last executing test programs: 1m22.631010865s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 1m17.359192925s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 1m9.027910361s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 1m4.311397048s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 53.462814461s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 51.837628546s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 39.320181998s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 38.693358109s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 25.921147098s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 25.286571366s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 12.39392153s ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000000300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'\x00', &(0x7f0000000080)=@ethtool_rxfh={0x47, 0xfbffffff, 0x9, 0x3, 0x4, "b62f9b", 0xfffffffe, [0x8, 0x6]}}) (async) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f0000000400)=""/52, 0x34}], 0x4, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x3ee, 0x7}, &(0x7f0000000480)=0xa34, &(0x7f00000004c0), 0xffffffffffffa89e, 0x7, 0xd, 0x0, 0x2f, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x2}}], 0x70, 0x22000000}, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000e40)) 11.059955314s ago: executing program 0 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000000001010400000000141a0000020000000c00164000000497000000052400028014000180080001000000f1ff07000200ac1e00010c0002800500010000000000080007400000000108001640000000040c92ea85affa252d38c68587d3e382cfb8541ec7f7345834e2acf702d40d9995d445f28c7fe2266760ea2fa07cf4a3d4f45985eb33429544ddcb74b6f55eb21a8e1587920401c7188b176997f4dfa9f4f753526d6d3b65d7abaa891ff6346924016f8b17ba8e207fdfa1c2bcf74f4e612cb9411f37e0201579bcc046a7dcbc1ce24a687f620a35fd808ab0cd7e97a93f2ca4cd971e7b8c61cfa464547083cd"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r4) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="5a6fe83bb7ceafee47a462", 0xb) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x8, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) 2.370004576s ago: executing program 1 (id=1329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7b84e339}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.796765504s ago: executing program 2 (id=1335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.701781732s ago: executing program 2 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) recvfrom$inet(r1, &(0x7f00000000c0)=""/131, 0x83, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) 1.585123553s ago: executing program 2 (id=1338): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400030}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="749b0000000000082cbd14112c684a8f0909eb2b7000ffdbdf25230807ff4e214e21ff0000000487290006000000bd0f0000070000002a5d", @ANYRES32=r2, @ANYBLOB="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"], 0x374}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xf}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x81}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x62e7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7fffffff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd687fefc0000c11"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000000a14030a28bd7000ffdbdf251163736550799bca669a01eff2e48f"], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x2) r9 = socket(0x10, 0x3, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x1, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='svcrdma_decode_short_err\x00', 0xffffffffffffffff, 0x0, 0xc}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r10, r11, 0x0, 0x25, &(0x7f00000007c0)='\xaf\x7f\x1fP\xd8\xce\xc6,\a\xb1\xa0\xff\xd2\x80\xaf\x9a\xe0d\xd4\x9bI\x89\xd5\x13\x83f\x01y\xf4lB\xca\x7f\x8b[\x9a\xf7'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x970b) r14 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r14, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc}, 0xc) 1.424733458s ago: executing program 1 (id=1340): socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x22020600) (async) r1 = socket(0x29, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) 1.265299902s ago: executing program 2 (id=1341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmmsg$alg(r1, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="7d49c61426053263ce2810df622e33caa920ba3f245693d495d424c8b5fa386c335067f913bad377a45b8515888130592d84a81175bd0a50f50bcdd763c4f18b69c13375ffd63d3f066b02f92636a11503e7561f3c65e983d52b9631e5004d1ae8ef071dbd99245cab94df767fd05394048b3d8d1e6f19", 0x77}, {&(0x7f0000000180)="6c65a2efba6d89dd4aaafd6baa87a32b8e9dd459be3fbfe2999b753ece576a128a026c17913e7f13d852ead1044a9dc35426bc43616f8cb504bb7e72ee446522ff19d08e03252c27f6ddf7ea2882dcce56d2336fb0c0b0b0471eddf26691661d952deb60283c2a4c45f1d1d93f4a4560", 0x70}, {&(0x7f0000000200)}, {&(0x7f0000000240)="13dcea85175429da7022645d18dcbf169d90c4431ceb8b2bc436d2e8110ab3639f129f08ce1fa0015e62bea04a9aa9c018494337fa7314f42d1c5530dd9a316d56f8cb1cec63147fe23a2cb26249e028a3e80ba296753e1743442ab134695db2e0273aff9a72e7f89c7b27ee93a0cdcda3b7485f99f3f2446de155108a2b1fb8e823b82eadc859d9284f117239b3a0acf0", 0x91}, {&(0x7f0000000300)="8204f88bd850b0087db8970da6515c85a8d3a17698780663017ecc980782873a6f7e70e86c5820a52431b1a3fdd7db6827ae3f16242c73c9610642059a683573616afdc0ef7f2a13583a5875cdf6530c9813cf17d4b026962dfcd07965d8f53816668cf55ecd56909c1de9ee66761ea0bea8bf4413fe24d5ac937f7639602c6c9e823e3be47f4ff227ae6db6", 0x8c}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="ad8dc5dbd1c4b32633ee2b529e95a77396132b8cd0fc4aac4c3324c4e6d63e5a803840adc3da183d5e3d7d8d5bcbd3e323ceb4838cff222f00a46d2cb63b2aff785330715a43ed131d", 0x49}, {&(0x7f0000001480)="092835f2cbd3e1e020a065b992218b916ba7369d2386a4069e3d2a435882f6f48a8ee3371398984e199fd50ab4c7073af517298de0a19aae7503d85dc9ef6f88c1c927e3a513783b40ad1d5fc2ccad54df3394b96196e205775675f857acd1512999c76623d3b25f33d191d03cb0e2e224d8ce61f311dc103221c2bad9baca7fdd3b094a20102a8b4e7c97e1", 0x8c}, {&(0x7f0000001540)="0f2970ec9bf058046ebf1d82c5ef23ec9339ecb0fa2ca86d5d5289c1ddb35ae7b429", 0x22}], 0xa, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x48}], 0x1, 0x20000080) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) sendmmsg$alg(r3, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001700)="c57a6fee292ef1d24deb57afcce4a314241733441fb497c9df52e95c87cff36048e80e287df2182c3b23e9981bb8d202abfadf707c0a8ced99a93436a540f4a4cadf1a7bb7288e12b32cb0bab35415c44b8daf4e91488f60279b807a9c5dc06c126449ae60ebb30a5be8bc2890641e3869", 0x71}, {&(0x7f0000001780)="653795d08747e173954b45831f75680f659dfebbc355fbdcd205806d6efca88a745a9ae70b8e6737d4b485ee9bc1123b8e100afa97dc3736f120a805a787d9cdaf5ce8d9694c4ca04b79259f80d18f5b8790f96edf8e37ddec291dc3c6caa72427c0d2ee27789cd7ea0dabe702893f7a7c5d4f16e3bf7e18dce3051448f6c060d6f06dccbd6d8b338e46e2c02102e3858a93171973", 0x95}], 0x2, &(0x7f0000001840)=[@iv={0xa0, 0x117, 0x2, 0x8a, "7f049b3eea9922d4fefef96fdc4dbab3013546b67df2ac79729ba306108f76fa45ffde8f82be901da4fd376e96e54fdc97e8813939f1b54a39b074c27195e3bd810095b3fe9e85dc129fb24fe0ba57c1427a86b8afc7e47800ba6b8994988d264c763b993b7933cc942bfb4e76bab1f0b0a411b4cdb8ebdb9c6fc47125cb1741390eae589f22fe354cd5"}, @iv={0x20, 0x117, 0x2, 0x6, "909a0cba6285"}], 0xc0, 0x4040000}], 0x1, 0x4041) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 102.180032ms ago: executing program 4 (id=1342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x47}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={r1, 0x6653}, &(0x7f0000000340)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x3, 0x0, 0x6, 0x7, 0x1, 0xfffffffffffffff4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x77d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd}, @NL80211_ATTR_REG_RULE_FLAGS={0xfffffffffffffdc9, 0x1, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xec}]}]}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48010}, 0x8) 101.767336ms ago: executing program 1 (id=1343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x7, 0x7, 0x80, 0x100, 0x2, 0x955a, 0x6}, 0x9c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) 98.667348ms ago: executing program 2 (id=1344): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x6, @dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x0, 'rr\x00'}, 0x2c) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 97.316722ms ago: executing program 1 (id=1345): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0x200, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xffe0}, {0x5}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x1c8, 0x280, 0x280, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'netpci0\x00', 'geneve0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr=0x4, 0x0, 0xffffff00, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYBLOB="eb78e48a23793b5777afdb1f8788bf11c296bfeee5ead6d205e22d2c49c743ac6151b134c804ddd64fe00bc1ac08a3ec6b2313b2c06860e60768c917ad973316b73e89b49220533cddb97ce82303ff2230257e440e404ab6152c24c24e12059b218187c7c47e769610ced1e995e47f42931e0900f940fc414415c29654cf516a1202fcd44b1c888625aaffdebe2424bdcd6fdf78dfebbfdc2e068b7a68e447ac9843e7f42cc5a4ab1634cda2a1248d4b62d5da0dffadb09c493cc76dbb84", @ANYBLOB="dd8f34511db4a54ba2af550564f190ef4326f7b9d8e2469c842ed8f8bfde5c683fa7387eeb584026ef08915811801f30f88d7bf24c2067a609be915f430e01a6ec46ba3088fc5662ae02a0add26a3126600ac51b1b792965ecca7a5ad75bbf97df67a82e0c7adf88c841d5b0054f0984b77f51a67f680daaad954d2bff9a287a4807850a06b056841951fa3a4b2381e77b4937ea5a5593dbef3b817f4ef9a836dca011da7eb4257adc", @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="ac0a0b268dc47edd553227ebbcfba79a2f05d833f7"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x2}}]}]}]}, 0x48}}, 0x24040800) 95.71465ms ago: executing program 4 (id=1346): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 94.80454ms ago: executing program 4 (id=1347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'perf_event'}]}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x52, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) 94.449773ms ago: executing program 4 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x8}, 0x200480c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) syz_emit_ethernet(0x15, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x8863, "1f7761"}}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1800001, 0x10, r0, 0xd90ee000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1800001, 0x10, r0, 0xd90ee000) write(r1, &(0x7f0000000140)="0000007a297a562ee55313203b5812276ba0f01188b9148b3d651359824d1e18b536ba9f9eda74c1526204867efdac40aa6955505f9b4043519a88d8ede4972a17b044216441a3d12a355f7cc4a5872676e6988526a1c06483c9b1dc143fbbf5b1041ebd75956b52ab3ed9", 0x6b) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0) 92.683357ms ago: executing program 1 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3c4, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_WOL_MODES={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "4fec4e6f9b92f762acec77ad2ec59073c649eb1d8b5b6fdb5f1b7c9f98f4a96d98b8849d7610b4851c"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "213f6633745a73f18512ec675490ed8df6332e2f8024c6324e017217b0e9ff4102b51def2628cf3133323afa00b3100fb0562913e17e2dcbcaa23375c6e8d05d6456d8ea63ffeadce8bc87eba90b0638f2ceab7cd3c310cbc1b6e44e7ed462c2980458d1d264be6b2d83126625f42376af933e5747984567bca4fcb2f88666fda412601fadcd6d394e11f0cccfb3671a4ee7080a8be70a9dc0d44657037e947d40e577e476d3b4c22d03"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5d1}]}, @ETHTOOL_A_WOL_MODES={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "cfb00f83d30876888f825fafe86d579b54f7d3b9aa4f8a94066c5ad94fa5bdf3d53267eda6127c4dc4c198f39083f9f71543a2c592a97f4114aea2f630c2a5c86e76e5970c799ba28bcccd44dac6ec541610a18695b3b5f2c6ec5e9acfba25bbceeb2959d8f9e5ef5c4244359a4e28fa4d058d80487f76bfdf9e0a063aa19cc15ba6680a113b755a311e1b179e64e02027"}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "a672bec806b04026bced97ca3739dda156c189059409fb6494c4cc3306f33fd3a41b0c9a599428ba2340f6dd727e1aa9b10985d55f70afa90ff414ddc2b5d1633431feb524bb3feb6b0628bd4fd1efb51c8b4d0078cd03b6e40067e9b85a939fc18952613e489f3d50b2f49c8c1b66c9c77aa7456941c576b2713cc6eee8bf28c77d93ee660f90be1d12bed9c440a335310da1ab19dd3c27134ac3b8e81d0115f913777c2803168dd0bc234b8acbb3560b"}]}, @ETHTOOL_A_WOL_MODES={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']@}!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x350}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x40840}, 0x801) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r2}) bind$llc(r5, &(0x7f00000005c0)={0x1a, 0x102, 0x2, 0x6, 0x15, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xffffffffffffff40, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00x\a\x00\x00\v'], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.39475ms ago: executing program 4 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x939e02dc105d5baa, 0x2}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x939e02dc105d5baa, 0x2}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000380)=""/179, 0xb3}], 0x6}, 0x8}], 0x1, 0x0, 0x0) socket(0xa, 0x800, 0xdc0) (async) r10 = socket(0xa, 0x800, 0xdc0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r11, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="8500000055000000040000000000000095", @ANYRES32=r11, @ANYRES32=r5, @ANYBLOB="f28d96c12d2513ed5f0c8da61368c46023de4683ff58bc79177cd001cfa53926cc88dec9414ac3e59a9f08355d17291f9a5fc4ff3c4c0688e378d675aefdbb77eb8716c914a78acc06525b1e48a05394"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 2.430689ms ago: executing program 1 (id=1351): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2ca00000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x46}}, 0x4004) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x1) connect$rose(r2, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x51b, 0xffffffff, 0x0, {}, [{0xa0, 0x1, [@m_skbmod={0x70, 0x1002, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x3}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x0, 0x2}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) r7 = getuid() r8 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) r10 = socket$phonet(0x23, 0x2, 0x1) r11 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r11, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12}}}], 0x20, 0x50}, 0x40880) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)=0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)=[{&(0x7f0000001800)={0x1318, 0x42, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="127ea04cf07ec24c4d0964b4a9e6c581c017e9e273ff21efb09742a80cf659e134b398c89612be2431b123fcb90c8adbb13fd2baf1d40debbba505b5b1c35ef288b2c233ae90b026ff82b9154693", @typed={0x74, 0x65, 0x0, 0x0, @binary="490097db1c78ecee5e555a05413c1b441febd745190518243ce7d82b51d19b226265a342a93264f2c9648c6770acfecc7f35f1f762f22adddbff6ae11f9ca2b24008ad008066114fff28f75d207eec02a0086e16f75648a546e574e1eaf5bde23ecdc2a7c4387f61b8b4d01334bf137f"}, @nested={0x104, 0x19, 0x0, 0x1, [@generic="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", @nested={0x4, 0x14f}]}, @typed={0x2f, 0xf1, 0x0, 0x0, @binary="890dd68fd8ca176493b698957255f037f2c2f723e0759206a176ca95e076c2fe63a3d3a43c0a0f634f9d5f"}, @typed={0x8, 0x39, 0x0, 0x0, @uid=r4}, @nested={0x36, 0x13f, 0x0, 0x1, [@typed={0x4, 0x3e}, @generic="f6399564f14270710179865256b637068f3ca747ae1cfa3eff1e5e160a915435d073", @typed={0x4, 0x78}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=r5}]}, @typed={0x2c, 0x108, 0x0, 0x0, @binary="53b9cd564767dd9a0d9cdca3dc88d4c760925fa38b07d07c9f0dc090f58ed95063bcdab255c1a341"}, @nested={0x10a3, 0x1b, 0x0, 0x1, [@nested={0x4, 0x3a}, @generic="01c2758512a39b357bc4072f490a9d6ac6ea74f19633acd3ad386ac29b22345df1da22980fb1dfbd2b61a95871605ba25cd5e35b232eabc6f95f346e934c8a3d72a8a7c52ae19ccf26772555762c87074b23dbb4545d61b86a71a52eb2f98f889a1872f362d06145786a79b84c7872f2aca80735aa67de6557c440d45ff8195d0e704502b8de923d3a01f8d655adff", @generic="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", @nested={0x4, 0x71}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x1318}, {&(0x7f0000000300)={0x28, 0x22, 0x10, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x5}, @generic="f2", @nested={0x8, 0x14f, 0x0, 0x1, [@nested={0x4, 0xad}]}]}, 0x28}, {&(0x7f0000003d40)={0x11f4, 0x2f, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="babd4e5f6f52bb01f1335a8406bb273bc034061e66aceaeae365dd39464cf4c5dd62fbdda2eab7f53de1dd4250467132add1af8f29f837ce499df3188e5dacaf4a05c859df133bb23c2f72087cb851090d671e85911522c7c63bb9062876af2b32efe0791c24557b0fa61fd912de00bc4f7ba4b9c9f4a9b5bb67cbb8d9e4c63b200d3d26d2419529e6df731c9207a8005b6018725b1a01d5cec444213e5ace2cd872c9b480a66bcfbc9521a7aed56720196ada5e708e14ce5df23e7352fd934a47240780023bc989cca2efd79e88968970bdf9af7bec9ddfa43f2157233b4d356ec2851af9662dea645526846492408f3cd2eb4cc12360bf57b0010f117542dae66cd4a976a9cf3964de02eb5f97a118064cae79a93303d11b94abe5ed3ea2fc8761c23af48904b3a29c7c29cecc914246b6c0493f15be8e233db79a2533645035d76c796db3fae130beef20df1a25dfd29dc80d64833c7bd3980e01d96798db95dabac5c9f32c9abff291bf881f5729e8d69fa2e78dabfaea0f7624b1bff476e8c473c812059abc24d357e00260a332f9bc79c924dfa5974cd0f4a59569d3ef8f681b60ef64aa5388d5accfcc34f51d98c131116fb3d8ea5f433cfb3a1ab2a265b25dabd8e8cec6410e6e89a39dcb6ba6e77e51c26479fa8c0cd6b83fc5e48d2a0d6efadb53108633d010ace7dbdc81b4d68ce6fea28fe7e17bbcd179ca7e9e477c42dbd6e446d23cfa691fbd0663f46a7942c6bff435852a69ffb0931fd68e05db5b4d7a9ccd6b8ba7087dc9d1e95a48aa32025c4da991c8879f693c5026f86d463290bbcf3d014a5af8d1c39f84a0f93ecc2c18eaa7db8e45b0880e1e11e09c20fd385f20852dae2e1d14bc01a2580f9cf92072b4dd0f009c2cd70b7ce5348ce3b3428c9f83e9dbc851c66b23f2a24798539dc04ad4e45918ece63dae0fee38c11558dd6092e1c6bed9705ee672e157adedad75112c708e42dcd4457b60270d783b4d35c52fe7907e1c4fd93ad6011d0a6b26a0819e8a2e0dc6476d6ad8eb79e30d5092578e60d9002869c0e8c63fed4380c914dd28de4b77f14f07b607b5f47d8a0d8c6a714b7d03226ba6e1ea980821dbb26aeab3a3c57a6ebc1d5151aa1871f94501897d022819409d382aa9464bff8bd63a187b72aaadfe2bb91607571ccdc42b698a380ee7ee0b04fc7cdf62cb5992f4b41c8e94b24c6a094705796b0ccde842d5e7240bba90301020b036172c4b99a66c63f2a1c259130a535ffe29bad2d6eeaa76677fac7cc6fba49cbf2beb4c2df2584a2da727936277fad0732779b411c150bb2c04a34838cc00628de28b01ce7adc1adb657ad5c0b3d7f6c107bb1173b7a0a1aceb631f0164f49da548fead1b22dae1bf1af607a3ce0ecdb1bec690d27e2c3b3dc25e85edc8a7119dd2a8f2ad313037efda31cda6bdd293d755a809a3702ebe30b1b4f747be84fdd3a076258ef9c16554d18eb9fe5d855983504a65cdb39b39b1f4b233041259e8bdf79297c3bca97b830a0effd280631cb7d454bafa662a4a9fae42bb5ae5069598bb2da9b4c3cef8721989a4c085ce7a1a27de0d3469d8faeeca8f1c6b2810aaf9e4e44f94a7360b6d4e75b941c430f63e3cf28799144339ce7e48cad7dddc3cb946d4ecd4323b53082f074be6024bca952d721edde9c2954c78011f6526167e706c6645e029acf796ba4a54d147ea11422a0389392e9b6247899397e97db57a4ed1a3b532e56b7eb1ac888ff60ce1d9d2312cb1efa7c25eca9ae248cd0ff10170f857192d93c8001f96da4a6c2a76b7ffd593bd4b8a91c219b5990a3e04a444742e0395b619815a2fbff390cc8c3ae424e019b173c3bff14ce54fab08d7985c5ba05ab58b6d3439c3df01787a727d32d336da9fe7561338db5c0a37689268295ca518d5840f435329ea26340a629b0d4b8c38b8b7412e4043ef1cac106666b9132348bac09e538b9eb445fed8897961551255de949530b40d9668b65779eeda3c8a3c7d5ed32dbeac792b46f591f3e394d51499183ebd7362f01e1350e27f2b2d6186051292055029ffc46c29ac2c90ea7c394f88b611d003504b7a64f1f721286f759c30a5918d030ae3a7a13ddcb3a309a37aa3dc5cd3fe5d294e8b9ba9a005be7e59a447f2f005f22d45bfc8df6429e9ac68db7e4ef505c2df13166c8d04998bd6623828a46c28948b59be16fa654c3040764d57bb2d4692def5f5c02adf2c228d34d44da57e0b43ecf37a17a5491b21312d34b8a872fc2165ef4022831a047b2987d1188e03120c2ab1f53a26407f04aebc45b2cd7405dde26df28e5f6faec2b1c6b178a68211d2a81a0a95c0e9095d88166d5bd7058050e74a1031713658e7a9199a3e11b3bf1c953a36bb96a5ae914436e4891ecc6dee34862cfb268c9ec27fc95ce6362f8dec94de981e5d99520c6ebb6eeb8df41bb81b30943a562674cecccef6bec27f1e780a8c3f94e7365e1bf70eb173df5f0b4bd4ba847e7a95fa77f577acdf30640205a90f50d7653fcd77dc5c4266dc3e680712926bd6464fd1902f8d928775e5af4f16b05b017dcf2e9c140f91d38aecf6bc2b74d673904937f0e6725bb8d56cdace22d501d69afc1158d47cdb96ab7019ee8bba026c191542723b5fc0fcb8c809d66cd119b7d983ef9839741262dba7b8ac1768b5997f9b6f829a65d5c70dfd34f96eaef92c73834fc773258a706af267617db1f2a2f11b8a64131484a1959be582c962bc8e64456d3286916fae76ec10c954fdcd9fe4f34ac666c84528dc48b793233fe8c8097218d77a360a8a267a1eaa99a445ffd870bc9bc62e5ac2772ca860b7f3b90d9bab39caac60642673d015862f62062d6e24c09a9855e2df318bd83792ca4c78610e6b0f100db5695392542018f9f1cf0293a0547cefee48b7053d2d733b3f986631cc0adfb744a3577936fbca7ba15223a63fa43944b522608df6d963cdb2b2273452da6a894eb88bd4c9031cad71aa77a0ba8fb278c3cd87b16247334b82e1d143ffefda16de0ff2bd8be9ea823da6bb730ec6fa719db7cf043b4406d57eafffcbccaff8e7bc91f4538f12ee636f230c9fa6ddfb48722fef75365454f8c997eb0c3dbc9247cc2d1491bd4a71098440a868c196ba57aafdb189f93a7b4938f4df64f8f982ac7a139ce2269a0015ce4738b734ca9e2cafb00d384cc7c5a33a05e9e2ce45b1338a32c7f77d90aac8252b44f392e2e3479e75da32ecaac1651d9dd21db504d17cdf01ab9e7a0dbdbfc6720400d0ead86df3ec99e07fe9ffb1184e69559f0f10ebdb7c3cd2be595d077695bedaff98d9d676062375f24088090f898882c136b3ebb794826cd9cb94e84b2c4821ac485216687f1c8ed972126d85d7e9451797ebf5dfa00cefb874d99f21c931a2d32f7d6d9e53f4a20da1994584bb76ea1023d58b4527a3c6c067b8dc490ff936bcb22154a092fdcf22b2e8ef390a201df87a5ad7df1e9f0863c20e5664e3ad2e7f781c524484f51d67291c8bc05ec39800fb0bccba85a56a3611a230e2b88f4fe6925e58738810d0db9449fa4241ca877ea8ef299c19a3759aca79b7452c207347e15935d51fcdac7946f267568971b126197452f61561eafc40a88e0502901de41ccd16a4bc4963329d4da588cfe51dd74a21e3f81a66b78a188d44b0f0bf26f1653d6aad52a8e532754c17151141f7a4acf93dfce9d638fc21a38e367ead491d5a8c95cae9205ba36b95e061ad3ab330bd550880bb1271aff26c033c876a8a999486d93d96a64a1c2bb0193787fafeadb3e6c111f5cd2a9dd81c3b98a762b68e4a678baea6b49aa024356b8f70434c11263c700c2c66c7d23e60599ab1aadaacaaf31da566d0024f970d91383526ac1d5a8ffa623642800652ac5a327bd1d25efb6da8838a89e1ae3ce621e0e1845cfedf7a1bea68dba0e3c9f8b81d4ee171657af062588c8edac9eec2424f31395d30d9292562e9b08af7eb4f76a7fff13347e0711e50a79f5b24778ae182e566881767c8482a419e6ffd32b31becc08719e77676d0930653b37e4fbbc84999d38d6ba299c89d75492576dd3d72425905d4da87f498b2d71bc3e3bd87c02b099b634deed76b9776889a68602b5b5366ad0b9e092b49f5199c915baea48452a6dd0a99aa7f61567a6864a37a3326aef661fa9786895dc7346bbf6b25e12cc5202924ec42351f1f30128e65340c8097d791ef94633da4f029ba403ae4ace53084f6c271979fd2beb155887629362e5a69d7fadc9ac72d4e56d84f22a0973015a866e2f53487b2d02650494867182f30d918400f20341bade737fd52ccb931c33e6cd9ebbf52cf81f894f29cd7452626fc5fb8d64c2c6ea9580718b413760fd56a97f22e53ac2ba4f512d56cc7a76c9a12344d1b75c03cd03a127904462cf65db74806c1d79f13ea377bed7ef80701f4690d1a6ec4d86fe86b21c36c684594fbb40a2bed4fdaeaad14c117048b4b8cc2bc27807f1b057c27e0daba38b606b32b39838556bfec23645cd127aae8f3557511ccce70d7142db3fe5f9bdaf0914838f0ee05a790c386469e6c67e00eb418aa726a467e78d8ff09408bb6f9fb156e2ed28bc2acea6cbd60029b6a33a6e8e96c9b0e8f56f871dd6964fb72b327426eb5546784adc25cd8231b8176283fdc2fd8785ef52c5dbf355985c0f06e7dd2a8a0742629664b91414713af093cb22553e26d191884dfddf73551fae489a9687d5b4ca97d1266468ea4ecd90e6a606da88ba73df6ed9bfc2fb62dd7c01153e9874e1e6f332c9590aaa4acdaf643fcff4a453e28ad80b239f8a0791144dc403a56322dc73ef498ea3b5898f519aebbdfec93ede7520c5e6e2b924c6fe68e8e6dce7229443fe748632fbec550d7edecd1f373b2526bfbcd90802ab80f507665b13cef499e3871099fb2a2fd24d6791862d4a13dc4c98c9b28755d61614f2468cfe02246d5b73556e46f7691daf417255669d4dbde2accd73461d7fc94f618d72b3a8f4aa5a839d65ac757d2c99eece64df164174ffe0a3720230d8edaed9b096ba150029c4b37617ddf666b1326257afe6a803164bb8da3f0816b0254eaeee89756d8d92f8ab023b29ba88bd9710dbfd8c3e732468518da9394e57d3cfbae02908351f289322b754ecc5606771f2829831961665f7e5361b03e92dcaa2dc2fd2ec288b118146cd381baf0346bae1c2167615392e59e8a2006949360b1aa2c25cbb4572be015a5b98a1220a422dcad35fb07e1a67660b4a8843369d03f541e19e22faabbb814429be17ab8a5a58d487e66a5a6fc630dfd4978871dc3c1903ebeac5d88ac69b2186786d68a1e7966db70f4929c4ac755d33ad20c50504c13aa1dd882a2576134eab9fb98bda9243edf0b2ca14c5c18157f4e030ec6b76da38e7e2e86e1521cf68fcebd66c279f6bbfc50221614ba491bc40f618620f2210d213be92c3c0cf411a5f9615183066c8791d6d204f1e668868322001bffa4fe8d98502e8d184eb7f44874b3b7b066f3643a8b3268fbb0e7b590ebaaa75117f7e59dfbd2238e8890c5c9e4a2f85241e5e6dfe8501130a1ca9cf449cab70ceb18f557859ec2adfd10f804d1aeab806d6e1c0a9acd575c9421ceb1a1e9413ff865333096bd492650d9a3f5455229df44c783511d64276ed36839c67b9381f3caea81ce83d599d26e3b57a6e785d12013dd6f4c1eaa404b70fe751186921823fa0408f5483f66bbe189af9d366990d2a02839ff7c104c34f5c25d027a392650cdf99ba490481beaeb948a1f1f", @typed={0x8, 0xb2, 0x0, 0x0, @pid}, @generic="445dea727e71a87ed818fae6383278a5bd081a36c0e9d95a394d17fd855fbc11614e978ea25cddea58eec843ea73e641", @nested={0xb2, 0xd8, 0x0, 0x1, [@generic="2d836a97fb1e170dcb1013643d1d609c655255f2431d69ba650efba62cd3cf773e29ea602c7ac0a6e47243e55d26b52f4986f5f48328d298659328bc681d1f9a1d1f4ae5c74d43006d3f47b7188d5db4b01fb085cf2d05a683e405897189807fe0ecd886e8d50c483684b65f7807a335e4282bb80cc578ac7b1932d2bd099418d3026b2b85a32f9c98b3bc45d6b23df050200d32413d572269d36111f54653e1abbb08ed0a05", @typed={0x8, 0x108, 0x0, 0x0, @pid=r13}]}, @nested={0x14, 0x91, 0x0, 0x1, [@typed={0x7, 0x5b, 0x0, 0x0, @str='ct\x00'}, @nested={0x4, 0x1}, @typed={0x4, 0x114}]}, @generic="7156dc918c5e5dbe67ac0ef160ebb00f5b6cd269a26c23e5c15edc8fe9cf5a3a3c4650df90bc413eb4b3c02e7994eb0235715f5849c9a15e4903e816cb0be914672dbdaaa17b301053e6b09dc1c2e3174172f676e3bd61d5ace9cb9d864f15fa1b20a3a8510318cf319b5738eda8be573f9cb5882fd73ea7414a9912a79fd626eb705171d191118ea222dc1ed7004370cf54d08d42f891263cb010962657fb86a0eec7a362702f978df9374518ddd8ab22780748fb3a7671e7d53783a94c491728944664b709198f7127d1818b65e9bcb67829c5eea4085d53a59f795969c732463c"]}, 0x11f4}], 0x3, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xffffffffffffffff}}}], 0x60, 0x40}, 0x4000015) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xffffeb76}], 0x1, 0x20000040, 0x0) 1.790995ms ago: executing program 2 (id=1352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x71, &(0x7f0000000080)=""/4059, &(0x7f0000000040)=0xffed) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 4 (id=1353): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) kernel console output (not intermixed with test programs): mode [ 151.891418][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.925175][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.937630][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.951338][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.960108][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.970841][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.024536][ T7373] bridge_slave_0: left allmulticast mode [ 152.050630][ T7373] bridge_slave_0: left promiscuous mode [ 152.072627][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.453484][ T7373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.466957][ T7373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.478475][ T7373] bond0 (unregistering): Released all slaves [ 152.494736][ T7373] bond1 (unregistering): Released all slaves [ 152.616684][ T7373] tipc: Left network mode [ 152.691318][ T8173] lo speed is unknown, defaulting to 1000 [ 152.848945][ T8204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.649'. [ 153.304182][ T7373] hsr_slave_0: left promiscuous mode [ 153.313253][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 153.331877][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 153.341421][ T7373] hsr_slave_1: left promiscuous mode [ 153.351304][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.360669][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.371849][ T8229] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 153.374693][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.380288][ T8229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.653'. [ 153.402441][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.450864][ T7373] veth1_macvtap: left promiscuous mode [ 153.464105][ T7373] veth0_macvtap: left promiscuous mode [ 153.469999][ T7373] veth1_vlan: left promiscuous mode [ 153.483817][ T7373] veth0_vlan: left promiscuous mode [ 153.688890][ T7373] pim6reg (unregistering): left allmulticast mode [ 154.034322][ T5848] Bluetooth: hci1: command tx timeout [ 154.241628][ T7373] team0 (unregistering): Port device team_slave_1 removed [ 154.283823][ T7373] team0 (unregistering): Port device team_slave_0 removed [ 154.759077][ T8242] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 154.763313][ T8229] team0: Port device geneve0 added [ 154.783110][ T5834] infiniband syz1: ib_query_port failed (-19) [ 154.840473][ T8243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.659'. [ 154.907433][ T8246] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 154.948490][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 155.267016][ T8269] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 155.275883][ T8270] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 155.276954][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.291258][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.300241][ T8173] bridge_slave_0: entered allmulticast mode [ 155.306574][ T8266] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 155.307166][ T8269] netlink: 172 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.326330][ T8173] bridge_slave_0: entered promiscuous mode [ 155.378690][ T8266] bond2: entered promiscuous mode [ 155.412909][ T8266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.433624][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.458316][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.491583][ T8173] bridge_slave_1: entered allmulticast mode [ 155.530249][ T8173] bridge_slave_1: entered promiscuous mode [ 155.546565][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 155.550005][ T8268] netlink: 164 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.573062][ T8268] netlink: 164 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.582347][ T8268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.596075][ T8269] netlink: 164 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.622586][ T8290] x_tables: duplicate underflow at hook 3 [ 155.622876][ T8269] netlink: 164 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.642879][ T8269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.668'. [ 155.761114][ T7373] IPVS: stop unused estimator thread 0... [ 155.828624][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.868535][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.067012][ T8173] team0: Port device team_slave_0 added [ 156.089263][ T8173] team0: Port device team_slave_1 added [ 156.089265][ T8307] x_tables: duplicate underflow at hook 1 [ 156.117788][ T5848] Bluetooth: hci1: command tx timeout [ 156.204571][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.221997][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.249621][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.299606][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.308371][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.384237][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.432309][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 156.474631][ T8325] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 156.552290][ T8173] hsr_slave_0: entered promiscuous mode [ 156.564965][ T8173] hsr_slave_1: entered promiscuous mode [ 156.585596][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.613314][ T8173] Cannot create hsr debugfs directory [ 156.645280][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 157.012953][ T7391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.030708][ T7391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.055551][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 157.123186][ T7391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.136610][ T7391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.241185][ T7391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.272969][ T7391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.382972][ T7391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.406601][ T7391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.745103][ T7391] vlan3: left allmulticast mode [ 157.752461][ T7391] bond0: left allmulticast mode [ 157.759281][ T7391] vlan3: left promiscuous mode [ 157.768768][ T7391] bond0: left promiscuous mode [ 157.774824][ T7391] bridge0: port 1(vlan3) entered disabled state [ 157.829370][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.847144][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.856192][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.868417][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.877780][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.055636][ T7391] dvmrp0 (unregistering): left allmulticast mode [ 158.193746][ T5848] Bluetooth: hci1: command tx timeout [ 158.358004][ T7391] bond0 (unregistering): Released all slaves [ 158.542511][ T8370] bridge_slave_0: left allmulticast mode [ 158.550534][ T8370] bridge_slave_0: left promiscuous mode [ 158.558234][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.573270][ T8370] bridge_slave_1: left allmulticast mode [ 158.580278][ T8370] bridge_slave_1: left promiscuous mode [ 158.586240][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.601819][ T8370] bond0: (slave bond_slave_0): Releasing backup interface [ 158.621059][ T8370] bond0: (slave bond_slave_1): Releasing backup interface [ 158.639705][ T8370] team0: Port device team_slave_0 removed [ 158.656445][ T8370] team0: Port device team_slave_1 removed [ 158.666472][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.680804][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.692756][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.703797][ T8370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.777530][ T8370] team0: Port device geneve0 removed [ 158.790075][ T8370] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.800375][ T8370] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.809340][ T8370] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.818256][ T8370] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.870574][ T8173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.027109][ T8173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.050385][ T8173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.080412][ T8383] net veth1_virt_wifi .: renamed from virt_wifi0 [ 159.102376][ T8173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.137094][ T8365] lo speed is unknown, defaulting to 1000 [ 159.137311][ T8387] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 159.460235][ T7391] hsr_slave_0: left promiscuous mode [ 159.469985][ T7391] hsr_slave_1: left promiscuous mode [ 159.478499][ T8411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.496592][ T7391] veth1_macvtap: left promiscuous mode [ 159.502703][ T7391] veth0_macvtap: left promiscuous mode [ 159.509376][ T7391] veth1_vlan: left promiscuous mode [ 159.516353][ T7391] veth0_vlan: left promiscuous mode [ 159.955897][ T5848] Bluetooth: hci2: command tx timeout [ 160.274917][ T5848] Bluetooth: hci1: command tx timeout [ 160.370528][ T8413] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 160.571150][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.698844][ T8426] __nla_validate_parse: 8 callbacks suppressed [ 160.698865][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'. [ 160.880210][ T8432] veth3: entered promiscuous mode [ 160.886707][ T8432] veth3: entered allmulticast mode [ 160.898845][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 160.908053][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.713'. [ 160.959448][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.039578][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.046841][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.088528][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 161.139500][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.146831][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.507546][ T8466] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.573279][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.581515][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.589478][ T8365] bridge_slave_0: entered allmulticast mode [ 161.601901][ T8365] bridge_slave_0: entered promiscuous mode [ 161.616659][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.644202][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.664767][ T8365] bridge_slave_1: entered allmulticast mode [ 161.674337][ T8473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.724'. [ 161.684570][ T8365] bridge_slave_1: entered promiscuous mode [ 161.751019][ T8476] xt_cgroup: xt_cgroup: no path or classid specified [ 161.810215][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.837555][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.981531][ T8365] team0: Port device team_slave_0 added [ 162.009569][ T8365] team0: Port device team_slave_1 added [ 162.034030][ T5848] Bluetooth: hci2: command tx timeout [ 162.125652][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.132834][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.159577][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.181865][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.189848][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.219037][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.338842][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.357183][ T8365] hsr_slave_0: entered promiscuous mode [ 162.370804][ T8365] hsr_slave_1: entered promiscuous mode [ 162.378546][ T8365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.386357][ T8365] Cannot create hsr debugfs directory [ 162.686310][ T8173] veth0_vlan: entered promiscuous mode [ 162.736180][ T8173] veth1_vlan: entered promiscuous mode [ 162.906199][ T8173] veth0_macvtap: entered promiscuous mode [ 162.935928][ T8173] veth1_macvtap: entered promiscuous mode [ 162.951640][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 163.082780][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.139978][ T8518] veth1_macvtap: left promiscuous mode [ 163.184716][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.213008][ T8173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.227310][ T8173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.239676][ T8173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.252030][ T8173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.334314][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 163.372274][ T8529] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 163.382986][ T8530] netlink: 'syz.4.739': attribute type 4 has an invalid length. [ 163.458037][ T8529] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 163.662494][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 163.725018][ T8365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.741693][ T8365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.767492][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.785730][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.812492][ T8365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.847177][ T8365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.899789][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.921606][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.115609][ T5848] Bluetooth: hci2: command tx timeout [ 164.288848][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.328699][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.350475][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.357713][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.401689][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.420210][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.427469][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.443231][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.453294][ T8571] netlink: 'syz.1.752': attribute type 20 has an invalid length. [ 164.522718][ T7391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.730325][ T8568] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 164.876021][ T7391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.064049][ T8365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.312577][ T7391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.535411][ T8603] netlink: 560 bytes leftover after parsing attributes in process `syz.4.759'. [ 165.550973][ T7391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.571944][ T8603] netlink: 'syz.4.759': attribute type 21 has an invalid length. [ 165.696835][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.830243][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.840146][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.852625][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.862584][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.871117][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.961236][ T7391] bridge_slave_1: left allmulticast mode [ 165.976442][ T7391] bridge_slave_1: left promiscuous mode [ 165.982265][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.002786][ T7391] bridge_slave_0: left allmulticast mode [ 166.008991][ T7391] bridge_slave_0: left promiscuous mode [ 166.021562][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.205057][ T5848] Bluetooth: hci2: command tx timeout [ 166.508633][ T7391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.522559][ T7391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.533567][ T7391] bond0 (unregistering): Released all slaves [ 166.955474][ T8365] veth0_vlan: entered promiscuous mode [ 167.049168][ T8365] veth1_vlan: entered promiscuous mode [ 167.077378][ T7391] hsr_slave_0: left promiscuous mode [ 167.089832][ T7391] hsr_slave_1: left promiscuous mode [ 167.100851][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.113246][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.119102][ T8664] IPVS: set_ctl: invalid protocol: 114 172.20.20.187:20003 [ 167.132768][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.141338][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.176587][ T7391] veth1_macvtap: left promiscuous mode [ 167.182561][ T7391] veth0_macvtap: left promiscuous mode [ 167.189131][ T7391] veth1_vlan: left promiscuous mode [ 167.195651][ T7391] veth0_vlan: left promiscuous mode [ 167.732527][ T7391] team0 (unregistering): Port device team_slave_1 removed [ 167.777194][ T7391] team0 (unregistering): Port device team_slave_0 removed [ 167.957129][ T5848] Bluetooth: hci1: command tx timeout [ 168.107811][ T8678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.777'. [ 168.219421][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 168.401211][ T8365] veth0_macvtap: entered promiscuous mode [ 168.421445][ T8365] veth1_macvtap: entered promiscuous mode [ 168.486210][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.509410][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.577651][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 168.685412][ T8365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.700952][ T8365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.712747][ T8365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.723219][ T8365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.986164][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.000677][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.010085][ T8610] bridge_slave_0: entered allmulticast mode [ 169.020226][ T8610] bridge_slave_0: entered promiscuous mode [ 169.044445][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.055554][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.063359][ T8610] bridge_slave_1: entered allmulticast mode [ 169.077804][ T8610] bridge_slave_1: entered promiscuous mode [ 169.165199][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.178653][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.195176][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.208981][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.327672][ T8728] netlink: 'syz.2.789': attribute type 33 has an invalid length. [ 169.343276][ T8610] team0: Port device team_slave_0 added [ 169.350820][ T8728] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.789'. [ 169.366489][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.379526][ T8610] team0: Port device team_slave_1 added [ 169.385648][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.418408][ T8725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.789'. [ 169.465800][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.484196][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.522784][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.592762][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.600904][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.627818][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.661006][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.791'. [ 169.709643][ T8610] hsr_slave_0: entered promiscuous mode [ 169.718165][ T8610] hsr_slave_1: entered promiscuous mode [ 169.726155][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.738460][ T8610] Cannot create hsr debugfs directory [ 169.854731][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.994321][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.034056][ T5848] Bluetooth: hci1: command tx timeout [ 170.112181][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.277370][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.798187][ T8756] sctp: [Deprecated]: syz.4.797 (pid 8756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.798187][ T8756] Use struct sctp_sack_info instead [ 170.846336][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.858108][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.866388][ T8758] sctp: [Deprecated]: syz.4.797 (pid 8758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.866388][ T8758] Use struct sctp_sack_info instead [ 170.895192][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.907870][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.918307][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.979716][ T8761] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 171.293388][ T8777] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.324984][ T8775] netlink: 96 bytes leftover after parsing attributes in process `syz.2.802'. [ 171.409480][ T49] bridge_slave_1: left allmulticast mode [ 171.428497][ T49] bridge_slave_1: left promiscuous mode [ 171.440505][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.510378][ T49] bridge_slave_0: left allmulticast mode [ 171.523772][ T49] bridge_slave_0: left promiscuous mode [ 171.529594][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.115541][ T5848] Bluetooth: hci1: command tx timeout [ 172.134535][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.145671][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.158577][ T49] bond0 (unregistering): Released all slaves [ 172.185206][ T8773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.539791][ T8799] tipc: Enabling of bearer rejected, already enabled [ 172.566045][ T8796] mac80211_hwsim hwsim2 +: renamed from syzkaller0 [ 172.576609][ T8796] tipc: Disabling bearer [ 172.586986][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 172.610129][ T8803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.809'. [ 172.636701][ T8610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.763373][ T8610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.774913][ T8610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.817023][ T8610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.910800][ T49] hsr_slave_0: left promiscuous mode [ 172.945051][ T49] hsr_slave_1: left promiscuous mode [ 172.951240][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.974921][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.008094][ T5848] Bluetooth: hci2: command tx timeout [ 173.016143][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.027484][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.052901][ T49] veth1_macvtap: left promiscuous mode [ 173.059423][ T49] veth0_macvtap: left promiscuous mode [ 173.065737][ T49] veth1_vlan: left promiscuous mode [ 173.071126][ T49] veth0_vlan: left promiscuous mode [ 173.521480][ T49] team0 (unregistering): Port device team_slave_1 removed [ 173.566477][ T49] team0 (unregistering): Port device team_slave_0 removed [ 174.194176][ T5848] Bluetooth: hci1: command tx timeout [ 174.280596][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.310093][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.330622][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.821'. [ 174.335777][ T8752] bridge_slave_0: entered allmulticast mode [ 174.372012][ T8752] bridge_slave_0: entered promiscuous mode [ 174.396760][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.413650][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.434294][ T8752] bridge_slave_1: entered allmulticast mode [ 174.455395][ T8752] bridge_slave_1: entered promiscuous mode [ 174.536792][ T8864] x_tables: duplicate underflow at hook 1 [ 174.548611][ T8862] tc_dump_action: action bad kind [ 174.606606][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.642590][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.779783][ T8752] team0: Port device team_slave_0 added [ 174.792193][ T8752] team0: Port device team_slave_1 added [ 174.867629][ T8874] gtp0: entered promiscuous mode [ 174.873220][ T8874] gtp0: entered allmulticast mode [ 174.893006][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.905167][ T8871] xt_time: unknown flags 0x4 [ 174.913482][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.944547][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.978975][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.991241][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.043841][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.063226][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.074711][ T5848] Bluetooth: hci2: command tx timeout [ 175.171379][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 175.192211][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.217069][ T8882] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.300054][ T8752] hsr_slave_0: entered promiscuous mode [ 175.307404][ T8752] hsr_slave_1: entered promiscuous mode [ 175.314444][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.322192][ T8752] Cannot create hsr debugfs directory [ 175.333187][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.340424][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.372693][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.379980][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.447454][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 175.580940][ T8889] dvmrp0: entered allmulticast mode [ 175.851484][ T8903] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 175.901889][ T8903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.998568][ T8911] netlink: 81 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.009790][ T8911] netlink: 596 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.020035][ T8911] netlink: 81 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.029025][ T8911] netlink: 596 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.038656][ T8911] netlink: 81 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.049773][ T8911] netlink: 596 bytes leftover after parsing attributes in process `syz.1.843'. [ 176.258124][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.340180][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 176.454110][ T8752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.483577][ T8752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.512003][ T8752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.545957][ T8752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.646250][ T8610] veth0_vlan: entered promiscuous mode [ 176.688297][ T8610] veth1_vlan: entered promiscuous mode [ 176.751376][ T8944] gtp0: entered promiscuous mode [ 176.757761][ T8944] gtp0: entered allmulticast mode [ 176.813919][ T8610] veth0_macvtap: entered promiscuous mode [ 176.857706][ T8610] veth1_macvtap: entered promiscuous mode [ 176.917836][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.965377][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.996998][ T8610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.014641][ T8610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.023790][ T8610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.034108][ T8610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.076344][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.131599][ T8956] netlink: 'syz.4.857': attribute type 7 has an invalid length. [ 177.154784][ T5848] Bluetooth: hci2: command tx timeout [ 177.187487][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.265848][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.273092][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.286702][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.298429][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.305699][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.314144][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.473357][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.495424][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.774845][ T8982] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 178.107505][ T9000] bridge2: entered promiscuous mode [ 178.239076][ T7382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.266842][ T9002] lo: entered promiscuous mode [ 178.272208][ T9002] tunl0: entered promiscuous mode [ 178.278783][ T9002] gre0: entered promiscuous mode [ 178.290674][ T9002] gretap0: entered promiscuous mode [ 178.297176][ T9002] erspan0: entered promiscuous mode [ 178.303059][ T9002] ip_vti0: entered promiscuous mode [ 178.320050][ T9002] ip6_vti0: entered promiscuous mode [ 178.330881][ T9002] sit0: entered promiscuous mode [ 178.337789][ T9002] ip6tnl0: entered promiscuous mode [ 178.348203][ T9002] ip6gre0: entered promiscuous mode [ 178.356453][ T9002] syz_tun: entered promiscuous mode [ 178.362468][ T9002] ip6gretap0: entered promiscuous mode [ 178.372932][ T9002] bridge0: entered promiscuous mode [ 178.379739][ T9002] vcan0: entered promiscuous mode [ 178.388321][ T9002] bond0: entered promiscuous mode [ 178.396295][ T9002] bond_slave_0: entered promiscuous mode [ 178.402292][ T9002] bond_slave_1: entered promiscuous mode [ 178.412503][ T9002] dummy0: entered promiscuous mode [ 178.418869][ T9002] bond0: left allmulticast mode [ 178.427092][ T9002] bond_slave_0: left allmulticast mode [ 178.432683][ T9002] bond_slave_1: left allmulticast mode [ 178.460401][ T9002] dummy0: left allmulticast mode [ 178.478195][ T9002] team0: entered promiscuous mode [ 178.483366][ T9002] team_slave_0: entered promiscuous mode [ 178.502575][ T9002] team_slave_1: entered promiscuous mode [ 178.526460][ T9002] nlmon0: entered promiscuous mode [ 178.548493][ T9002] caif0: entered promiscuous mode [ 178.569680][ T9002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.758074][ T9020] netlink: 'syz.4.872': attribute type 13 has an invalid length. [ 178.783200][ T7382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.869753][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.971407][ T7382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.211515][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.225950][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.234899][ T5155] Bluetooth: hci2: command tx timeout [ 179.240961][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.251390][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.261532][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.309903][ T7382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.360179][ T8752] veth0_vlan: entered promiscuous mode [ 179.364219][ T9039] __nla_validate_parse: 8 callbacks suppressed [ 179.364243][ T9039] netlink: 104 bytes leftover after parsing attributes in process `syz.2.877'. [ 179.386845][ T8752] veth1_vlan: entered promiscuous mode [ 179.439561][ T8752] veth0_macvtap: entered promiscuous mode [ 179.452933][ T8752] veth1_macvtap: entered promiscuous mode [ 179.537778][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 179.558240][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.618156][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.690126][ T8752] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.702393][ T8752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.722177][ T8752] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.732121][ T8752] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.781900][ T9058] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 180.149620][ T7382] bridge_slave_1: left allmulticast mode [ 180.156084][ T7382] bridge_slave_1: left promiscuous mode [ 180.162026][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.176892][ T7382] bridge_slave_0: left allmulticast mode [ 180.183334][ T7382] bridge_slave_0: left promiscuous mode [ 180.189959][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.266440][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 180.288582][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.887'. [ 180.621377][ T7382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.640595][ T7382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.651665][ T7382] bond0 (unregistering): Released all slaves [ 180.668343][ T9066] syzkaller0: refused to change device tx_queue_len [ 180.693311][ T9035] chnl_net:caif_netlink_parms(): no params data found [ 180.789257][ T9079] netlink: 'syz.4.888': attribute type 3 has an invalid length. [ 180.797771][ T9079] netlink: 9 bytes leftover after parsing attributes in process `syz.4.888'. [ 181.069522][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.092429][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.101280][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.108937][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.108960][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.126100][ T9087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'. [ 181.128504][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.154767][ T9035] bridge_slave_0: entered allmulticast mode [ 181.162671][ T9035] bridge_slave_0: entered promiscuous mode [ 181.173107][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.180920][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.188863][ T9035] bridge_slave_1: entered allmulticast mode [ 181.201476][ T9035] bridge_slave_1: entered promiscuous mode [ 181.290221][ T7382] hsr_slave_0: left promiscuous mode [ 181.305222][ T7382] hsr_slave_1: left promiscuous mode [ 181.314866][ T5155] Bluetooth: hci1: command tx timeout [ 181.318847][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.359503][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.379162][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.415652][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.451948][ T7382] veth1_macvtap: left promiscuous mode [ 181.460239][ T7382] veth0_macvtap: left promiscuous mode [ 181.469046][ T7382] veth1_vlan: left promiscuous mode [ 181.481131][ T7382] veth0_vlan: left promiscuous mode [ 182.022714][ T7382] team0 (unregistering): Port device team_slave_1 removed [ 182.061643][ T7382] team0 (unregistering): Port device team_slave_0 removed [ 182.543092][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.576591][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.729468][ T9035] team0: Port device team_slave_0 added [ 182.767806][ T9035] team0: Port device team_slave_1 added [ 182.777332][ T9110] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 182.886417][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.915558][ T9110] batadv0: entered promiscuous mode [ 182.931131][ T9110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.023260][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 183.174751][ T9122] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 183.195028][ T9122] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 183.212692][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.235049][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.266984][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.280556][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.289574][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.324107][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.394840][ T5155] Bluetooth: hci1: command tx timeout [ 183.507675][ T9035] hsr_slave_0: entered promiscuous mode [ 183.519664][ T9035] hsr_slave_1: entered promiscuous mode [ 183.545698][ T9035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.553335][ T9035] Cannot create hsr debugfs directory [ 183.582749][ T9140] netlink: 104 bytes leftover after parsing attributes in process `syz.2.903'. [ 183.735138][ T7382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.928157][ T7382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.036530][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.048833][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.061566][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.073286][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.084698][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.125467][ T7382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.226654][ T7382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.522132][ T9169] tipc: Enabling of bearer rejected, failed to enable media [ 184.610557][ T7382] bridge_slave_1: left allmulticast mode [ 184.636058][ T7382] bridge_slave_1: left promiscuous mode [ 184.642479][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.664648][ T7382] bridge_slave_0: left allmulticast mode [ 184.670394][ T7382] bridge_slave_0: left promiscuous mode [ 184.684549][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.686630][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 184.743321][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 185.180528][ T7382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.194650][ T7382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.206009][ T7382] bond0 (unregistering): Released all slaves [ 185.236428][ T9179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.916'. [ 185.248143][ T9179] netlink: 21 bytes leftover after parsing attributes in process `syz.2.916'. [ 185.257550][ T9179] netlink: 21 bytes leftover after parsing attributes in process `syz.2.916'. [ 185.473917][ T5848] Bluetooth: hci1: command tx timeout [ 185.480818][ T9203] delete_channel: no stack [ 185.502001][ T9201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.588158][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 185.869028][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 185.885806][ T9218] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 185.894896][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.924480][ T9156] chnl_net:caif_netlink_parms(): no params data found [ 186.101999][ T7382] hsr_slave_0: left promiscuous mode [ 186.113651][ T5848] Bluetooth: hci2: command tx timeout [ 186.137705][ T7382] hsr_slave_1: left promiscuous mode [ 186.147798][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.156038][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.168178][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.176106][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.202694][ T7382] veth1_macvtap: left promiscuous mode [ 186.208525][ T7382] veth0_macvtap: left promiscuous mode [ 186.214406][ T7382] veth1_vlan: left promiscuous mode [ 186.219770][ T7382] veth0_vlan: left promiscuous mode [ 186.692294][ T7382] team0 (unregistering): Port device team_slave_1 removed [ 186.737613][ T7382] team0 (unregistering): Port device team_slave_0 removed [ 187.162378][ T9229] C: renamed from lo [ 187.177334][ T9233] lo: left promiscuous mode [ 187.196155][ T9233] tunl0: left promiscuous mode [ 187.203127][ T9233] gre0: left promiscuous mode [ 187.223245][ T9233] gretap0: left promiscuous mode [ 187.235293][ T9233] erspan0: left promiscuous mode [ 187.245377][ T9233] ip_vti0: left promiscuous mode [ 187.259829][ T9233] ip6_vti0: left promiscuous mode [ 187.264517][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 187.271139][ T9233] sit0: left promiscuous mode [ 187.285935][ T9233] ip6tnl0: left promiscuous mode [ 187.299738][ T9233] ip6gre0: left promiscuous mode [ 187.308992][ T9233] syz_tun: left promiscuous mode [ 187.319978][ T9233] ip6gretap0: left promiscuous mode [ 187.330323][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.338184][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.347904][ T9233] bridge0: left promiscuous mode [ 187.357078][ T9233] vcan0: left promiscuous mode [ 187.365392][ T9233] bond0: left promiscuous mode [ 187.370230][ T9233] bond_slave_0: left promiscuous mode [ 187.376153][ T9233] bond_slave_1: left promiscuous mode [ 187.381851][ T9233] batadv0: left promiscuous mode [ 187.391886][ T9233] team0: left promiscuous mode [ 187.398109][ T9233] team_slave_0: left promiscuous mode [ 187.408779][ T9233] team_slave_1: left promiscuous mode [ 187.422116][ T9233] dummy0: left promiscuous mode [ 187.428744][ T9233] nlmon0: left promiscuous mode [ 187.436521][ T9233] caif0: left promiscuous mode [ 187.497623][ T9233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.510418][ T9233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.565148][ T5848] Bluetooth: hci1: command tx timeout [ 187.590602][ T9233] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.600213][ T9233] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.609246][ T9233] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.618488][ T9233] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.666681][ T9233] vlan2: left allmulticast mode [ 187.671618][ T9233] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 187.681195][ T9233] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 187.701507][ T9233] gtp0: left promiscuous mode [ 187.706655][ T9233] gtp0: left allmulticast mode [ 187.757708][ T9035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.773310][ T9035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.850240][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 187.866967][ T9035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.929422][ T9250] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 187.947355][ T9035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.948379][ T9243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.935'. [ 188.051890][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.064547][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.071754][ T9256] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 188.071863][ T9156] bridge_slave_0: entered allmulticast mode [ 188.089064][ T9156] bridge_slave_0: entered promiscuous mode [ 188.108266][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.117980][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.128382][ T9156] bridge_slave_1: entered allmulticast mode [ 188.136939][ T9156] bridge_slave_1: entered promiscuous mode [ 188.139603][ T9256] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 188.194183][ T5848] Bluetooth: hci2: command tx timeout [ 188.279072][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.331553][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.489963][ T9156] team0: Port device team_slave_0 added [ 188.512245][ T9156] team0: Port device team_slave_1 added [ 188.626117][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.639195][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.675153][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.692787][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.700632][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.731175][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.939038][ T9287] netlink: 'syz.4.941': attribute type 12 has an invalid length. [ 189.001284][ T9287] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 189.042947][ T9156] hsr_slave_0: entered promiscuous mode [ 189.053351][ T9156] hsr_slave_1: entered promiscuous mode [ 189.061429][ T9156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.069537][ T9156] Cannot create hsr debugfs directory [ 189.168629][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.177480][ T9298] netlink: zone id is out of range [ 189.182817][ T9298] netlink: zone id is out of range [ 189.196418][ T9298] netlink: zone id is out of range [ 189.201836][ T9298] netlink: zone id is out of range [ 189.213985][ T9298] netlink: get zone limit has 8 unknown bytes [ 189.322350][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.375218][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.382467][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.444103][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.451339][ T7382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.546869][ T9307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.760507][ T9316] __nla_validate_parse: 9 callbacks suppressed [ 189.760527][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 190.125639][ T9330] netlink: 'syz.1.955': attribute type 8 has an invalid length. [ 190.159500][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.183791][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.220566][ T9156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.245962][ T9156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.276541][ T5848] Bluetooth: hci2: command tx timeout [ 190.306767][ T9035] veth0_vlan: entered promiscuous mode [ 190.319721][ T9156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.335384][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'. [ 190.350944][ T9156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.437602][ T9035] veth1_vlan: entered promiscuous mode [ 190.444281][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 190.469969][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.960'. [ 190.549141][ T9356] netlink: 81 bytes leftover after parsing attributes in process `syz.4.961'. [ 190.579547][ T9035] veth0_macvtap: entered promiscuous mode [ 190.623365][ T9035] veth1_macvtap: entered promiscuous mode [ 190.679276][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.729616][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.790655][ T9035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.813106][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 190.823182][ T9035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.832184][ T9035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.850806][ T9035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.910720][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.022198][ T9156] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.040545][ T9376] C: renamed from lo [ 191.049288][ T9376] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 191.090407][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.097736][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.178039][ T9377] syzkaller0: entered promiscuous mode [ 191.185021][ T9377] syzkaller0: entered allmulticast mode [ 191.215422][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.222610][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.244466][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.258300][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.366555][ T5155] Bluetooth: hci2: command tx timeout [ 192.655541][ T7382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.700353][ T7382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.788627][ T9386] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 193.059760][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 193.093323][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'. [ 193.164808][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 193.217639][ T9408] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 193.299995][ T9414] netlink: 'syz.1.979': attribute type 2 has an invalid length. [ 193.308815][ T9408] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 193.332288][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.437808][ T9156] veth0_vlan: entered promiscuous mode [ 193.459730][ T9156] veth1_vlan: entered promiscuous mode [ 193.482247][ T9423] netlink: 'syz.2.982': attribute type 21 has an invalid length. [ 193.538663][ T9156] veth0_macvtap: entered promiscuous mode [ 193.557781][ T9156] veth1_macvtap: entered promiscuous mode [ 193.584891][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.618329][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.727777][ T7391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.768584][ T9156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.780478][ T9156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.792351][ T9156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.809059][ T9156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.903323][ T7391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.996196][ T7391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.048332][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.057743][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.088256][ T7391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.121027][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.129689][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.218873][ T7391] bridge_slave_1: left allmulticast mode [ 194.228173][ T7391] bridge_slave_1: left promiscuous mode [ 194.234632][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.248127][ T7391] bridge_slave_0: left allmulticast mode [ 194.254224][ T7391] bridge_slave_0: left promiscuous mode [ 194.259952][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.445351][ T5155] Bluetooth: hci2: command 0x0405 tx timeout [ 194.997778][ T7391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.022318][ T7391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.039482][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.046848][ T7391] bond0 (unregistering): Released all slaves [ 195.057115][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.066372][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.079539][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.091257][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.190661][ T9454] syzkaller1: entered promiscuous mode [ 195.196365][ T9454] syzkaller1: entered allmulticast mode [ 195.530499][ T7391] hsr_slave_0: left promiscuous mode [ 195.548235][ T7391] hsr_slave_1: left promiscuous mode [ 195.555166][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.562618][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.571441][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.579359][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.602525][ T7391] veth1_macvtap: left promiscuous mode [ 195.608566][ T7391] veth0_macvtap: left promiscuous mode [ 195.614695][ T7391] veth1_vlan: left promiscuous mode [ 195.620037][ T7391] veth0_vlan: left promiscuous mode [ 196.229800][ T7391] team0 (unregistering): Port device team_slave_1 removed [ 196.331295][ T7391] team0 (unregistering): Port device team_slave_0 removed [ 196.535727][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.546732][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.561038][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.572359][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.581003][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.884274][ T9474] __nla_validate_parse: 1 callbacks suppressed [ 196.884295][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 197.160664][ T5155] Bluetooth: hci1: command tx timeout [ 197.268863][ T9464] chnl_net:caif_netlink_parms(): no params data found [ 198.308101][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.332449][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 198.352671][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.365133][ T9464] bridge_slave_0: entered allmulticast mode [ 198.394412][ T9464] bridge_slave_0: entered promiscuous mode [ 198.619983][ T9562] netlink: 'syz.4.1005': attribute type 33 has an invalid length. [ 198.629732][ T9562] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1005'. [ 198.676220][ T5155] Bluetooth: hci2: command tx timeout [ 198.770350][ T9548] team0 (unregistering): Port device team_slave_0 removed [ 198.810675][ T9548] team0 (unregistering): Port device team_slave_1 removed [ 198.851726][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.859719][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.867662][ T9464] bridge_slave_1: entered allmulticast mode [ 198.888439][ T9464] bridge_slave_1: entered promiscuous mode [ 199.045088][ T9581] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1008'. [ 199.054682][ T9581] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 199.064292][ T9581] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 199.131651][ T9464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.231772][ T7391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.233586][ T5155] Bluetooth: hci1: command tx timeout [ 199.265490][ T9464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.314393][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 199.388946][ T7391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.462214][ T9464] team0: Port device team_slave_0 added [ 199.487375][ T9464] team0: Port device team_slave_1 added [ 199.546488][ T7391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.565614][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 199.652881][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 199.745755][ T7391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.762828][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.771433][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.798245][ T9464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.811724][ T9464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.819458][ T9464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.847049][ T9464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.896081][ T9607] tipc: Started in network mode [ 199.903323][ T9607] tipc: Node identity cebf1c3bb941, cluster identity 4711 [ 199.914779][ T9607] tipc: Enabled bearer , priority 10 [ 199.951494][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.978277][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.008393][ T9483] bridge_slave_0: entered allmulticast mode [ 200.026213][ T9483] bridge_slave_0: entered promiscuous mode [ 200.040321][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.053169][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.070867][ T9483] bridge_slave_1: entered allmulticast mode [ 200.089532][ T9483] bridge_slave_1: entered promiscuous mode [ 200.108306][ T9614] tc_dump_action: action bad kind [ 200.155976][ T9621] netlink: 'syz.1.1020': attribute type 2 has an invalid length. [ 200.168467][ T9621] netlink: 'syz.1.1020': attribute type 8 has an invalid length. [ 200.178579][ T9621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'. [ 200.228692][ T9619] netlink: 436 bytes leftover after parsing attributes in process `syz.2.1017'. [ 200.258285][ T9464] hsr_slave_0: entered promiscuous mode [ 200.267022][ T9464] hsr_slave_1: entered promiscuous mode [ 200.274047][ T9464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.282973][ T9464] Cannot create hsr debugfs directory [ 200.356569][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.367464][ T9631] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 200.440975][ T9631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.451924][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.537168][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'. [ 200.555600][ T9640] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1022'. [ 200.602746][ T9483] team0: Port device team_slave_0 added [ 200.629990][ T9483] team0: Port device team_slave_1 added [ 200.636882][ T7391] bridge_slave_1: left allmulticast mode [ 200.642620][ T7391] bridge_slave_1: left promiscuous mode [ 200.651926][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.661708][ T7391] bridge_slave_0: left allmulticast mode [ 200.668111][ T7391] bridge_slave_0: left promiscuous mode [ 200.707521][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.755159][ T5848] Bluetooth: hci2: command tx timeout [ 200.757336][ T9642] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 201.034619][ T9644] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1024'. [ 201.053239][ T5834] tipc: Node number set to 2013142075 [ 201.127565][ T7391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.143020][ T7391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.160019][ T7391] bond0 (unregistering): Released all slaves [ 201.317626][ T5848] Bluetooth: hci1: command tx timeout [ 201.317802][ T9642] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.515121][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.523378][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.555503][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.605221][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.616487][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.646765][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.918944][ T7391] hsr_slave_0: left promiscuous mode [ 201.944766][ T7391] hsr_slave_1: left promiscuous mode [ 201.951328][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.966635][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.007483][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.019755][ T7391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.051076][ T7391] veth1_macvtap: left promiscuous mode [ 202.057457][ T7391] veth0_macvtap: left promiscuous mode [ 202.063153][ T7391] veth1_vlan: left promiscuous mode [ 202.068993][ T7391] veth0_vlan: left promiscuous mode [ 202.076924][ T9680] __nla_validate_parse: 2 callbacks suppressed [ 202.076943][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 202.092636][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 202.549449][ T7391] team0 (unregistering): Port device team_slave_1 removed [ 202.596083][ T7391] team0 (unregistering): Port device team_slave_0 removed [ 202.836680][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 203.072821][ T9483] hsr_slave_0: entered promiscuous mode [ 203.080220][ T9483] hsr_slave_1: entered promiscuous mode [ 203.087620][ T9483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.099831][ T9483] Cannot create hsr debugfs directory [ 203.108084][ T9669] vlan0: entered promiscuous mode [ 203.202552][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 203.219492][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 203.379276][ T9699] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 203.392559][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1041'. [ 203.395105][ T5848] Bluetooth: hci1: command tx timeout [ 203.707689][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1044'. [ 203.724774][ T9711] netlink: 'syz.2.1044': attribute type 7 has an invalid length. [ 203.742597][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1044'. [ 203.817061][ T9715] netlink: 'syz.2.1046': attribute type 6 has an invalid length. [ 203.959717][ T9483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.000137][ T9483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.059441][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 204.060101][ T9483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.083072][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 204.099385][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1050'. [ 204.121772][ T9483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.236339][ T9464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.284123][ T9464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.322074][ T9464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.348755][ T9747] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 204.382087][ T9464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.408951][ T9749] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 204.481131][ T9751] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 204.732650][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.901252][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.914302][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 204.960249][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.967429][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.004992][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.012178][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.128904][ T9464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.186782][ T9464] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.249688][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.256973][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.299146][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.306425][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.796045][ T9804] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 205.841562][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.979259][ T9464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.006374][ T9483] veth0_vlan: entered promiscuous mode [ 206.043209][ T9483] veth1_vlan: entered promiscuous mode [ 206.095914][ T9464] veth0_vlan: entered promiscuous mode [ 206.205435][ T9808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.267504][ T9464] veth1_vlan: entered promiscuous mode [ 206.340041][ T9808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.363787][ T9483] veth0_macvtap: entered promiscuous mode [ 206.379260][ T9483] veth1_macvtap: entered promiscuous mode [ 206.429293][ T9808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.462396][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.480661][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.508993][ T9808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.530514][ T9483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.539404][ T9483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.549585][ T9483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.558689][ T9483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.576670][ T9464] veth0_macvtap: entered promiscuous mode [ 206.608472][ T9464] veth1_macvtap: entered promiscuous mode [ 206.722559][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.767611][ T9808] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.787427][ T9464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.812112][ T9808] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.833019][ T9808] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.844503][ T9819] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 206.893230][ T9464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.916913][ T9464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.936413][ T9464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.951340][ T9464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.994996][ T9808] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.995415][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 207.038056][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.070565][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.123030][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.153368][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.424082][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.431978][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.642903][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.665510][ T9845] __nla_validate_parse: 4 callbacks suppressed [ 207.665533][ T9845] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1081'. [ 207.686022][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.967276][ T3533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.089283][ T3533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.182264][ T3533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.278253][ T3533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.430194][ T3533] bridge_slave_1: left allmulticast mode [ 208.438520][ T3533] bridge_slave_1: left promiscuous mode [ 208.448820][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.459655][ T3533] bridge_slave_0: left allmulticast mode [ 208.468858][ T3533] bridge_slave_0: left promiscuous mode [ 208.475632][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.712056][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.729815][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.739142][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.749278][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.757936][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.976365][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.012527][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.040089][ T3533] bond0 (unregistering): Released all slaves [ 209.185606][ T9871] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1086'. [ 209.452367][ T9884] bridge0: port 1(gretap0) entered blocking state [ 209.489405][ T9884] bridge0: port 1(gretap0) entered disabled state [ 209.512287][ T9884] gretap0: entered allmulticast mode [ 209.534899][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.552041][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.562366][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.566983][ T9884] gretap0: entered promiscuous mode [ 209.595299][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.605235][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.660358][ T9894] syzkaller0: entered promiscuous mode [ 209.687587][ T9894] syzkaller0: entered allmulticast mode [ 209.705081][ T9887] syzkaller1: entered promiscuous mode [ 209.712985][ T9887] syzkaller1: entered allmulticast mode [ 210.169140][ T3533] hsr_slave_0: left promiscuous mode [ 210.176495][ T3533] hsr_slave_1: left promiscuous mode [ 210.182642][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.193230][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.209796][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.218199][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.251367][ T3533] veth1_macvtap: left promiscuous mode [ 210.259052][ T3533] veth0_macvtap: left promiscuous mode [ 210.267368][ T3533] veth1_vlan: left promiscuous mode [ 210.273219][ T3533] veth0_vlan: left promiscuous mode [ 210.279132][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 210.303712][ T9911] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1093'. [ 210.318549][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 210.834848][ T5848] Bluetooth: hci1: command tx timeout [ 210.879055][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 210.928054][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 211.503848][ T9918] vlan2: entered promiscuous mode [ 211.517172][ T9918] bridge0: entered promiscuous mode [ 211.610006][ T9857] chnl_net:caif_netlink_parms(): no params data found [ 211.714120][ T5848] Bluetooth: hci2: command tx timeout [ 211.721072][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 212.052307][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.060349][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.068402][ T9857] bridge_slave_0: entered allmulticast mode [ 212.077766][ T9857] bridge_slave_0: entered promiscuous mode [ 212.134314][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.142377][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.150572][ T9857] bridge_slave_1: entered allmulticast mode [ 212.159130][ T9857] bridge_slave_1: entered promiscuous mode [ 212.340612][ T9857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.367573][ T9889] chnl_net:caif_netlink_parms(): no params data found [ 212.391446][ T9857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.601546][ T9857] team0: Port device team_slave_0 added [ 212.638991][ T9857] team0: Port device team_slave_1 added [ 212.731475][ T3533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.764430][ T9951] netlink: 'syz.4.1104': attribute type 4 has an invalid length. [ 212.772538][ T9951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1104'. [ 212.816690][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 212.874457][ T3533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.901856][ T9951] : renamed from bond0 [ 212.914281][ T51] Bluetooth: hci1: command tx timeout [ 213.020974][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.029495][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.037495][ T9889] bridge_slave_0: entered allmulticast mode [ 213.046753][ T9889] bridge_slave_0: entered promiscuous mode [ 213.077435][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.084776][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.118939][ T9857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.168801][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'. [ 213.197165][ T3533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.238743][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.261833][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.275392][ T9889] bridge_slave_1: entered allmulticast mode [ 213.282076][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1109'. [ 213.293067][ T9889] bridge_slave_1: entered promiscuous mode [ 213.301109][ T9857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.311404][ T9857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.346575][ T9857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.402222][ T9970] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1110'. [ 213.427904][ T3533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.757539][ T9970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.771628][ T9970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.787985][ T9970] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 213.796064][ T51] Bluetooth: hci2: command tx timeout [ 213.818850][ T9970] bond0 (unregistering): Released all slaves [ 213.846887][ T9889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.886198][ T9889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.998744][ T9995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 214.001210][ T9991] syzkaller1: entered promiscuous mode [ 214.022152][ T9991] syzkaller1: entered allmulticast mode [ 214.081884][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1115'. [ 214.149728][ T9889] team0: Port device team_slave_0 added [ 214.176153][ T9889] team0: Port device team_slave_1 added [ 214.191010][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 214.200093][ T9857] hsr_slave_0: entered promiscuous mode [ 214.201414][ T9857] hsr_slave_1: entered promiscuous mode [ 214.214234][ T9857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.217407][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 214.221818][ T9857] Cannot create hsr debugfs directory [ 214.388498][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.397572][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.424113][ T9889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.442743][T10008] macvlan2: entered allmulticast mode [ 214.454606][T10008] bond0: entered allmulticast mode [ 214.460394][T10008] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.475691][T10008] bond0: left allmulticast mode [ 214.523243][ T3533] bridge_slave_1: left allmulticast mode [ 214.529265][ T3533] bridge_slave_1: left promiscuous mode [ 214.535442][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.546443][ T3533] bridge_slave_0: left allmulticast mode [ 214.552137][ T3533] bridge_slave_0: left promiscuous mode [ 214.558250][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.722685][T10020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1122'. [ 214.998756][ T51] Bluetooth: hci1: command tx timeout [ 215.072197][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.084741][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.095348][ T3533] bond0 (unregistering): Released all slaves [ 215.110250][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.120743][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.150492][ T9889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.372961][T10039] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 215.431488][T10034] ip6gre1: entered allmulticast mode [ 215.582633][ T9889] hsr_slave_0: entered promiscuous mode [ 215.589772][ T9889] hsr_slave_1: entered promiscuous mode [ 215.598753][ T9889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.607029][ T9889] Cannot create hsr debugfs directory [ 215.708419][ T3533] hsr_slave_0: left promiscuous mode [ 215.719618][ T3533] hsr_slave_1: left promiscuous mode [ 215.725643][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 215.739966][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.747697][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.757111][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.765234][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.796175][ T3533] veth1_macvtap: left promiscuous mode [ 215.801825][ T3533] veth0_macvtap: left promiscuous mode [ 215.812640][ T3533] veth1_vlan: left promiscuous mode [ 215.819092][ T3533] veth0_vlan: left promiscuous mode [ 215.885106][ T51] Bluetooth: hci2: command tx timeout [ 215.968483][T10057] netlink: 'syz.4.1133': attribute type 39 has an invalid length. [ 216.298544][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 216.339128][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 217.076489][ T51] Bluetooth: hci1: command tx timeout [ 217.088442][T10063] bond0 (unregistering): Released all slaves [ 217.921022][ T9857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.943847][ T9857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.953966][ T51] Bluetooth: hci2: command tx timeout [ 217.971435][ T9857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.986329][ T9857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.062484][ T9889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.091497][ T9889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.111896][ T9889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.140324][ T9889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.220984][ T9857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.255810][ T9857] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.305993][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.313267][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.380187][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.387452][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.527067][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.581425][ T9889] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.617112][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.624425][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.659138][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.666379][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.692930][T10136] __nla_validate_parse: 3 callbacks suppressed [ 218.692950][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 218.783264][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 218.934127][ T9857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.039583][T10149] sctp: [Deprecated]: syz.2.1157 (pid 10149) Use of int in maxseg socket option. [ 219.039583][T10149] Use struct sctp_assoc_value instead [ 219.041448][ T9857] veth0_vlan: entered promiscuous mode [ 219.065662][T10125] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.102510][ T9857] veth1_vlan: entered promiscuous mode [ 219.129632][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.149642][T10149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.175722][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.183828][T10149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.195164][T10159] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1158'. [ 219.249830][T10151] netlink: 'syz.4.1158': attribute type 29 has an invalid length. [ 219.293962][T10154] netlink: 'syz.4.1158': attribute type 29 has an invalid length. [ 219.379283][T10161] tipc: Enabling of bearer rejected, failed to enable media [ 219.441222][ T9857] veth0_macvtap: entered promiscuous mode [ 219.520986][ T9857] veth1_macvtap: entered promiscuous mode [ 219.615810][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.635876][ T9889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.662366][ T9857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.701976][ T9857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.717403][ T9857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.728553][ T9857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.743583][ T9857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.958644][ T7369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.969360][ T7369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.998306][ T9889] veth0_vlan: entered promiscuous mode [ 220.077349][ T9889] veth1_vlan: entered promiscuous mode [ 220.084138][ T7376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.092006][ T7376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.244675][ T9889] veth0_macvtap: entered promiscuous mode [ 220.327577][ T9889] veth1_macvtap: entered promiscuous mode [ 220.388050][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.417095][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1170'. [ 220.418258][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.437739][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 220.582233][ T9889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.591630][ T9889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.601093][ T9889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.610132][ T9889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.624118][T10210] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 220.857721][ T7376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.887090][ T7376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.950379][ T7376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.961786][ T7376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.003706][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 221.026680][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 221.359249][ T7376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.852477][ T7376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.037674][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.047901][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.056166][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.067583][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.075464][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.178739][ T7376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.251052][ T7376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.349226][T10241] chnl_net:caif_netlink_parms(): no params data found [ 222.395649][ T7376] bridge_slave_1: left allmulticast mode [ 222.401349][ T7376] bridge_slave_1: left promiscuous mode [ 222.410296][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.472629][ T7376] bridge_slave_0: left allmulticast mode [ 222.482159][ T7376] bridge_slave_0: left promiscuous mode [ 222.494347][T10252] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1182'. [ 222.494362][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 222.521371][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.958165][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.969991][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.979978][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.992764][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.009834][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.178041][ T7376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.190180][ T7376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.200982][ T7376] bond0 (unregistering): Released all slaves [ 223.263677][T10260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1184'. [ 223.502214][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.514553][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.521871][T10241] bridge_slave_0: entered allmulticast mode [ 223.532220][T10241] bridge_slave_0: entered promiscuous mode [ 223.605332][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.613084][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.627033][T10241] bridge_slave_1: entered allmulticast mode [ 223.636848][T10241] bridge_slave_1: entered promiscuous mode [ 223.692535][ T7376] hsr_slave_0: left promiscuous mode [ 223.699741][ T7376] hsr_slave_1: left promiscuous mode [ 223.707301][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.719653][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.731019][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.739505][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.770726][ T7376] veth1_macvtap: left promiscuous mode [ 223.777330][ T7376] veth0_macvtap: left promiscuous mode [ 223.783117][ T7376] veth1_vlan: left promiscuous mode [ 223.789550][ T7376] veth0_vlan: left promiscuous mode [ 224.117518][ T51] Bluetooth: hci1: command tx timeout [ 224.305276][ T7376] team0 (unregistering): Port device team_slave_1 removed [ 224.376258][ T7376] team0 (unregistering): Port device team_slave_0 removed [ 225.059826][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.076141][ T51] Bluetooth: hci2: command tx timeout [ 225.121867][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.323819][T10241] team0: Port device team_slave_0 added [ 225.366840][T10241] team0: Port device team_slave_1 added [ 225.566796][T10317] __nla_validate_parse: 1 callbacks suppressed [ 225.566819][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 225.600480][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 225.612278][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 225.637086][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.645277][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.704805][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.797386][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.819209][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.857492][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.945479][T10327] lo: entered allmulticast mode [ 225.989969][T10330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.003110][T10327] lo: left allmulticast mode [ 226.014817][T10241] hsr_slave_0: entered promiscuous mode [ 226.021793][T10241] hsr_slave_1: entered promiscuous mode [ 226.029055][T10241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.037041][T10241] Cannot create hsr debugfs directory [ 226.196125][ T51] Bluetooth: hci1: command tx timeout [ 226.211999][T10261] chnl_net:caif_netlink_parms(): no params data found [ 226.346518][ T7376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.474440][ T7376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.639325][ T7376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.682525][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.690837][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.704302][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 226.714329][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1208'. [ 226.726898][T10261] bridge_slave_0: entered allmulticast mode [ 226.743641][T10261] bridge_slave_0: entered promiscuous mode [ 226.818340][ T7376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.856706][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.869692][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.877165][T10261] bridge_slave_1: entered allmulticast mode [ 226.894981][T10261] bridge_slave_1: entered promiscuous mode [ 227.040988][T10371] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1213'. [ 227.094402][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.127946][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.163614][ T51] Bluetooth: hci2: command tx timeout [ 227.193341][T10373] sctp: [Deprecated]: syz.1.1214 (pid 10373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.193341][T10373] Use struct sctp_sack_info instead [ 227.242776][T10261] team0: Port device team_slave_0 added [ 227.269341][T10375] netlink: 'syz.4.1215': attribute type 11 has an invalid length. [ 227.290620][ T7376] bridge_slave_1: left allmulticast mode [ 227.296481][ T7376] bridge_slave_1: left promiscuous mode [ 227.302690][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.329367][ T7376] bridge_slave_0: left allmulticast mode [ 227.336348][ T7376] bridge_slave_0: left promiscuous mode [ 227.342915][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.714562][ T7376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.727446][ T7376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.744978][ T7376] bond0 (unregistering): Released all slaves [ 227.770142][T10261] team0: Port device team_slave_1 added [ 227.792340][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 227.881913][T10383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1218'. [ 227.908407][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.933242][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.976625][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'. [ 228.012495][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.061113][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.068774][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.146417][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.277565][ T51] Bluetooth: hci1: command tx timeout [ 228.407985][T10261] hsr_slave_0: entered promiscuous mode [ 228.415889][T10261] hsr_slave_1: entered promiscuous mode [ 228.422003][T10261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.430462][T10261] Cannot create hsr debugfs directory [ 228.467653][T10407] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 228.532907][ T7376] hsr_slave_0: left promiscuous mode [ 228.541079][ T7376] hsr_slave_1: left promiscuous mode [ 228.552259][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.560782][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.574296][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.581830][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.607030][ T7376] veth1_macvtap: left promiscuous mode [ 228.612639][ T7376] veth0_macvtap: left promiscuous mode [ 228.619621][ T7376] veth1_vlan: left promiscuous mode [ 228.625561][ T7376] veth0_vlan: left promiscuous mode [ 228.630978][T10417] netlink: 'syz.1.1226': attribute type 21 has an invalid length. [ 228.644012][T10417] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1226'. [ 229.137539][ T7376] team0 (unregistering): Port device team_slave_1 removed [ 229.179895][ T7376] team0 (unregistering): Port device team_slave_0 removed [ 229.246931][ T51] Bluetooth: hci2: command tx timeout [ 229.637689][T10414] gretap0: left allmulticast mode [ 229.642966][T10414] gretap0: left promiscuous mode [ 229.649409][T10414] bridge0: port 1(gretap0) entered disabled state [ 229.698486][T10417] netlink: 'syz.1.1226': attribute type 5 has an invalid length. [ 229.768638][T10241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.798423][T10241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.875368][T10241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.937004][T10241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.354561][ T51] Bluetooth: hci1: command tx timeout [ 230.360967][T10446] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 230.372236][T10446] syzkaller0: Linktype set failed because interface is up [ 230.574537][T10467] __nla_validate_parse: 9 callbacks suppressed [ 230.574558][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.615259][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.632326][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.645864][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.656429][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.674542][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.704350][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.714983][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.725306][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 230.737271][T10467] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1239'. [ 231.317077][ T51] Bluetooth: hci2: command tx timeout [ 232.182502][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.257203][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.318958][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.326179][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.375515][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.382736][ T7391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.621146][T10261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.668150][T10261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.712810][T10261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.734975][T10261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.961059][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.964568][T10519] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 233.038604][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.062115][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.069331][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.125921][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.133107][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.168848][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.200569][T10529] x_tables: unsorted underflow at hook 3 [ 233.326113][T10531] veth5: entered allmulticast mode [ 233.359863][T10537] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 233.394717][ T51] Bluetooth: hci2: command tx timeout [ 233.430253][T10241] veth0_vlan: entered promiscuous mode [ 233.497026][T10241] veth1_vlan: entered promiscuous mode [ 233.611292][T10241] veth0_macvtap: entered promiscuous mode [ 233.631265][T10241] veth1_macvtap: entered promiscuous mode [ 233.666985][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.746376][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.767313][T10241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.790663][T10241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.816266][T10241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.826447][T10241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.967586][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.048789][ T7376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.081437][ T7376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.083121][T10565] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 234.162315][ T7376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.188966][ T7376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.226109][T10261] veth0_vlan: entered promiscuous mode [ 234.241098][T10261] veth1_vlan: entered promiscuous mode [ 234.382051][T10261] veth0_macvtap: entered promiscuous mode [ 234.396955][T10261] veth1_macvtap: entered promiscuous mode [ 234.441751][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.458219][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.477270][T10261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.487484][T10261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.497094][T10261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.506826][T10261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.630970][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.641331][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.167017][ T3533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.196939][ T7404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.218106][ T7404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.349814][ T3533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.497257][ T3533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.760179][ T3533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.843888][T10593] __nla_validate_parse: 60 callbacks suppressed [ 235.843910][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 235.883707][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 236.101996][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 236.259348][ T3533] bridge_slave_1: left allmulticast mode [ 236.268990][ T3533] bridge_slave_1: left promiscuous mode [ 236.277583][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.291915][ T3533] bridge_slave_0: left allmulticast mode [ 236.307396][ T3533] bridge_slave_0: left promiscuous mode [ 236.313286][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.401330][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.418164][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.431718][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.449048][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.458153][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.762293][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.777024][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.787952][ T3533] bond0 (unregistering): Released all slaves [ 237.041432][T10605] chnl_net:caif_netlink_parms(): no params data found [ 237.099585][ T3533] hsr_slave_0: left promiscuous mode [ 237.106624][ T3533] hsr_slave_1: left promiscuous mode [ 237.112459][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.120684][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.129169][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.138041][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.171497][ T3533] veth1_macvtap: left promiscuous mode [ 237.180132][ T3533] veth0_macvtap: left promiscuous mode [ 237.209171][ T3533] veth1_vlan: left promiscuous mode [ 237.223165][ T3533] veth0_vlan: left promiscuous mode [ 237.370371][T10622] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1276'. [ 237.511497][T10627] xt_nfacct: accounting object `syz1' does not exists [ 237.592335][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 237.796955][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.806734][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.817104][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.832266][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.851410][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.069711][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 238.111365][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 238.524322][ T51] Bluetooth: hci1: command tx timeout [ 238.663099][T10646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1283'. [ 238.737597][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'. [ 238.789594][T10653] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 238.806651][T10653] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1284'. [ 238.842366][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.865509][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.893335][T10605] bridge_slave_0: entered allmulticast mode [ 238.903855][T10605] bridge_slave_0: entered promiscuous mode [ 238.928518][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.943599][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.951164][T10605] bridge_slave_1: entered allmulticast mode [ 238.965459][T10605] bridge_slave_1: entered promiscuous mode [ 239.102719][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.138355][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.162441][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 239.269116][T10605] team0: Port device team_slave_0 added [ 239.297468][T10605] team0: Port device team_slave_1 added [ 239.448534][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.467823][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.522079][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.590233][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.599927][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.630469][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.874907][ T51] Bluetooth: hci2: command tx timeout [ 239.990421][T10605] hsr_slave_0: entered promiscuous mode [ 240.030353][T10605] hsr_slave_1: entered promiscuous mode [ 240.054994][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.062633][T10605] Cannot create hsr debugfs directory [ 240.084985][T10696] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1295'. [ 240.102615][T10634] chnl_net:caif_netlink_parms(): no params data found [ 240.259339][ T3533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.572730][ T3533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.594191][ T5848] Bluetooth: hci1: command tx timeout [ 240.769826][ T3533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.850803][T10737] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 240.938287][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 240.948222][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 240.988959][T10735] dvmrp0: entered allmulticast mode [ 241.008911][T10738] dvmrp0: left allmulticast mode [ 241.099212][ T3533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.119439][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.127795][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.135901][T10634] bridge_slave_0: entered allmulticast mode [ 241.144641][T10634] bridge_slave_0: entered promiscuous mode [ 241.197981][T10746] tipc: Enabled bearer , priority 10 [ 241.214605][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.222111][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.229859][T10634] bridge_slave_1: entered allmulticast mode [ 241.237979][T10634] bridge_slave_1: entered promiscuous mode [ 241.374291][T10634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.401280][T10760] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1308'. [ 241.422601][T10634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.562413][T10763] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 241.570688][T10763] netlink: 'syz.2.1309': attribute type 2 has an invalid length. [ 241.748562][T10634] team0: Port device team_slave_0 added [ 241.765306][T10634] team0: Port device team_slave_1 added [ 241.953780][ T5848] Bluetooth: hci2: command tx timeout [ 242.183857][T10634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.190899][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.220029][T10634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.245324][ T3533] bridge_slave_1: left allmulticast mode [ 242.251043][ T3533] bridge_slave_1: left promiscuous mode [ 242.263584][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.276537][ T3533] bridge_slave_0: left allmulticast mode [ 242.282354][ T3533] bridge_slave_0: left promiscuous mode [ 242.307067][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.326647][T10801] netlink: 'syz.2.1317': attribute type 21 has an invalid length. [ 242.677415][ T5848] Bluetooth: hci1: command tx timeout [ 242.778848][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.796744][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.807962][ T3533] bond0 (unregistering): Released all slaves [ 242.831168][T10634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.841615][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.868996][T10634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.201451][T10634] hsr_slave_0: entered promiscuous mode [ 243.220276][T10634] hsr_slave_1: entered promiscuous mode [ 243.233950][T10634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.248723][T10634] Cannot create hsr debugfs directory [ 243.301838][T10829] netlink: 'syz.2.1323': attribute type 2 has an invalid length. [ 243.323600][T10829] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1323'. [ 243.340417][T10829] nbd: must specify a device to reconfigure [ 243.516654][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 243.651450][ T3533] hsr_slave_0: left promiscuous mode [ 243.662571][ T3533] hsr_slave_1: left promiscuous mode [ 243.672832][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.683261][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.692821][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.700957][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.731277][ T3533] veth1_macvtap: left promiscuous mode [ 243.737178][ T3533] veth0_macvtap: left promiscuous mode [ 243.743016][ T3533] veth1_vlan: left promiscuous mode [ 243.749153][ T3533] veth0_vlan: left promiscuous mode [ 243.809002][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 243.869599][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 244.039254][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 244.253224][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 244.297211][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 244.728872][T10856] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 244.754002][ T51] Bluetooth: hci1: command tx timeout [ 244.877286][T10605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.924573][T10605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.929144][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 244.964794][T10605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.046247][T10605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.171849][T10873] netlink: 'syz.2.1333': attribute type 1 has an invalid length. [ 245.186082][T10873] netlink: 'syz.2.1333': attribute type 1 has an invalid length. [ 245.315722][T10883] x_tables: duplicate underflow at hook 2 [ 245.533253][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.640245][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.705595][T10894] veth5: entered allmulticast mode [ 245.739719][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.746942][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.815825][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.823017][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.960516][T10634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.987619][T10634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.029366][T10634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.057940][T10911] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.094047][T10634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.124471][ T51] Bluetooth: hci2: command 0x040f tx timeout [ 246.140313][T10911] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.230461][T10911] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.299823][T10911] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.320338][T10927] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1348'. [ 246.491608][T10911] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.501282][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1349'. [ 246.511845][T10911] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.558876][T10634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.612677][T10911] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.647503][T10911] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.693041][T10634] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.772948][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.780182][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.815288][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.822507][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.877623][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.958029][T10605] veth0_vlan: entered promiscuous mode [ 246.973829][T10605] veth1_vlan: entered promiscuous mode [ 247.040834][T10605] veth0_macvtap: entered promiscuous mode [ 247.080982][T10605] veth1_macvtap: entered promiscuous mode [ 247.092288][T10947] ================================================================== [ 247.100422][T10947] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 247.108134][T10947] Read of size 1 at addr ffff888028895830 by task syz.1.1351/10947 [ 247.116074][T10947] [ 247.118470][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.1.1351 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 247.118500][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.118521][T10947] Call Trace: [ 247.118533][T10947] [ 247.118542][T10947] dump_stack_lvl+0x189/0x250 [ 247.118579][T10947] ? __virt_addr_valid+0x1c8/0x5c0 [ 247.118601][T10947] ? rcu_is_watching+0x15/0xb0 [ 247.118631][T10947] ? __kasan_check_byte+0x12/0x40 [ 247.118654][T10947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.118685][T10947] ? rcu_is_watching+0x15/0xb0 [ 247.118717][T10947] ? lock_release+0x4b/0x3e0 [ 247.118747][T10947] ? __virt_addr_valid+0x1c8/0x5c0 [ 247.118767][T10947] ? __virt_addr_valid+0x4a5/0x5c0 [ 247.118790][T10947] print_report+0xd2/0x2b0 [ 247.118816][T10947] ? rose_get_neigh+0x391/0x990 [ 247.118846][T10947] kasan_report+0x118/0x150 [ 247.118869][T10947] ? rose_get_neigh+0x391/0x990 [ 247.118903][T10947] rose_get_neigh+0x391/0x990 [ 247.118939][T10947] rose_connect+0x416/0x10a0 [ 247.118964][T10947] ? __pfx_current_check_access_socket+0x10/0x10 [ 247.118995][T10947] ? aa_sk_perm+0x81e/0x950 [ 247.119017][T10947] ? __might_fault+0xb0/0x130 [ 247.119036][T10947] ? __pfx_rose_connect+0x10/0x10 [ 247.119061][T10947] ? aa_af_perm+0x1f0/0x2b0 [ 247.119084][T10947] ? tomoyo_socket_connect_permission+0x164/0x290 [ 247.119119][T10947] ? bpf_lsm_socket_connect+0x9/0x20 [ 247.119148][T10947] __sys_connect+0x313/0x440 [ 247.119173][T10947] ? __pfx___sys_connect+0x10/0x10 [ 247.119212][T10947] ? rcu_is_watching+0x15/0xb0 [ 247.119248][T10947] __x64_sys_connect+0x7a/0x90 [ 247.119270][T10947] do_syscall_64+0xfa/0x3b0 [ 247.119289][T10947] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.119318][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.119351][T10947] ? clear_bhb_loop+0x60/0xb0 [ 247.119374][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.119393][T10947] RIP: 0033:0x7fda0258e929 [ 247.119419][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.119438][T10947] RSP: 002b:00007fda033b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.119463][T10947] RAX: ffffffffffffffda RBX: 00007fda027b5fa0 RCX: 00007fda0258e929 [ 247.119479][T10947] RDX: 000000000000001c RSI: 0000200000000e80 RDI: 0000000000000006 [ 247.119492][T10947] RBP: 00007fda02610b39 R08: 0000000000000000 R09: 0000000000000000 [ 247.119505][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.119517][T10947] R13: 0000000000000000 R14: 00007fda027b5fa0 R15: 00007ffc4a221d58 [ 247.119540][T10947] [ 247.119547][T10947] [ 247.123064][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.131617][T10947] Allocated by task 7376: [ 247.131631][T10947] kasan_save_track+0x3e/0x80 [ 247.131665][T10947] __kasan_kmalloc+0x93/0xb0 [ 247.400942][T10947] __kmalloc_noprof+0x27a/0x4f0 [ 247.405834][T10947] __cfg80211_bss_update+0x196/0x2120 [ 247.411230][T10947] cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 247.417487][T10947] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 247.423137][T10947] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 247.429217][T10947] __ieee80211_sta_join_ibss+0xd58/0x1610 [ 247.434955][T10947] ieee80211_sta_create_ibss+0x300/0x480 [ 247.440613][T10947] ieee80211_ibss_work+0xdb1/0x1060 [ 247.445834][T10947] cfg80211_wiphy_work+0x2dc/0x460 [ 247.450962][T10947] process_scheduled_works+0xae1/0x17b0 [ 247.456538][T10947] worker_thread+0x8a0/0xda0 [ 247.461145][T10947] kthread+0x70e/0x8a0 [ 247.465229][T10947] ret_from_fork+0x3f9/0x770 [ 247.469840][T10947] ret_from_fork_asm+0x1a/0x30 [ 247.474615][T10947] [ 247.476945][T10947] Freed by task 3533: [ 247.480930][T10947] kasan_save_track+0x3e/0x80 [ 247.485631][T10947] kasan_save_free_info+0x46/0x50 [ 247.490673][T10947] __kasan_slab_free+0x62/0x70 [ 247.495461][T10947] kfree+0x18e/0x440 [ 247.499373][T10947] cfg80211_put_bss+0x1e2/0x230 [ 247.504247][T10947] cfg80211_dev_free+0x257/0x2d0 [ 247.509191][T10947] device_release+0x9c/0x1c0 [ 247.513801][T10947] kobject_put+0x22b/0x480 [ 247.518226][T10947] mac80211_hwsim_del_radio+0x2de/0x460 [ 247.523777][T10947] hwsim_exit_net+0x584/0x640 [ 247.528468][T10947] ops_undo_list+0x49a/0x990 [ 247.533063][T10947] cleanup_net+0x4c5/0x800 [ 247.537495][T10947] process_scheduled_works+0xae1/0x17b0 [ 247.543058][T10947] worker_thread+0x8a0/0xda0 [ 247.547656][T10947] kthread+0x70e/0x8a0 [ 247.551733][T10947] ret_from_fork+0x3f9/0x770 [ 247.556351][T10947] ret_from_fork_asm+0x1a/0x30 [ 247.561141][T10947] [ 247.563468][T10947] The buggy address belongs to the object at ffff888028895800 [ 247.563468][T10947] which belongs to the cache kmalloc-512 of size 512 [ 247.577527][T10947] The buggy address is located 48 bytes inside of [ 247.577527][T10947] freed 512-byte region [ffff888028895800, ffff888028895a00) [ 247.591245][T10947] [ 247.593581][T10947] The buggy address belongs to the physical page: [ 247.600003][T10947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028895c00 pfn:0x28894 [ 247.610075][T10947] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 247.618581][T10947] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 247.627110][T10947] page_type: f5(slab) [ 247.631130][T10947] raw: 00fff00000000240 ffff88801a441c80 ffffea0001632310 ffffea0001e62a10 [ 247.639724][T10947] raw: ffff888028895c00 000000000010000f 00000000f5000000 0000000000000000 [ 247.648436][T10947] head: 00fff00000000240 ffff88801a441c80 ffffea0001632310 ffffea0001e62a10 [ 247.657119][T10947] head: ffff888028895c00 000000000010000f 00000000f5000000 0000000000000000 [ 247.665797][T10947] head: 00fff00000000002 ffffea0000a22501 00000000ffffffff 00000000ffffffff [ 247.674474][T10947] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 247.683158][T10947] page dumped because: kasan: bad access detected [ 247.689588][T10947] page_owner tracks the page as allocated [ 247.695315][T10947] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14378417118, free_ts 0 [ 247.715040][T10947] post_alloc_hook+0x240/0x2a0 [ 247.719829][T10947] get_page_from_freelist+0x21e4/0x22c0 [ 247.725387][T10947] __alloc_frozen_pages_noprof+0x181/0x370 [ 247.731205][T10947] alloc_pages_mpol+0x232/0x4a0 [ 247.736063][T10947] allocate_slab+0x8a/0x3b0 [ 247.740584][T10947] ___slab_alloc+0xbfc/0x1480 [ 247.745272][T10947] __kmalloc_cache_noprof+0x296/0x3d0 [ 247.750662][T10947] device_add+0xbe/0xb50 [ 247.755019][T10947] usb_hub_create_port_device+0x3c2/0xb90 [ 247.760831][T10947] hub_probe+0x25af/0x36e0 [ 247.765264][T10947] usb_probe_interface+0x644/0xbc0 [ 247.770402][T10947] really_probe+0x26a/0x9a0 [ 247.774922][T10947] __driver_probe_device+0x18c/0x2f0 [ 247.780215][T10947] driver_probe_device+0x4f/0x430 [ 247.785253][T10947] __device_attach_driver+0x2ce/0x530 [ 247.790636][T10947] bus_for_each_drv+0x251/0x2e0 [ 247.795526][T10947] page_owner free stack trace missing [ 247.800905][T10947] [ 247.803233][T10947] Memory state around the buggy address: [ 247.808862][T10947] ffff888028895700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.816927][T10947] ffff888028895780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 247.824994][T10947] >ffff888028895800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.833317][T10947] ^ [ 247.838962][T10947] ffff888028895880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.847026][T10947] ffff888028895900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.855115][T10947] ================================================================== [ 247.863410][T10947] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.870644][T10947] CPU: 0 UID: 0 PID: 10947 Comm: syz.1.1351 Not tainted 6.16.0-rc2-syzkaller-00163-gb993ea46b3b6 #0 PREEMPT(full) [ 247.882743][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.892832][T10947] Call Trace: [ 247.896147][T10947] [ 247.899115][T10947] dump_stack_lvl+0x99/0x250 [ 247.903758][T10947] ? __asan_memcpy+0x40/0x70 [ 247.908400][T10947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.913646][T10947] ? __pfx__printk+0x10/0x10 [ 247.918263][T10947] panic+0x2db/0x790 [ 247.922183][T10947] ? __pfx_panic+0x10/0x10 [ 247.926629][T10947] ? check_panic_on_warn+0x75/0xb0 [ 247.931765][T10947] ? rose_get_neigh+0x391/0x990 [ 247.936634][T10947] check_panic_on_warn+0x89/0xb0 [ 247.941585][T10947] ? rose_get_neigh+0x391/0x990 [ 247.946493][T10947] end_report+0x78/0x160 [ 247.950749][T10947] kasan_report+0x129/0x150 [ 247.955279][T10947] ? rose_get_neigh+0x391/0x990 [ 247.960156][T10947] rose_get_neigh+0x391/0x990 [ 247.964864][T10947] rose_connect+0x416/0x10a0 [ 247.969496][T10947] ? __pfx_current_check_access_socket+0x10/0x10 [ 247.975852][T10947] ? aa_sk_perm+0x81e/0x950 [ 247.980376][T10947] ? __might_fault+0xb0/0x130 [ 247.985077][T10947] ? __pfx_rose_connect+0x10/0x10 [ 247.990117][T10947] ? aa_af_perm+0x1f0/0x2b0 [ 247.994647][T10947] ? tomoyo_socket_connect_permission+0x164/0x290 [ 248.001088][T10947] ? bpf_lsm_socket_connect+0x9/0x20 [ 248.006389][T10947] __sys_connect+0x313/0x440 [ 248.010996][T10947] ? __pfx___sys_connect+0x10/0x10 [ 248.016213][T10947] ? rcu_is_watching+0x15/0xb0 [ 248.021001][T10947] __x64_sys_connect+0x7a/0x90 [ 248.025781][T10947] do_syscall_64+0xfa/0x3b0 [ 248.030296][T10947] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.035518][T10947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.041607][T10947] ? clear_bhb_loop+0x60/0xb0 [ 248.046294][T10947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.052200][T10947] RIP: 0033:0x7fda0258e929 [ 248.056627][T10947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.076246][T10947] RSP: 002b:00007fda033b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 248.084674][T10947] RAX: ffffffffffffffda RBX: 00007fda027b5fa0 RCX: 00007fda0258e929 [ 248.092653][T10947] RDX: 000000000000001c RSI: 0000200000000e80 RDI: 0000000000000006 [ 248.100629][T10947] RBP: 00007fda02610b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.108608][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.116588][T10947] R13: 0000000000000000 R14: 00007fda027b5fa0 R15: 00007ffc4a221d58 [ 248.124582][T10947] [ 248.127929][T10947] Kernel Offset: disabled [ 248.132264][T10947] Rebooting in 86400 seconds..