtap: entered promiscuous mode [ 210.915214][T10769] veth1_macvtap: entered promiscuous mode [ 211.006922][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.068884][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.093126][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.131593][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.179550][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.215878][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.275663][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.320186][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.361607][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.420928][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.460662][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.489640][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.511902][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.560835][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.594534][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.631098][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.659327][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1291'. [ 211.683890][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.707168][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.768538][T10769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.827893][T10769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.863439][T10769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.892946][T10769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.976403][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 212.154009][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.245502][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.263548][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.341874][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.356127][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.436591][T11197] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 212.463734][T11193] sctp: [Deprecated]: syz.4.1298 (pid 11193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.463734][T11193] Use struct sctp_sack_info instead [ 212.650774][T11005] ================================================================== [ 212.658912][T11005] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 212.666531][T11005] Read of size 8 at addr ffff88807f4cc060 by task khidpd_04f30058/11005 [ 212.674897][T11005] [ 212.677278][T11005] CPU: 0 UID: 0 PID: 11005 Comm: khidpd_04f30058 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 212.688509][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.698607][T11005] Call Trace: [ 212.701919][T11005] [ 212.704883][T11005] dump_stack_lvl+0x241/0x360 [ 212.709623][T11005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.714903][T11005] ? __pfx__printk+0x10/0x10 [ 212.719542][T11005] ? _printk+0xd5/0x120 [ 212.723756][T11005] ? __virt_addr_valid+0x183/0x530 [ 212.728906][T11005] ? __virt_addr_valid+0x183/0x530 [ 212.734042][T11005] print_report+0x169/0x550 [ 212.738568][T11005] ? __virt_addr_valid+0x183/0x530 [ 212.743696][T11005] ? __virt_addr_valid+0x183/0x530 [ 212.748852][T11005] ? __virt_addr_valid+0x45f/0x530 [ 212.753974][T11005] ? __phys_addr+0xba/0x170 [ 212.758775][T11005] ? __mutex_lock+0x7fb/0xee0 [ 212.763562][T11005] kasan_report+0x143/0x180 [ 212.768165][T11005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 212.774078][T11005] ? __mutex_lock+0x7fb/0xee0 [ 212.778813][T11005] __mutex_lock+0x7fb/0xee0 [ 212.783350][T11005] ? __mutex_lock+0x5ef/0xee0 [ 212.788076][T11005] ? l2cap_unregister_user+0x6a/0x1c0 [ 212.793465][T11005] ? __pfx___mutex_lock+0x10/0x10 [ 212.798508][T11005] ? __pfx___timer_delete_sync+0x10/0x10 [ 212.804155][T11005] l2cap_unregister_user+0x6a/0x1c0 [ 212.809376][T11005] hidp_session_thread+0x450/0x490 [ 212.814511][T11005] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 212.820790][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 212.826438][T11005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 212.832347][T11005] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 212.838607][T11005] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 212.845112][T11005] ? __kthread_parkme+0x169/0x1d0 [ 212.850152][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 212.855892][T11005] kthread+0x2f0/0x390 [ 212.860080][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 212.865729][T11005] ? __pfx_kthread+0x10/0x10 [ 212.870338][T11005] ret_from_fork+0x4b/0x80 [ 212.874851][T11005] ? __pfx_kthread+0x10/0x10 [ 212.879458][T11005] ret_from_fork_asm+0x1a/0x30 [ 212.884257][T11005] [ 212.887314][T11005] [ 212.889726][T11005] Allocated by task 10769: [ 212.894171][T11005] kasan_save_track+0x3f/0x80 [ 212.898893][T11005] __kasan_kmalloc+0x98/0xb0 [ 212.903494][T11005] __kmalloc_noprof+0x285/0x4c0 [ 212.908379][T11005] hci_alloc_dev_priv+0x27/0x2030 [ 212.913418][T11005] vhci_create_device+0x116/0x6a0 [ 212.918469][T11005] vhci_write+0x3cf/0x490 [ 212.922811][T11005] vfs_write+0xaeb/0xd30 [ 212.927073][T11005] ksys_write+0x18f/0x2b0 [ 212.931428][T11005] do_syscall_64+0xf3/0x230 [ 212.935964][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.941987][T11005] [ 212.944328][T11005] Freed by task 10769: [ 212.948406][T11005] kasan_save_track+0x3f/0x80 [ 212.953160][T11005] kasan_save_free_info+0x40/0x50 [ 212.958244][T11005] __kasan_slab_free+0x59/0x70 [ 212.963038][T11005] kfree+0x196/0x430 [ 212.967055][T11005] hci_release_dev+0x1525/0x16b0 [ 212.972038][T11005] bt_host_release+0x83/0x90 [ 212.976658][T11005] device_release+0x99/0x1c0 [ 212.981282][T11005] kobject_put+0x22f/0x480 [ 212.985749][T11005] vhci_release+0x88/0xd0 [ 212.990106][T11005] __fput+0x23c/0xa50 [ 212.994104][T11005] task_work_run+0x24f/0x310 [ 212.998720][T11005] do_exit+0xa2f/0x28e0 [ 213.002893][T11005] do_group_exit+0x207/0x2c0 [ 213.007502][T11005] __x64_sys_exit_group+0x3f/0x40 [ 213.012710][T11005] x64_sys_call+0x26a8/0x26b0 [ 213.017393][T11005] do_syscall_64+0xf3/0x230 [ 213.021912][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.028086][T11005] [ 213.030451][T11005] Last potentially related work creation: [ 213.036212][T11005] kasan_save_stack+0x3f/0x60 [ 213.040917][T11005] __kasan_record_aux_stack+0xac/0xc0 [ 213.046311][T11005] insert_work+0x3e/0x330 [ 213.050672][T11005] __queue_work+0xb66/0xf50 [ 213.055191][T11005] queue_work_on+0x1c2/0x380 [ 213.059802][T11005] process_scheduled_works+0xa66/0x1840 [ 213.065363][T11005] worker_thread+0x870/0xd30 [ 213.069981][T11005] kthread+0x2f0/0x390 [ 213.074177][T11005] ret_from_fork+0x4b/0x80 [ 213.078623][T11005] ret_from_fork_asm+0x1a/0x30 [ 213.083399][T11005] [ 213.085753][T11005] Second to last potentially related work creation: [ 213.092773][T11005] kasan_save_stack+0x3f/0x60 [ 213.097460][T11005] __kasan_record_aux_stack+0xac/0xc0 [ 213.102872][T11005] insert_work+0x3e/0x330 [ 213.107409][T11005] __queue_work+0xc8b/0xf50 [ 213.111928][T11005] call_timer_fn+0x187/0x650 [ 213.116532][T11005] __run_timer_base+0x695/0x8e0 [ 213.121393][T11005] run_timer_softirq+0xb7/0x170 [ 213.126513][T11005] handle_softirqs+0x2d4/0x9b0 [ 213.131292][T11005] __irq_exit_rcu+0xf7/0x220 [ 213.135898][T11005] irq_exit_rcu+0x9/0x30 [ 213.140180][T11005] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 213.145828][T11005] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.151824][T11005] [ 213.154155][T11005] The buggy address belongs to the object at ffff88807f4cc000 [ 213.154155][T11005] which belongs to the cache kmalloc-8k of size 8192 [ 213.168249][T11005] The buggy address is located 96 bytes inside of [ 213.168249][T11005] freed 8192-byte region [ffff88807f4cc000, ffff88807f4ce000) [ 213.182055][T11005] [ 213.184385][T11005] The buggy address belongs to the physical page: [ 213.190809][T11005] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f4c8 [ 213.199660][T11005] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.208260][T11005] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 213.215830][T11005] page_type: f5(slab) [ 213.219821][T11005] raw: 00fff00000000040 ffff88801ac42280 ffffea0000a2de00 dead000000000002 [ 213.228436][T11005] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 213.237039][T11005] head: 00fff00000000040 ffff88801ac42280 ffffea0000a2de00 dead000000000002 [ 213.245746][T11005] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 213.254511][T11005] head: 00fff00000000003 ffffea0001fd3201 ffffffffffffffff 0000000000000000 [ 213.263199][T11005] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 213.271915][T11005] page dumped because: kasan: bad access detected [ 213.278435][T11005] page_owner tracks the page as allocated [ 213.284159][T11005] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5508, tgid 5508 (dhcpcd-run-hook), ts 47098658755, free_ts 47076446228 [ 213.305192][T11005] post_alloc_hook+0x1f3/0x230 [ 213.309982][T11005] get_page_from_freelist+0x365c/0x37a0 [ 213.315804][T11005] __alloc_pages_noprof+0x292/0x710 [ 213.321016][T11005] alloc_pages_mpol_noprof+0x3e8/0x680 [ 213.326487][T11005] alloc_slab_page+0x6a/0x110 [ 213.331176][T11005] allocate_slab+0x5a/0x2b0 [ 213.335685][T11005] ___slab_alloc+0xc27/0x14a0 [ 213.340405][T11005] __slab_alloc+0x58/0xa0 [ 213.344767][T11005] __kmalloc_cache_noprof+0x27b/0x390 [ 213.350153][T11005] tomoyo_init_log+0x11cd/0x2050 [ 213.355115][T11005] tomoyo_supervisor+0x38a/0x11f0 [ 213.360149][T11005] tomoyo_env_perm+0x178/0x210 [ 213.364937][T11005] tomoyo_find_next_domain+0x146e/0x1d40 [ 213.370694][T11005] tomoyo_bprm_check_security+0x117/0x180 [ 213.376436][T11005] security_bprm_check+0x86/0x250 [ 213.381479][T11005] bprm_execve+0xa53/0x17a0 [ 213.386001][T11005] page last free pid 5507 tgid 5507 stack trace: [ 213.392329][T11005] free_unref_page+0xd3f/0x1010 [ 213.397205][T11005] __slab_free+0x2c2/0x380 [ 213.401625][T11005] qlist_free_all+0x9a/0x140 [ 213.406227][T11005] kasan_quarantine_reduce+0x14f/0x170 [ 213.411722][T11005] __kasan_slab_alloc+0x23/0x80 [ 213.416606][T11005] __kmalloc_noprof+0x236/0x4c0 [ 213.421493][T11005] tomoyo_supervisor+0xe0d/0x11f0 [ 213.426537][T11005] tomoyo_path_permission+0x243/0x360 [ 213.431950][T11005] tomoyo_check_open_permission+0x307/0x4f0 [ 213.437859][T11005] security_file_open+0xac/0x250 [ 213.442821][T11005] do_dentry_open+0x328/0x1b70 [ 213.447595][T11005] vfs_open+0x3e/0x330 [ 213.451683][T11005] path_openat+0x2c84/0x3590 [ 213.456367][T11005] do_filp_open+0x27f/0x4e0 [ 213.460875][T11005] do_sys_openat2+0x13e/0x1d0 [ 213.465564][T11005] __x64_sys_openat+0x247/0x2a0 [ 213.470866][T11005] [ 213.473384][T11005] Memory state around the buggy address: [ 213.479020][T11005] ffff88807f4cbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.487348][T11005] ffff88807f4cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.495513][T11005] >ffff88807f4cc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.503664][T11005] ^ [ 213.510871][T11005] ffff88807f4cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.518946][T11005] ffff88807f4cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.527122][T11005] ================================================================== [ 213.540521][T11005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.547780][T11005] CPU: 0 UID: 0 PID: 11005 Comm: khidpd_04f30058 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 213.559014][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.569153][T11005] Call Trace: [ 213.572472][T11005] [ 213.575442][T11005] dump_stack_lvl+0x241/0x360 [ 213.580201][T11005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.585448][T11005] ? __pfx__printk+0x10/0x10 [ 213.590106][T11005] ? vscnprintf+0x5d/0x90 [ 213.594484][T11005] panic+0x349/0x880 [ 213.598426][T11005] ? check_panic_on_warn+0x21/0xb0 [ 213.603585][T11005] ? __pfx_panic+0x10/0x10 [ 213.608043][T11005] ? mark_lock+0x9a/0x360 [ 213.612413][T11005] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 213.618351][T11005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 213.624292][T11005] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.630667][T11005] ? print_report+0x502/0x550 [ 213.635394][T11005] check_panic_on_warn+0x86/0xb0 [ 213.640378][T11005] ? __mutex_lock+0x7fb/0xee0 [ 213.645106][T11005] end_report+0x77/0x160 [ 213.649392][T11005] kasan_report+0x154/0x180 [ 213.653934][T11005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 213.659918][T11005] ? __mutex_lock+0x7fb/0xee0 [ 213.664654][T11005] __mutex_lock+0x7fb/0xee0 [ 213.669213][T11005] ? __mutex_lock+0x5ef/0xee0 [ 213.674034][T11005] ? l2cap_unregister_user+0x6a/0x1c0 [ 213.679458][T11005] ? __pfx___mutex_lock+0x10/0x10 [ 213.684534][T11005] ? __pfx___timer_delete_sync+0x10/0x10 [ 213.690316][T11005] l2cap_unregister_user+0x6a/0x1c0 [ 213.695573][T11005] hidp_session_thread+0x450/0x490 [ 213.700735][T11005] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 213.706673][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 213.712349][T11005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 213.718291][T11005] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 213.724682][T11005] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 213.730992][T11005] ? __kthread_parkme+0x169/0x1d0 [ 213.736074][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 213.741860][T11005] kthread+0x2f0/0x390 [ 213.745981][T11005] ? __pfx_hidp_session_thread+0x10/0x10 [ 213.751681][T11005] ? __pfx_kthread+0x10/0x10 [ 213.756316][T11005] ret_from_fork+0x4b/0x80 [ 213.760777][T11005] ? __pfx_kthread+0x10/0x10 [ 213.765414][T11005] ret_from_fork_asm+0x1a/0x30 [ 213.770218][T11005] [ 213.773575][T11005] Kernel Offset: disabled [ 213.777912][T11005] Rebooting in 86400 seconds..