last executing test programs: 1m34.269989216s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 1m21.604201884s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1m20.413624165s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 1m7.706627339s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 53.771309712s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 52.688059419s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 41.727446298s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 40.978855494s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 27.800200365s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 26.468240773s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 13.725580608s ago: executing program 0 (id=803): sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r1, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 12.569025427s ago: executing program 3 (id=282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18a70b6e1b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffe}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000030c0), 0x2) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x4}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xc, [0xd, 0x4, 0x0, 0x2, 0x4f, 0xf, 0x10, 0xb, 0x7, 0xe, 0x8, 0x4, 0x0, 0x9, 0xd, 0xa], 0x0, [0x100, 0x6c85, 0x9, 0x7fff, 0x7, 0xa, 0xe7e2, 0x2b8, 0x6, 0x7, 0xf499, 0x7, 0x1, 0x10, 0xc4b], [0x1, 0x3, 0x5, 0x200, 0x6e, 0x6, 0x7f, 0x5, 0xa4b2, 0xf000, 0x6, 0x8, 0x6, 0x95, 0x10, 0x1d15]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) 1.95768319s ago: executing program 4 (id=1569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x68, r7, 0x900}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000400000001668b10bd200000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000006000000000000000000140000001000010000000000000000000000000a"], 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getlink={0x28, 0x12, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x8d09, 0x8}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x1) accept(r9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x24, r12, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x2, 0x2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1.297479729s ago: executing program 4 (id=1576): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0xe4, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xc6, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @val={0x5, 0x78, {0x5, 0x97, 0x5, "2a973108c35a70929ae1faaa6fee19ba94e1980cf53680d9cba5b5472ed3bc491444087d934a8cd7121fae560ec23e762409b5a8d771cea999f412928127f2f81b37c24813c594a352900f299099fed9645cc8e6158beed98f1c41657b64e7cfd55b9c69909021ca3140643eb9d0243edefddaa8e2"}}, @val={0x25, 0x3, {0x0, 0x70, 0xe}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x40, 0x9, 0x0, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x68, 0x0, 0x5b, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0xa, [{@private=0xa010102, 0x4}]}, @end]}}}}}) r8 = getuid() socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000080)=""/238, 0xee}], 0x6}, 0x80000003}], 0x4, 0x10100, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x4e21, 0x5, 0x6, 0x1ff, 0x2, 0x80, 0xc0, 0xc, r7, r8}, {0x9, 0x4, 0x9, 0x6, 0xdfa, 0x7, 0x8, 0x3}, {0x6ce6987f, 0x1, 0xd6c, 0x74f90c13}, 0x9, 0x6e6bb7, 0x1, 0x0, 0x2}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x2, 0x2, 0x5, 0xa, 0x3, 0xb}}, 0xe8) 1.129501733s ago: executing program 1 (id=1578): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@remote, r3}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}], 0x28}}], 0x1, 0x4000001) 1.022359907s ago: executing program 2 (id=1579): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="0300e500", @ANYRES16=r1, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r3, @ANYBLOB="1a00060008021100000100002800508005000e000000809c3fc92f0001ac0f00090001007ee5d52f490040000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x815}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x32, 0x1e, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x45}, @jmp={0x5, 0x1, 0x9, 0x1, 0x2, 0x40, 0xc37599f9dfce8c4c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xc, 0x0, 0xa, 0x4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x97d8, 0x41, &(0x7f0000000140)=""/65, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x3, 0x2, 0x4}, {0x1, 0x6, 0x9, 0x1}, {0x2, 0x3, 0x11, 0xc}, {0x2, 0x3, 0x40007}, {0x1, 0x2, 0x5, 0x6}, {0x5, 0x1, 0x1, 0x2c855e46a887dcdc}, {0x2, 0x1, 0x8, 0x4}], 0x10, 0x4, @void, @value}, 0x94) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x41, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000580)=0x3, 0x0) 1.021769195s ago: executing program 4 (id=1580): r0 = socket$inet(0x2, 0x5, 0xfffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="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", 0x36a}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="972adec5b073159505dadf6e0c5a317a257e3c3f9104ed149ff8e2f86f314496e73486feee77608bf138956a2cdecb6d871dacc3b47555b430717290fd4bd00f8d0f7d9f7f8bd8ed83b18bf8153a81112639985ec17c4bcb76eef9f3d5624af7cf3013ef84cb860f3b04eb679e", 0x6d}], 0x1}}], 0x4, 0xc0) 945.671259ms ago: executing program 4 (id=1581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40000880}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xfffffffc, 0x4, 0x4, 0xdc46}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r7) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'matchall\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044000}, 0xd0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000887ac678a5075f729687638463ecfb2425d25cac65da47afe2fa5648b30f7aa25699fcfc76aa6804349b81d80535dcb8acf809449ea867b42f6e8e312cdf36606411724195bb76359b4482d6a0c9aaf27d135796d1bf52064b286822d34ed02105a594edc186173cb59143c5c4d049126ff2845aec9d031396275dabc6e3531a307d386e0618a5cdf1b37eaa710502913142d458096a2198d87c4825424bef41fa715fbc1686de5d7330c07a0c92e1e66a8a315c00"/199, @ANYRES16=r9, @ANYBLOB="2501fcffffff001000000100000008000200020000000800010000000000"], 0x24}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r12, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r12, 0x29, 0x7, 0x8, 0x6, 0x40, @loopback, @local, 0x1, 0x700, 0xb37d, 0x9}}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 903.886758ms ago: executing program 1 (id=1582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 838.656323ms ago: executing program 2 (id=1583): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) close(r0) 752.152295ms ago: executing program 1 (id=1584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) listen(r0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x400, @empty, 0x5, 0x2}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x11, 0x800, 0x7fe) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000200)=@nl, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000400)=""/154, 0x9a}], 0x2}, 0x9}, {{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000740)=""/205, 0xcd}], 0x2, &(0x7f0000000840)=""/210, 0xd2}, 0xb74f}], 0x2, 0x10001, &(0x7f0000000380)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 607.85519ms ago: executing program 4 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) 522.411953ms ago: executing program 2 (id=1586): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x10c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x4}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}]}, 0x10c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r4, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) recvmsg$kcm(r2, &(0x7f0000001d00)={&(0x7f00000019c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/206, 0xce}, {&(0x7f0000001b40)=""/227, 0xe3}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000001c40)=""/90, 0x5a}], 0x4, &(0x7f0000001cc0)=""/27, 0x1b}, 0x10100) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) sendmsg$rds(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7df9a9fd, 0x4}, &(0x7f0000000380), &(0x7f00000003c0)=0x3, 0x2, 0x1, 0x34b3, 0x7fffffff, 0x22, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfff, 0x7}, &(0x7f0000000400)=0x8001, &(0x7f0000000500)=0x5, 0x7, 0x100000000, 0xffffffffffffff64, 0xbc, 0xb, 0xf}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0xe}, &(0x7f0000000540)=0x6, &(0x7f0000000580)=0x2, 0x4, 0x4, 0xb6, 0x1, 0x1, 0xffffffff}}], 0x120, 0x40880}, 0x20004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa4480, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x25, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r2, r5, 0x19, 0x30, 0x0, @void, @void, @void, @value=r1, r6}, 0x20) 419.260074ms ago: executing program 4 (id=1587): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 384.286097ms ago: executing program 2 (id=1588): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="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", 0x5c8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="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", 0x4c8}, {0x0}, {&(0x7f0000000100)="aa3d375025bc5e5b22402c6bc2b74d05557866776adbe43f0b87154fb9ccb967587c784994ee8b2b6822efc7f5d8b6498f0c7bd3df443b29475108699ab2dc772583b8de74fd4eff96bdeac758d85aac80928ff807a27624831c36caa3250460ce26adc9f1cc83e58d21abd5fafce3212e7d76b915a0b55b6d2e46ecff544879ec590032ae88298e2dbc1c6716283b544f9ef21650df51ef5fa6c60b5b2aa2a8726747286f2b7701ac1577449e25db02a1cda6eec796beb384a72c092d1fd027be88c6a1a46f851a59b07dee98295af8333e9b4365202037a043ca214a08bc1e650fb5f697", 0xe5}, {&(0x7f0000000200)="8b3a455e816043ca8c3c4a8fedba5ef20b75940e86e2719fe35743ff", 0x1c}], 0x4}}], 0x2, 0x4c090) (async) r2 = socket$unix(0x1, 0x5, 0x0) listen(r2, 0x0) shutdown(r0, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) 282.679696ms ago: executing program 1 (id=1589): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x2000000000000125, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x0, 0xe, 0x0, "4c7f89d7b58da711444d4e51243acbb8e5b56f786ed0763422017bc53244e791455bf9f1daaae58f2f9300325ab451eacf6313576b52e7d60e2b1a684fa4af8f27eb262f5318081b6fe02eda434376e5"}, 0xd8) 214.299259ms ago: executing program 2 (id=1590): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x9, 0x6, 0x2}}}, ["", ""]}, 0x30}}, 0x11) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) 204.054086ms ago: executing program 1 (id=1591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x44, 0x6, 0x530, 0x2c8, 0xa0, 0xa0, 0xa0, 0xa0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xab66, 0x81, @private=0xa010100, 0x4e20}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4, 0x6]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x5, @ipv4=@empty, 0x4e22}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x0, @ipv4=@multicast1, 0x2}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x6c, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) (async) listen(r1, 0x7) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010400000000000000000000000005000400000000000900820073797a300000000044b40780080012000000000005000500020000000501000000010000000003006879af3cf2c8102daafc6173683a6e65b50912227274000000b862c19d5c0936dd0004000000000000ea591f9f3acf5fa3a484627bceaf00000000d5d9c20f4104"], 0x58}}, 0x0) 34.571639ms ago: executing program 2 (id=1592): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x44}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x4, 0x3, {0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}}}, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe44, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 0s ago: executing program 1 (id=1593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) r4 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xe4860af7e112e4c0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) kernel console output (not intermixed with test programs): 241.433611][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.464877][ T49] bridge_slave_0: left allmulticast mode [ 241.476660][ T49] bridge_slave_0: left promiscuous mode [ 241.483390][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.618050][ T9969] netlink: 300 bytes leftover after parsing attributes in process `syz.2.933'. [ 241.806671][ T9978] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 241.919702][ T9980] netlink: 68 bytes leftover after parsing attributes in process `syz.2.936'. [ 242.067862][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.079046][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.088255][ T5155] Bluetooth: hci3: command tx timeout [ 242.096362][ T49] bond0 (unregistering): Released all slaves [ 242.128071][ T9810] team0: Port device team_slave_0 added [ 242.140648][ T9810] team0: Port device team_slave_1 added [ 242.385551][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.393365][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.422614][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.463450][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.470668][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.497966][ T5155] Bluetooth: hci2: command tx timeout [ 242.569506][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.763304][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 242.813094][ T49] hsr_slave_0: left promiscuous mode [ 242.843677][ T49] hsr_slave_1: left promiscuous mode [ 242.860022][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.867530][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.884304][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.897294][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.965693][ T1138] wlan0: Trigger new scan to find an IBSS to join [ 242.988174][ T49] veth1_macvtap: left promiscuous mode [ 242.997247][ T49] veth0_macvtap: left promiscuous mode [ 243.003156][ T49] veth1_vlan: left promiscuous mode [ 243.008784][ T49] veth0_vlan: left promiscuous mode [ 243.015680][T10008] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 243.536633][ T49] team0 (unregistering): Port device team_slave_1 removed [ 243.583859][ T49] team0 (unregistering): Port device team_slave_0 removed [ 244.013545][ T9810] hsr_slave_0: entered promiscuous mode [ 244.024636][ T9810] hsr_slave_1: entered promiscuous mode [ 244.123419][T10008] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 244.162999][ T5155] Bluetooth: hci3: command tx timeout [ 244.385349][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 244.430210][T10024] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 244.458187][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.560078][ T5155] Bluetooth: hci2: command tx timeout [ 244.560741][ T9783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.602651][ T9783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.626440][ T9783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.656702][ T9783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.174682][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.275376][ T9783] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.347180][ T9810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.402564][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.409782][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.445107][ T9810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.485816][ T9810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.524159][T10062] tipc: Enabling of bearer rejected, media not registered [ 245.560019][ T9810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.612900][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.620151][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.696329][T10066] netlink: 'syz.2.961': attribute type 5 has an invalid length. [ 245.854911][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.963'. [ 245.965887][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.003796][ T65] wlan0: Trigger new scan to find an IBSS to join [ 246.018726][ T9810] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.066481][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.073726][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.107103][T10095] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 246.129853][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.137138][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.240446][ T5155] Bluetooth: hci3: command tx timeout [ 246.281043][ T9810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.523962][ T9783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.662760][ T9783] veth0_vlan: entered promiscuous mode [ 246.714975][ T9783] veth1_vlan: entered promiscuous mode [ 246.816938][ T9783] veth0_macvtap: entered promiscuous mode [ 246.851531][ T9783] veth1_macvtap: entered promiscuous mode [ 246.883168][T10117] xt_policy: neither incoming nor outgoing policy selected [ 246.905347][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.928572][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.019093][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.057715][ T9783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.080541][ T9783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.089381][ T9783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.124471][ T9783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.314533][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.329808][ T9810] veth0_vlan: entered promiscuous mode [ 247.343892][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.433220][ T9810] veth1_vlan: entered promiscuous mode [ 247.487313][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.499596][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.569052][ T9810] veth0_macvtap: entered promiscuous mode [ 247.623156][ T9810] veth1_macvtap: entered promiscuous mode [ 247.739620][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.794002][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.851020][ T9810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.862380][ T9810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.875466][ T9810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.884652][ T9810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.013223][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.031257][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.079431][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.088412][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.241308][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.410989][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.541692][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.610949][T10163] sit0: left promiscuous mode [ 248.829393][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.042510][ T49] wlan0: Trigger new scan to find an IBSS to join [ 249.220700][ T1160] bridge_slave_1: left allmulticast mode [ 249.226440][ T1160] bridge_slave_1: left promiscuous mode [ 249.242298][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.283859][ T1160] bridge_slave_0: left allmulticast mode [ 249.295025][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.296403][ T1160] bridge_slave_0: left promiscuous mode [ 249.309221][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.309358][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.323427][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.332681][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.342404][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.732638][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.754757][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.771608][ T1160] bond0 (unregistering): Released all slaves [ 249.960702][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.045670][ T1160] hsr_slave_0: left promiscuous mode [ 250.052332][ T1160] hsr_slave_1: left promiscuous mode [ 250.058247][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.065761][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.074084][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.081749][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.101395][ T1160] veth1_macvtap: left promiscuous mode [ 250.107012][ T1160] veth0_macvtap: left promiscuous mode [ 250.112814][ T1160] veth1_vlan: left promiscuous mode [ 250.118134][ T1160] veth0_vlan: left promiscuous mode [ 250.934943][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 251.000596][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 251.038559][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.050841][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.067774][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.088553][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.096480][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.121006][T10209] netlink: 100 bytes leftover after parsing attributes in process `syz.4.993'. [ 251.444730][ T5155] Bluetooth: hci2: command tx timeout [ 251.658375][T10175] chnl_net:caif_netlink_parms(): no params data found [ 251.666574][T10219] netlink: 'syz.4.995': attribute type 13 has an invalid length. [ 251.701343][T10219] veth0_macvtap: left promiscuous mode [ 251.723040][T10219] macvtap0: entered allmulticast mode [ 251.743520][T10219] macvtap0: refused to change device tx_queue_len [ 252.098728][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.107732][T10175] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.121522][T10175] bridge_slave_0: entered allmulticast mode [ 252.130851][T10175] bridge_slave_0: entered promiscuous mode [ 252.148888][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.157680][T10175] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.165183][T10175] bridge_slave_1: entered allmulticast mode [ 252.176084][T10175] bridge_slave_1: entered promiscuous mode [ 252.328711][T10175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.346858][T10240] vlan2: entered promiscuous mode [ 252.352511][T10240] bridge0: entered promiscuous mode [ 252.371826][T10248] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 252.393487][T10248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1003'. [ 252.423129][T10175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.554037][ T1160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.650940][T10175] team0: Port device team_slave_0 added [ 252.702624][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1006'. [ 252.754940][ T1160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.777979][T10175] team0: Port device team_slave_1 added [ 252.785339][T10206] chnl_net:caif_netlink_parms(): no params data found [ 252.794388][T10261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.894641][T10261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.922511][ T1160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.940648][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 252.986919][T10175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.019634][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.059532][T10175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.122750][ T5155] Bluetooth: hci3: command tx timeout [ 253.132192][ T1160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.187100][T10175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.210474][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.247552][T10175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.295441][T10287] netlink: 'syz.4.1011': attribute type 33 has an invalid length. [ 253.304500][T10287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1011'. [ 253.423815][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.436436][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.444758][T10206] bridge_slave_0: entered allmulticast mode [ 253.458068][T10206] bridge_slave_0: entered promiscuous mode [ 253.480823][T10175] hsr_slave_0: entered promiscuous mode [ 253.487402][T10175] hsr_slave_1: entered promiscuous mode [ 253.497041][T10175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.505463][T10175] Cannot create hsr debugfs directory [ 253.520071][ T5155] Bluetooth: hci2: command tx timeout [ 253.528821][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.536272][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.544274][T10206] bridge_slave_1: entered allmulticast mode [ 253.553615][T10206] bridge_slave_1: entered promiscuous mode [ 253.700680][T10206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.764766][T10206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.772893][T10298] IPVS: set_ctl: invalid protocol: 57 172.20.20.32:20004 [ 253.818851][ T1160] bridge_slave_1: left allmulticast mode [ 253.825265][ T1160] bridge_slave_1: left promiscuous mode [ 253.831210][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.842924][ T1160] bridge_slave_0: left allmulticast mode [ 253.847015][T10299] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 253.848703][ T1160] bridge_slave_0: left promiscuous mode [ 253.850331][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.964390][T10303] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1015'. [ 254.033196][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 254.365507][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.377046][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.387479][ T1160] bond0 (unregistering): Released all slaves [ 254.450727][T10206] team0: Port device team_slave_0 added [ 254.545614][T10206] team0: Port device team_slave_1 added [ 254.575090][T10314] Bluetooth: MGMT ver 1.23 [ 254.677090][T10315] tipc: Enabled bearer , priority 0 [ 254.766222][T10322] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 254.774350][T10322] netlink: 'syz.4.1019': attribute type 3 has an invalid length. [ 254.784801][T10322] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1019'. [ 254.808021][T10312] syzkaller0: entered promiscuous mode [ 254.814349][T10312] syzkaller0: entered allmulticast mode [ 254.820979][T10312] tipc: Resetting bearer [ 254.873302][T10206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.886293][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.918395][T10206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.962370][T10327] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 255.083756][ T65] tipc: Resetting bearer [ 255.092650][T10312] tipc: Resetting bearer [ 255.200921][ T5155] Bluetooth: hci3: command tx timeout [ 255.600237][ T5155] Bluetooth: hci2: command tx timeout [ 255.857076][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.411093][T10312] tipc: Disabling bearer [ 256.424075][T10206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.431464][T10206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.458001][T10206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.533988][ T1160] hsr_slave_0: left promiscuous mode [ 256.547419][ T1160] hsr_slave_1: left promiscuous mode [ 256.554278][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.570164][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.586272][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.607571][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.640274][ T1160] veth1_macvtap: left promiscuous mode [ 256.649634][ T1160] veth0_macvtap: left promiscuous mode [ 256.656377][ T1160] veth1_vlan: left promiscuous mode [ 256.665471][ T1160] veth0_vlan: left promiscuous mode [ 257.015851][T10355] nbd: couldn't find a device at index 27392 [ 257.219683][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 257.265500][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 257.284333][ T5155] Bluetooth: hci3: command tx timeout [ 257.680279][ T5155] Bluetooth: hci2: command tx timeout [ 257.973969][T10206] hsr_slave_0: entered promiscuous mode [ 257.995010][T10206] hsr_slave_1: entered promiscuous mode [ 257.995861][T10364] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.177837][T10371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.472117][T10175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.512199][T10175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.534027][T10175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.570196][T10175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.802400][T10175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.887341][T10175] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.939671][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.946975][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.976948][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 259.012191][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.019429][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.063758][T10206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.091819][T10206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.119508][T10206] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.151801][T10206] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.189842][T10403] syzkaller0: entered promiscuous mode [ 259.196179][T10403] syzkaller0: entered allmulticast mode [ 259.204575][T10402] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 259.360522][ T5155] Bluetooth: hci3: command tx timeout [ 259.446410][T10206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.485004][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.506737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.514039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.554020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.561324][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.726005][T10175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.887649][T10175] veth0_vlan: entered promiscuous mode [ 259.916023][T10175] veth1_vlan: entered promiscuous mode [ 259.997187][T10175] veth0_macvtap: entered promiscuous mode [ 260.047748][T10175] veth1_macvtap: entered promiscuous mode [ 260.056387][T10433] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1044'. [ 260.099779][T10175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.135335][T10175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.172603][T10175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.182600][T10175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.196585][T10175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.214592][T10175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.302068][T10206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.393268][T10442] netlink: 'syz.1.1047': attribute type 3 has an invalid length. [ 260.496949][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.529489][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.552263][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 260.630405][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 260.633509][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 260.678825][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.701137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.714167][T10206] veth0_vlan: entered promiscuous mode [ 260.750172][T10206] veth1_vlan: entered promiscuous mode [ 260.891832][T10462] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 260.899640][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 260.974287][T10461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.007453][T10206] veth0_macvtap: entered promiscuous mode [ 261.024818][T10206] veth1_macvtap: entered promiscuous mode [ 261.075508][T10206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.111463][T10206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.129799][T10206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.146324][T10206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.156751][T10206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.170557][T10206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.322197][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.347518][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.399211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.415302][T10475] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 261.426471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.505741][ T3521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.815328][ T3521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.217974][ T3521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.466644][ T3521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.750218][ T3521] bridge_slave_1: left allmulticast mode [ 262.761890][ T3521] bridge_slave_1: left promiscuous mode [ 262.770310][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.835101][ T3521] bridge_slave_0: left allmulticast mode [ 262.852640][ T3521] bridge_slave_0: left promiscuous mode [ 262.869558][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.899069][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.914638][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.925528][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.950765][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.958596][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.370155][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.382430][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.393027][ T3521] bond0 (unregistering): Released all slaves [ 263.651062][T10500] chnl_net:caif_netlink_parms(): no params data found [ 263.695004][ T3521] hsr_slave_0: left promiscuous mode [ 263.703545][ T3521] hsr_slave_1: left promiscuous mode [ 263.709441][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.716963][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.728117][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.736126][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.758980][ T3521] veth1_macvtap: left promiscuous mode [ 263.765005][ T3521] veth0_macvtap: left promiscuous mode [ 263.770916][ T3521] veth1_vlan: left promiscuous mode [ 263.776264][ T3521] veth0_vlan: left promiscuous mode [ 264.207758][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 264.257816][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 264.402507][ T5842] Bluetooth: hci4: command tx timeout [ 264.756383][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.791000][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.811682][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.821664][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.829444][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.040866][ T5842] Bluetooth: hci2: command tx timeout [ 265.204552][T10534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.387770][T10544] Cannot find add_set index 0 as target [ 265.399001][T10545] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.451920][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.459225][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.474105][T10500] bridge_slave_0: entered allmulticast mode [ 265.482920][T10500] bridge_slave_0: entered promiscuous mode [ 265.528057][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.537065][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.544535][T10500] bridge_slave_1: entered allmulticast mode [ 265.553588][T10500] bridge_slave_1: entered promiscuous mode [ 265.636965][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.659631][T10547] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 265.682540][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.787696][T10500] team0: Port device team_slave_0 added [ 265.813074][T10500] team0: Port device team_slave_1 added [ 265.924741][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.937699][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.964523][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.002629][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.010119][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.036537][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.257583][T10574] xt_hashlimit: size too large, truncated to 1048576 [ 266.273566][ T3521] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.305055][T10574] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 266.345244][T10576] : renamed from vxcan1 (while UP) [ 266.367905][T10500] hsr_slave_0: entered promiscuous mode [ 266.375674][T10500] hsr_slave_1: entered promiscuous mode [ 266.382504][T10500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.391684][T10500] Cannot create hsr debugfs directory [ 266.427158][T10525] chnl_net:caif_netlink_parms(): no params data found [ 266.512373][ T3521] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.652265][ T3521] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.720737][T10586] xt_policy: output policy not valid in PREROUTING and INPUT [ 266.852234][ T3521] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.880555][ T5842] Bluetooth: hci3: command tx timeout [ 267.056587][T10604] openvswitch: netlink: Message has 4 unknown bytes. [ 267.120360][ T5842] Bluetooth: hci2: command tx timeout [ 267.305078][T10525] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.322931][T10525] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.360962][T10525] bridge_slave_0: entered allmulticast mode [ 267.401634][T10525] bridge_slave_0: entered promiscuous mode [ 267.782671][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1095'. [ 267.802297][T10525] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.809578][T10525] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.822995][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1095'. [ 267.845526][T10525] bridge_slave_1: entered allmulticast mode [ 267.853680][T10525] bridge_slave_1: entered promiscuous mode [ 268.054225][T10525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.135214][T10525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.195446][ T3521] bridge_slave_1: left allmulticast mode [ 268.214704][ T3521] bridge_slave_1: left promiscuous mode [ 268.220823][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.257393][ T3521] bridge_slave_0: left allmulticast mode [ 268.273727][ T3521] bridge_slave_0: left promiscuous mode [ 268.279596][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.768705][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.780192][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.790802][ T3521] bond0 (unregistering): Released all slaves [ 268.854442][T10525] team0: Port device team_slave_0 added [ 268.895034][T10525] team0: Port device team_slave_1 added [ 268.961983][ T5842] Bluetooth: hci3: command tx timeout [ 269.152079][T10525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.169389][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.200816][ T5842] Bluetooth: hci2: command tx timeout [ 269.202773][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1107'. [ 269.237793][T10525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.301572][T10525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.330424][T10525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.390514][T10525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.597724][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 269.773224][ T3521] hsr_slave_0: left promiscuous mode [ 269.788356][ T3521] hsr_slave_1: left promiscuous mode [ 269.801164][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.809015][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.828211][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.836054][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.877621][ T3521] veth1_macvtap: left promiscuous mode [ 269.890055][ T3521] veth0_macvtap: left promiscuous mode [ 269.900298][ T3521] veth1_vlan: left promiscuous mode [ 269.905783][ T3521] veth0_vlan: left promiscuous mode [ 269.928187][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 270.495923][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 270.536794][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 271.040282][ T5842] Bluetooth: hci3: command tx timeout [ 271.137909][T10525] hsr_slave_0: entered promiscuous mode [ 271.148077][T10525] hsr_slave_1: entered promiscuous mode [ 271.188895][T10707] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.290590][ T5842] Bluetooth: hci2: command tx timeout [ 271.340034][T10715] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.367578][T10707] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.579827][T10707] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.621814][T10500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.660871][T10500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.698224][T10500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.743284][T10707] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.842321][T10500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.186984][T10707] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.256949][T10707] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.293208][T10707] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.310377][T10707] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.325861][T10751] 8021q: VLANs not supported on ip_vti0 [ 272.445552][T10500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.486466][T10500] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.538383][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.545621][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.597374][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.604660][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.684897][T10525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.731133][T10525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.771300][T10525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.797073][T10525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.053342][T10784] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1132'. [ 273.088122][T10784] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1132'. [ 273.106786][T10784] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1132'. [ 273.120625][ T5842] Bluetooth: hci3: command tx timeout [ 273.198896][T10525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.304161][T10525] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.354095][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.361462][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.451891][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.459251][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.512811][T10799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.526587][T10799] bond0: (slave bond3): Enslaving as an active interface with an up link [ 273.732218][T10500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.769138][T10525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.944530][T10500] veth0_vlan: entered promiscuous mode [ 274.020916][T10500] veth1_vlan: entered promiscuous mode [ 274.148742][T10833] ipt_REJECT: ECHOREPLY no longer supported. [ 274.206308][T10500] veth0_macvtap: entered promiscuous mode [ 274.251950][T10500] veth1_macvtap: entered promiscuous mode [ 274.308072][T10500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.350260][T10837] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 274.380984][T10500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.407053][T10500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.424767][T10500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.437756][T10500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.447718][T10500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.546211][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.649673][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.671161][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.715499][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.728475][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.748881][T10525] veth0_vlan: entered promiscuous mode [ 274.782561][T10525] veth1_vlan: entered promiscuous mode [ 274.929378][T10525] veth0_macvtap: entered promiscuous mode [ 274.948485][T10525] veth1_macvtap: entered promiscuous mode [ 274.988636][T10525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.008883][T10525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.034061][T10525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.045114][T10525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.054356][T10525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.063357][T10525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.177200][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.196063][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.205904][ T5842] Bluetooth: hci3: command tx timeout [ 275.243143][T10858] x_tables: duplicate underflow at hook 1 [ 275.266901][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.275856][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.473926][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.579385][T10865] tipc: Enabled bearer , priority 0 [ 275.625805][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.714649][T10865] syzkaller0: entered promiscuous mode [ 275.721201][T10865] syzkaller0: entered allmulticast mode [ 275.729420][T10865] tipc: Resetting bearer [ 275.757556][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.775539][T10863] tipc: Resetting bearer [ 276.692603][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.708967][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.729572][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.750889][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.768824][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.452790][T10863] tipc: Disabling bearer [ 277.516168][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.684963][T10882] openvswitch: netlink: Flow key attribute not present in set flow. [ 277.713170][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1156'. [ 277.732625][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 277.919291][T10891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1157'. [ 278.108601][ T49] bridge_slave_1: left allmulticast mode [ 278.123957][ T49] bridge_slave_1: left promiscuous mode [ 278.132106][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.145552][ T49] bridge_slave_0: left allmulticast mode [ 278.153378][ T49] bridge_slave_0: left promiscuous mode [ 278.159318][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.187086][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.200435][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.213625][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.223323][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.234273][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.629512][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.641738][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.656082][ T49] bond0 (unregistering): Released all slaves [ 278.745347][T10874] chnl_net:caif_netlink_parms(): no params data found [ 278.880745][ T5842] Bluetooth: hci2: command tx timeout [ 279.148904][T10918] bridge2: entered promiscuous mode [ 279.155958][T10918] bridge2: entered allmulticast mode [ 279.176503][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 279.271343][ T49] hsr_slave_0: left promiscuous mode [ 279.291571][ T49] hsr_slave_1: left promiscuous mode [ 279.300785][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.308879][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.318344][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.328421][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.354628][ T49] veth1_macvtap: left promiscuous mode [ 279.360764][ T49] veth0_macvtap: left promiscuous mode [ 279.366509][ T49] veth1_vlan: left promiscuous mode [ 279.372419][ T49] veth0_vlan: left promiscuous mode [ 279.905891][ T49] team0 (unregistering): Port device team_slave_1 removed [ 279.957427][ T49] team0 (unregistering): Port device team_slave_0 removed [ 280.323080][ T5842] Bluetooth: hci3: command tx timeout [ 280.450890][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.464507][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.472324][T10874] bridge_slave_0: entered allmulticast mode [ 280.480705][T10874] bridge_slave_0: entered promiscuous mode [ 280.520136][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.540968][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.560491][T10874] bridge_slave_1: entered allmulticast mode [ 280.574070][T10874] bridge_slave_1: entered promiscuous mode [ 280.584771][T10944] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1171'. [ 280.605011][T10945] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.637131][T10948] netlink: 'syz.4.1172': attribute type 5 has an invalid length. [ 280.694614][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.707741][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.826664][T10874] team0: Port device team_slave_0 added [ 280.860303][T10953] gretap0: mtu less than device minimum [ 280.871818][T10874] team0: Port device team_slave_1 added [ 280.961027][ T5842] Bluetooth: hci2: command tx timeout [ 281.043529][T10968] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1176'. [ 281.118890][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.146523][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.176723][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.190675][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.197897][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.227987][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.395085][T10895] chnl_net:caif_netlink_parms(): no params data found [ 281.418607][T10874] hsr_slave_0: entered promiscuous mode [ 281.427288][T10874] hsr_slave_1: entered promiscuous mode [ 281.435162][T10874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.444945][T10874] Cannot create hsr debugfs directory [ 281.705459][T10995] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1183'. [ 281.839198][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.886234][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.894523][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.910182][T10895] bridge_slave_0: entered allmulticast mode [ 281.918386][T10895] bridge_slave_0: entered promiscuous mode [ 281.966781][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.982616][T10895] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.990115][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.997360][T10895] bridge_slave_1: entered allmulticast mode [ 282.008565][T10895] bridge_slave_1: entered promiscuous mode [ 282.056843][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.080057][ T7517] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.109728][T10895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.156727][T10895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.215725][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.392194][T10895] team0: Port device team_slave_0 added [ 282.400251][ T5842] Bluetooth: hci3: command tx timeout [ 282.408685][T10895] team0: Port device team_slave_1 added [ 282.441995][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 282.659846][T10895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.697037][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.727627][T10895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.743958][T10895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.786880][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.876011][T10895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.966745][T11038] netlink: 'syz.4.1192': attribute type 3 has an invalid length. [ 282.974868][T11038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.005976][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.031091][ T49] bridge_slave_1: left allmulticast mode [ 283.040345][ T5842] Bluetooth: hci2: command tx timeout [ 283.058512][ T49] bridge_slave_1: left promiscuous mode [ 283.094686][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.125250][ T49] bridge_slave_0: left allmulticast mode [ 283.131136][ T49] bridge_slave_0: left promiscuous mode [ 283.137000][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.170810][T11044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1195'. [ 283.180038][T11045] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 283.180063][T11045] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 283.180079][T11045] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1196'. [ 283.223218][T11044] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 283.239707][T11044] netlink: 'syz.1.1195': attribute type 3 has an invalid length. [ 283.257284][T11044] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1195'. [ 283.288103][T11044] NCSI netlink: No device for ifindex 0 [ 283.338358][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 283.627725][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.639072][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.649389][ T49] bond0 (unregistering): Released all slaves [ 283.688099][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.803655][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.852367][T11024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 283.878349][T11024] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 283.906076][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 283.953611][T10895] hsr_slave_0: entered promiscuous mode [ 283.974465][T10895] hsr_slave_1: entered promiscuous mode [ 283.996562][T10895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.010986][T10895] Cannot create hsr debugfs directory [ 284.033337][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.190028][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.220001][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.230315][T11063] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 284.255133][T11063] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 284.286070][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.317577][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.346179][T11024] virt_wifi0 speed is unknown, defaulting to 1000 [ 284.364408][T10874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.374929][T11067] netlink: 'syz.1.1201': attribute type 83 has an invalid length. [ 284.407704][T10874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.416549][T11067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.477026][ T49] hsr_slave_0: left promiscuous mode [ 284.490934][ T5842] Bluetooth: hci3: command tx timeout [ 284.546853][ T49] hsr_slave_1: left promiscuous mode [ 284.553183][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.563962][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.575431][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.589233][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.616204][ T49] veth1_macvtap: left promiscuous mode [ 284.621871][ T49] veth0_macvtap: left promiscuous mode [ 284.627569][ T49] veth1_vlan: left promiscuous mode [ 284.633353][ T49] veth0_vlan: left promiscuous mode [ 285.109640][ T49] team0 (unregistering): Port device team_slave_1 removed [ 285.120694][ T5842] Bluetooth: hci2: command tx timeout [ 285.165642][ T49] team0 (unregistering): Port device team_slave_0 removed [ 285.577163][T10874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.587569][T10874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.736905][T11085] __nla_validate_parse: 1 callbacks suppressed [ 285.736924][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 285.762350][T11091] netlink: 'syz.4.1208': attribute type 8 has an invalid length. [ 285.786144][T11089] netlink: 'syz.1.1207': attribute type 6 has an invalid length. [ 285.956100][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 286.000535][T11101] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1210'. [ 286.028911][T11096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 286.044425][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1210'. [ 286.064546][T11102] x_tables: duplicate underflow at hook 3 [ 286.255189][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.307698][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.359195][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.366485][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.412384][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.419585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.560255][ T5842] Bluetooth: hci3: command tx timeout [ 286.705266][T10895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.731057][T10895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.753455][T10895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.791071][T10895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.821646][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 286.870269][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1218'. [ 287.030660][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.074937][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.124898][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.132205][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.158014][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.165323][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.203178][T11149] netlink: 'syz.1.1219': attribute type 21 has an invalid length. [ 287.248408][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.287043][T11149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1219'. [ 287.438811][T11155] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1222'. [ 287.474440][T10874] veth0_vlan: entered promiscuous mode [ 287.522559][T10874] veth1_vlan: entered promiscuous mode [ 287.606207][T10874] veth0_macvtap: entered promiscuous mode [ 287.643768][T10874] veth1_macvtap: entered promiscuous mode [ 287.659654][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 287.735943][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.793925][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.867070][T10874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.915485][T10874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.943851][T10874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.972656][T10874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.062657][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.312607][T10895] veth0_vlan: entered promiscuous mode [ 288.391039][T10895] veth1_vlan: entered promiscuous mode [ 288.415388][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.431698][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.548080][T11197] virt_wifi0 speed is unknown, defaulting to 1000 [ 288.588976][T11201] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.625759][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.638742][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.671662][T10895] veth0_macvtap: entered promiscuous mode [ 288.695310][T10895] veth1_macvtap: entered promiscuous mode [ 288.725721][T10895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.753811][T10895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.019005][T10895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.029104][T10895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.045421][T10895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.054408][T10895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.475805][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.499169][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.639341][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.666496][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.677483][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.817830][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.915249][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.999236][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.109835][ T12] bridge_slave_1: left allmulticast mode [ 290.116116][ T12] bridge_slave_1: left promiscuous mode [ 290.122072][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.137910][ T12] bridge_slave_0: left allmulticast mode [ 290.143691][ T12] bridge_slave_0: left promiscuous mode [ 290.149510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.799744][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.819558][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.830894][ T12] bond0 (unregistering): Released all slaves [ 290.842833][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.854587][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.870438][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.879784][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.888047][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.975554][T11249] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.201496][ T12] hsr_slave_0: left promiscuous mode [ 291.207760][ T12] hsr_slave_1: left promiscuous mode [ 291.214257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.221879][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.231571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.239059][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.278343][ T12] veth1_macvtap: left promiscuous mode [ 291.287885][ T12] veth0_macvtap: left promiscuous mode [ 291.295607][ T12] veth1_vlan: left promiscuous mode [ 291.302002][ T12] veth0_vlan: left promiscuous mode [ 291.762813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.805216][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.985759][T11258] __nla_validate_parse: 11 callbacks suppressed [ 291.985781][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1247'. [ 292.018074][T11262] netlink: 'syz.2.1248': attribute type 7 has an invalid length. [ 292.028838][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 292.281876][T11269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1249'. [ 292.451901][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.475346][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.496218][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.510649][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.519210][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.614429][T11262] : entered promiscuous mode [ 292.646552][T11249] chnl_net:caif_netlink_parms(): no params data found [ 292.759298][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 292.777008][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 292.810008][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 292.832084][T11274] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1250'. [ 292.850585][T11274] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1250'. [ 292.887421][T11271] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.920433][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1252'. [ 292.961400][ T5842] Bluetooth: hci2: command tx timeout [ 292.976174][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 293.146676][T11249] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.162649][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.198997][T11249] bridge_slave_0: entered allmulticast mode [ 293.225912][T11249] bridge_slave_0: entered promiscuous mode [ 293.259277][T11298] sctp: [Deprecated]: syz.2.1256 (pid 11298) Use of int in maxseg socket option. [ 293.259277][T11298] Use struct sctp_assoc_value instead [ 293.318821][T11249] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.328684][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.336154][T11249] bridge_slave_1: entered allmulticast mode [ 293.345724][T11249] bridge_slave_1: entered promiscuous mode [ 293.446659][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.505202][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.646994][T11249] team0: Port device team_slave_0 added [ 293.667020][T11249] team0: Port device team_slave_1 added [ 293.752097][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.805176][T11271] chnl_net:caif_netlink_parms(): no params data found [ 293.825066][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.833115][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.862080][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.891753][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.922568][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.929787][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.957830][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.059532][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.210374][T11325] xt_hashlimit: overflow, rate too high: 0 [ 294.283864][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.367957][T11249] hsr_slave_0: entered promiscuous mode [ 294.383510][T11249] hsr_slave_1: entered promiscuous mode [ 294.399241][T11271] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.420167][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.427470][T11271] bridge_slave_0: entered allmulticast mode [ 294.449543][T11271] bridge_slave_0: entered promiscuous mode [ 294.459385][T11271] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.467329][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.474702][T11271] bridge_slave_1: entered allmulticast mode [ 294.482506][T11271] bridge_slave_1: entered promiscuous mode [ 294.560747][ T5842] Bluetooth: hci3: command tx timeout [ 294.622425][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.635666][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.805339][ T12] bridge_slave_1: left allmulticast mode [ 294.814695][ T12] bridge_slave_1: left promiscuous mode [ 294.823460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.838494][ T12] bridge_slave_0: left allmulticast mode [ 294.847940][ T12] bridge_slave_0: left promiscuous mode [ 294.856520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.040858][ T5842] Bluetooth: hci2: command tx timeout [ 295.321407][T11356] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 295.354228][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.365683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.377211][ T12] bond0 (unregistering): Released all slaves [ 295.405692][T11271] team0: Port device team_slave_0 added [ 295.419837][T11271] team0: Port device team_slave_1 added [ 295.439554][T11345] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 295.699523][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.722954][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.779734][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.839321][T11364] netlink: 'syz.1.1275': attribute type 24 has an invalid length. [ 295.867832][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.890218][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.924033][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.954189][T11364] netlink: 'syz.1.1275': attribute type 39 has an invalid length. [ 296.041864][T11366] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 296.065333][T11271] hsr_slave_0: entered promiscuous mode [ 296.079097][T11271] hsr_slave_1: entered promiscuous mode [ 296.089583][T11271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.104983][T11271] Cannot create hsr debugfs directory [ 296.117501][ T12] hsr_slave_0: left promiscuous mode [ 296.124529][ T12] hsr_slave_1: left promiscuous mode [ 296.138181][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.145918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.191811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.209223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.255008][ T12] veth1_macvtap: left promiscuous mode [ 296.261305][ T12] veth0_macvtap: left promiscuous mode [ 296.267836][ T12] veth1_vlan: left promiscuous mode [ 296.277134][ T12] veth0_vlan: left promiscuous mode [ 296.287696][T11374] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 296.650225][ T5842] Bluetooth: hci3: command tx timeout [ 296.769149][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.826835][ T12] team0 (unregistering): Port device team_slave_0 removed [ 297.130938][ T5842] Bluetooth: hci2: command tx timeout [ 297.444301][T11370] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.778589][T11390] __nla_validate_parse: 6 callbacks suppressed [ 297.778610][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 297.857348][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 297.867947][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 297.871644][T11394] 8021q: VLANs not supported on gre0 [ 297.913700][T11249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.965375][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 298.005763][T11249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.033158][T11249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.057723][T11249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.170385][T11410] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 298.414049][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.440426][T11420] Bluetooth: MGMT ver 1.23 [ 298.476512][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.530726][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.537971][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.560353][T11425] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 298.589058][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.596377][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.620752][T11425] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.693173][T11271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.720601][ T5155] Bluetooth: hci3: command tx timeout [ 298.738409][T11271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.803371][T11271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.836471][T11271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.117947][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.167407][T11271] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.197525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.204824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.212502][ T5155] Bluetooth: hci2: command tx timeout [ 299.298416][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.305697][ T7517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.414681][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.605029][T11465] netlink: 'syz.1.1300': attribute type 4 has an invalid length. [ 299.606776][T11463] netlink: 'syz.1.1300': attribute type 4 has an invalid length. [ 299.630364][T11249] veth0_vlan: entered promiscuous mode [ 299.655021][T11466] sctp: [Deprecated]: syz.4.1301 (pid 11466) Use of int in max_burst socket option. [ 299.655021][T11466] Use struct sctp_assoc_value instead [ 299.683428][T11249] veth1_vlan: entered promiscuous mode [ 299.774001][T11249] veth0_macvtap: entered promiscuous mode [ 299.800741][T11249] veth1_macvtap: entered promiscuous mode [ 299.882981][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.918200][T11475] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 299.923383][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.930814][T11476] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 299.959050][T11475] netlink: 'syz.1.1303': attribute type 33 has an invalid length. [ 299.974032][T11476] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.984035][T11249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.004314][T11249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.011109][T11476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1304'. [ 300.018576][T11249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.036170][T11249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.157340][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.173948][T11481] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1306'. [ 300.222054][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 300.265954][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.284101][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.326880][T11485] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1308'. [ 300.367267][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.375527][T11271] veth0_vlan: entered promiscuous mode [ 300.401681][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.445884][T11271] veth1_vlan: entered promiscuous mode [ 300.555671][T11494] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 300.596002][T11271] veth0_macvtap: entered promiscuous mode [ 300.634562][T11271] veth1_macvtap: entered promiscuous mode [ 300.667819][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.726551][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.761449][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1313'. [ 300.800355][ T5155] Bluetooth: hci3: command 0x0419 tx timeout [ 300.807874][T11506] netlink: set zone limit has 8 unknown bytes [ 300.833728][T11271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.843184][T11271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.855882][T11271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.866547][T11271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.936934][T11511] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 300.950814][T11511] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 301.006250][T11511] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 301.088304][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.105312][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.154230][T11522] xt_TCPMSS: Only works on TCP SYN packets [ 301.218948][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.231888][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.477644][ T3450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.709609][ T3450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.122768][ T3450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.174182][T11527] veth7: entered promiscuous mode [ 302.179298][T11527] veth7: entered allmulticast mode [ 302.194872][T11529] netlink: 'syz.1.1320': attribute type 10 has an invalid length. [ 302.273592][ T3450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.420898][ T3450] bridge_slave_1: left allmulticast mode [ 302.426636][ T3450] bridge_slave_1: left promiscuous mode [ 302.428906][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.437751][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.442224][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.457827][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.466084][ T3450] bridge_slave_0: left allmulticast mode [ 302.472336][ T3450] bridge_slave_0: left promiscuous mode [ 302.477085][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.478165][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.487916][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.808231][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.819499][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.832107][ T3450] bond0 (unregistering): Released all slaves [ 302.885276][T11530] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.110307][ T3450] hsr_slave_0: left promiscuous mode [ 303.116622][ T3450] hsr_slave_1: left promiscuous mode [ 303.123624][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.133168][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.141513][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.149090][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.172265][ T3450] veth1_macvtap: left promiscuous mode [ 303.177861][ T3450] veth0_macvtap: left promiscuous mode [ 303.183686][ T3450] veth1_vlan: left promiscuous mode [ 303.189051][ T3450] veth0_vlan: left promiscuous mode [ 303.933763][T11555] nftables ruleset with unbound set [ 303.941755][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 303.950548][T11555] x_tables: duplicate underflow at hook 2 [ 304.094174][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 304.158279][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.169611][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.179140][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.189014][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.198830][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.573111][ T5842] Bluetooth: hci2: command tx timeout [ 304.683063][T11530] chnl_net:caif_netlink_parms(): no params data found [ 304.915587][T11561] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.922215][T11573] netlink: 'syz.4.1331': attribute type 2 has an invalid length. [ 304.922239][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 304.925156][T11573] netlink: 'syz.4.1331': attribute type 12 has an invalid length. [ 305.019511][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 305.030365][T11569] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 305.103139][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.140116][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.158995][T11530] bridge_slave_0: entered allmulticast mode [ 305.182966][T11530] bridge_slave_0: entered promiscuous mode [ 305.252162][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.259408][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.363414][T11530] bridge_slave_1: entered allmulticast mode [ 305.381865][T11530] bridge_slave_1: entered promiscuous mode [ 305.555105][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.606973][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 305.631789][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 305.644044][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 305.644367][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.858373][ T3450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.898359][T11530] team0: Port device team_slave_0 added [ 305.918538][T11530] team0: Port device team_slave_1 added [ 305.929566][T11616] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 305.986502][ T3450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.039780][T11616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.074167][T11616] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 306.083929][ T1160] bond0: (slave batadv0): interface is now down [ 306.130336][ T1160] bond0: (slave batadv0): interface is now down [ 306.158823][ T3521] bond0: (slave batadv0): interface is now down [ 306.176821][ T3450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.190335][ T1160] bond0: (slave batadv0): interface is now down [ 306.222285][ T1138] bond0: (slave batadv0): interface is now down [ 306.231285][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.238373][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.264650][ T5842] Bluetooth: hci3: command tx timeout [ 306.274523][ T49] bond0: (slave batadv0): interface is now down [ 306.279697][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.301327][ T49] bond0: (slave batadv0): interface is now down [ 306.311508][ T49] bond0: now running without any active interface! [ 306.343945][ T3450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.376454][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.394611][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.422157][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.519701][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1347'. [ 306.615061][T11530] hsr_slave_0: entered promiscuous mode [ 306.623155][T11530] hsr_slave_1: entered promiscuous mode [ 306.631737][T11561] chnl_net:caif_netlink_parms(): no params data found [ 306.650177][ T5842] Bluetooth: hci2: command tx timeout [ 306.721303][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1348'. [ 306.878567][T11634] syzkaller0: entered allmulticast mode [ 306.895943][T11634] syzkaller0 (unregistering): left allmulticast mode [ 306.984379][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 307.143151][T11641] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 307.152619][ T3450] bridge_slave_1: left allmulticast mode [ 307.158330][ T3450] bridge_slave_1: left promiscuous mode [ 307.173503][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.197802][ T3450] bridge_slave_0: left allmulticast mode [ 307.207183][ T3450] bridge_slave_0: left promiscuous mode [ 307.215733][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.342682][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 307.802969][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.814826][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.826806][ T3450] bond0 (unregistering): Released all slaves [ 307.995348][T11676] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 308.035379][T11676] bond4: entered promiscuous mode [ 308.041359][T11676] bond4: entered allmulticast mode [ 308.048121][T11676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.072007][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.079300][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.089603][T11561] bridge_slave_0: entered allmulticast mode [ 308.101867][T11561] bridge_slave_0: entered promiscuous mode [ 308.201919][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.215806][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.224286][T11561] bridge_slave_1: entered allmulticast mode [ 308.254602][T11561] bridge_slave_1: entered promiscuous mode [ 308.321100][ T5842] Bluetooth: hci3: command tx timeout [ 308.487871][T11695] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 308.524814][ T3450] hsr_slave_0: left promiscuous mode [ 308.532003][ T3450] hsr_slave_1: left promiscuous mode [ 308.539151][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.549224][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.558039][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.565900][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.609282][ T3450] veth1_macvtap: left promiscuous mode [ 308.619529][ T3450] veth0_macvtap: left promiscuous mode [ 308.627123][ T3450] veth1_vlan: left promiscuous mode [ 308.639833][ T3450] veth0_vlan: left promiscuous mode [ 308.648010][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 308.720105][ T5842] Bluetooth: hci2: command tx timeout [ 309.143745][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 309.186451][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 309.625048][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.758258][T11703] sctp: [Deprecated]: syz.4.1367 (pid 11703) Use of int in maxseg socket option. [ 309.758258][T11703] Use struct sctp_assoc_value instead [ 309.813710][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.954572][T11714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 309.972176][T11561] team0: Port device team_slave_0 added [ 309.993932][T11561] team0: Port device team_slave_1 added [ 310.289095][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1374'. [ 310.317609][T11739] nbd: must specify a size in bytes for the device [ 310.376006][ T12] bond0: (slave bond3): link status definitely down, disabling slave [ 310.400313][ T5842] Bluetooth: hci3: command tx timeout [ 310.406492][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.413655][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.441455][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.459743][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.500337][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.548848][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.600463][T11747] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 310.622551][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 310.752087][T11561] hsr_slave_0: entered promiscuous mode [ 310.771899][T11561] hsr_slave_1: entered promiscuous mode [ 310.778428][T11561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.787146][T11561] Cannot create hsr debugfs directory [ 310.803252][ T5842] Bluetooth: hci2: command tx timeout [ 310.926826][T11530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.008795][T11530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.027818][T11766] openvswitch: netlink: Message has 199 unknown bytes. [ 311.037867][T11766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.057876][T11530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.071708][T11530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.327391][T11785] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 311.369111][T11785] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1383'. [ 311.414083][T11785] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 311.448839][T11785] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 311.526536][T11798] netlink: 'syz.4.1386': attribute type 2 has an invalid length. [ 311.550054][T11798] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1386'. [ 311.585441][T11798] nbd: must specify a device to reconfigure [ 311.717748][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.858298][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.944004][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.951235][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.970687][T11817] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 312.031223][T11817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1393'. [ 312.044641][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 312.056929][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.064211][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.229130][T11561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.264536][T11561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.297494][T11561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.325741][T11561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.480907][ T5842] Bluetooth: hci3: command tx timeout [ 312.581845][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.732251][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.767043][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.774304][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.849710][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.856986][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.864552][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1400'. [ 312.879571][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1401'. [ 312.934907][T11888] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 313.033965][T11876] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.044466][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.440302][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.528218][T11903] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1403'. [ 313.593278][T11530] veth0_vlan: entered promiscuous mode [ 313.656090][T11530] veth1_vlan: entered promiscuous mode [ 313.930499][T11530] veth0_macvtap: entered promiscuous mode [ 314.040919][T11530] veth1_macvtap: entered promiscuous mode [ 314.113127][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.204924][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.263288][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.304494][T11530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.321900][T11530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.333423][T11530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.343076][T11530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.383777][T11926] lo speed is unknown, defaulting to 1000 [ 314.416586][T11926] lo speed is unknown, defaulting to 1000 [ 314.457932][T11926] lo speed is unknown, defaulting to 1000 [ 314.497866][T11561] veth0_vlan: entered promiscuous mode [ 314.584944][T11561] veth1_vlan: entered promiscuous mode [ 314.673111][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.695818][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.769717][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.788049][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.809066][T11561] veth0_macvtap: entered promiscuous mode [ 314.842129][T11561] veth1_macvtap: entered promiscuous mode [ 314.959228][T11926] infiniband syz0: set down [ 314.964500][T11926] infiniband syz0: added lo [ 314.978334][ T5904] lo speed is unknown, defaulting to 1000 [ 315.010699][T11938] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 315.029488][T11926] RDS/IB: syz0: added [ 315.034644][T11926] smc: adding ib device syz0 with port count 1 [ 315.044624][T11926] smc: ib device syz0 port 1 has pnetid [ 315.100052][T11926] lo speed is unknown, defaulting to 1000 [ 315.107059][ T5904] lo speed is unknown, defaulting to 1000 [ 315.116946][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.206921][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.239707][T11561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.290213][T11561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.299010][T11561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.334799][T11561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.485089][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.595501][T11926] lo speed is unknown, defaulting to 1000 [ 315.673692][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.817191][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.843833][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.897420][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.913341][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.956458][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.984108][T11926] lo speed is unknown, defaulting to 1000 [ 316.061079][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.287583][ T1138] bridge_slave_1: left allmulticast mode [ 316.295032][ T1138] bridge_slave_1: left promiscuous mode [ 316.301120][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.311239][ T1138] bridge_slave_0: left allmulticast mode [ 316.317016][ T1138] bridge_slave_0: left promiscuous mode [ 316.323416][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.907526][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.919266][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.931193][ T1138] bond0 (unregistering): Released all slaves [ 316.953384][T11926] lo speed is unknown, defaulting to 1000 [ 316.961896][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.975587][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.984057][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.993258][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.001351][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.051478][T11946] virt_wifi0 speed is unknown, defaulting to 1000 [ 317.317868][T11926] lo speed is unknown, defaulting to 1000 [ 317.504483][T11946] lo speed is unknown, defaulting to 1000 [ 317.938726][ T1138] hsr_slave_0: left promiscuous mode [ 317.945031][ T1138] hsr_slave_1: left promiscuous mode [ 317.951594][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.959034][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.967269][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.975123][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.997788][ T1138] veth1_macvtap: left promiscuous mode [ 318.004632][ T1138] veth0_macvtap: left promiscuous mode [ 318.010677][ T1138] veth1_vlan: left promiscuous mode [ 318.016370][ T1138] veth0_vlan: left promiscuous mode [ 318.662189][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 318.721616][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 318.755031][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.764338][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.773911][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.789624][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.797515][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.040533][ T5842] Bluetooth: hci2: command tx timeout [ 319.314100][T11964] virt_wifi0 speed is unknown, defaulting to 1000 [ 319.352128][T11964] lo speed is unknown, defaulting to 1000 [ 319.398150][T11946] chnl_net:caif_netlink_parms(): no params data found [ 319.474449][T11973] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 319.531187][T11978] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 319.726435][T11984] netlink: 'syz.1.1424': attribute type 10 has an invalid length. [ 319.957543][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.977549][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.990720][T11946] bridge_slave_0: entered allmulticast mode [ 319.998906][T11946] bridge_slave_0: entered promiscuous mode [ 320.019212][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.044430][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.053751][T11946] bridge_slave_1: entered allmulticast mode [ 320.073661][T11946] bridge_slave_1: entered promiscuous mode [ 320.139047][T12004] __nla_validate_parse: 3 callbacks suppressed [ 320.139067][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'. [ 320.205086][T12002] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 320.232191][T12002] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1428'. [ 320.243187][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.282548][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.323633][T12002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 320.380117][T12011] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1430'. [ 320.422781][T11946] team0: Port device team_slave_0 added [ 320.433882][T11946] team0: Port device team_slave_1 added [ 320.520811][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.535588][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.569048][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.591101][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.598112][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.625967][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.648176][T12013] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 3261 [ 320.659361][T12022] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 3261 [ 320.767245][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.848133][T11946] hsr_slave_0: entered promiscuous mode [ 320.878222][T11946] hsr_slave_1: entered promiscuous mode [ 320.880245][ T5842] Bluetooth: hci3: command tx timeout [ 320.945274][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.120761][ T5842] Bluetooth: hci2: command tx timeout [ 321.203462][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.314785][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.334701][T11964] chnl_net:caif_netlink_parms(): no params data found [ 321.405067][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 321.430882][T12045] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1439'. [ 321.782934][T12064] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 321.862980][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.875384][T11964] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.883561][T11964] bridge_slave_0: entered allmulticast mode [ 321.902186][T11964] bridge_slave_0: entered promiscuous mode [ 321.926073][T12066] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1443'. [ 321.962402][T11964] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.977916][T11964] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.987899][T11964] bridge_slave_1: entered allmulticast mode [ 321.999751][T11964] bridge_slave_1: entered promiscuous mode [ 322.114956][T11964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.147585][T11964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.214598][T12080] sctp: [Deprecated]: syz.2.1448 (pid 12080) Use of int in max_burst socket option. [ 322.214598][T12080] Use struct sctp_assoc_value instead [ 322.272928][T11964] team0: Port device team_slave_0 added [ 322.281422][ T1138] bridge_slave_1: left allmulticast mode [ 322.288030][ T1138] bridge_slave_1: left promiscuous mode [ 322.294361][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.312726][ T1138] bridge_slave_0: left allmulticast mode [ 322.319201][ T1138] bridge_slave_0: left promiscuous mode [ 322.325454][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.960672][ T5842] Bluetooth: hci3: command tx timeout [ 323.025785][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.037355][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.048395][ T1138] bond0 (unregistering): Released all slaves [ 323.067376][T11964] team0: Port device team_slave_1 added [ 323.133985][T12095] pimreg: entered allmulticast mode [ 323.200701][ T5842] Bluetooth: hci2: command tx timeout [ 323.267168][T11964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.278387][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.308539][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 323.340878][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.370388][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 323.448224][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 323.476016][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1454'. [ 323.493996][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.505863][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.535450][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.898178][T11964] hsr_slave_0: entered promiscuous mode [ 323.926664][T11964] hsr_slave_1: entered promiscuous mode [ 323.939120][T11964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.973198][T11964] Cannot create hsr debugfs directory [ 323.981668][T11946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.107512][T11946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.165456][T11946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.297962][T12131] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.355549][T11946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.420584][ T1138] hsr_slave_0: left promiscuous mode [ 324.437327][ T1138] hsr_slave_1: left promiscuous mode [ 324.452478][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.460233][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.471555][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.479059][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.510659][ T1138] veth1_macvtap: left promiscuous mode [ 324.516286][ T1138] veth0_macvtap: left promiscuous mode [ 324.522794][ T1138] veth1_vlan: left promiscuous mode [ 324.528184][ T1138] veth0_vlan: left promiscuous mode [ 325.040300][ T5842] Bluetooth: hci3: command tx timeout [ 325.103719][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 325.149465][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 325.282021][ T5842] Bluetooth: hci2: command tx timeout [ 325.981371][T12167] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 325.995939][T12167] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 326.031407][T12167] netlink: 'syz.1.1471': attribute type 4 has an invalid length. [ 326.060700][T12167] __nla_validate_parse: 4 callbacks suppressed [ 326.060724][T12167] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1471'. [ 326.163280][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.271477][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.355143][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.362439][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.397527][T12181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1475'. [ 326.418466][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.425737][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.564920][T12184] macvlan0: entered promiscuous mode [ 326.572347][T12184] macvlan0: entered allmulticast mode [ 326.635726][T11964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.673224][T11964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.705186][T11964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.753914][T11964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.879753][T12194] netlink: 'syz.4.1479': attribute type 8 has an invalid length. [ 326.894059][T12194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1479'. [ 327.048644][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.122044][ T5842] Bluetooth: hci3: command tx timeout [ 327.133585][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 327.283150][T12213] team0 (unregistering): Port device team_slave_0 removed [ 327.297309][T12213] team0 (unregistering): Port device team_slave_1 removed [ 327.339038][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.395502][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.402763][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.419333][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.426709][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.448848][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.667117][T12221] netlink: 'syz.2.1485': attribute type 1 has an invalid length. [ 327.675496][T11946] veth0_vlan: entered promiscuous mode [ 327.762039][T12221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.807000][T11946] veth1_vlan: entered promiscuous mode [ 327.985728][T11946] veth0_macvtap: entered promiscuous mode [ 328.022877][T12237] netlink: 'syz.4.1488': attribute type 3 has an invalid length. [ 328.046837][T12237] netlink: 'syz.4.1488': attribute type 3 has an invalid length. [ 328.078691][T11946] veth1_macvtap: entered promiscuous mode [ 328.148562][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.219093][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.272393][T11946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.285004][T11946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.295826][T11946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.309263][T11946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.359084][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.469379][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 328.486148][T12258] netlink: 'syz.2.1494': attribute type 7 has an invalid length. [ 328.497724][T12258] netlink: 'syz.2.1494': attribute type 8 has an invalid length. [ 328.505898][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 328.541183][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.542664][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 328.585317][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.601621][T11964] veth0_vlan: entered promiscuous mode [ 328.677319][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.682735][T11964] veth1_vlan: entered promiscuous mode [ 328.699651][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.840595][T11964] veth0_macvtap: entered promiscuous mode [ 328.944706][T11964] veth1_macvtap: entered promiscuous mode [ 328.992555][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.015477][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.036790][T11964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.058776][T11964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.068855][T11964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.079637][T11964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.313737][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.350826][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.390975][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 329.397983][ T3521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.525473][T12281] block nbd1: not configured, cannot reconfigure [ 329.603803][ T3521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.635672][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.654374][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.729439][ T3521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.820730][ T3521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.031378][ T3521] bridge_slave_1: left allmulticast mode [ 330.037092][ T3521] bridge_slave_1: left promiscuous mode [ 330.043344][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.053844][ T3521] bridge_slave_0: left allmulticast mode [ 330.059540][ T3521] bridge_slave_0: left promiscuous mode [ 330.065918][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.906430][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.923178][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.934368][ T3521] bond0 (unregistering): Released all slaves [ 331.013520][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.027589][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.041151][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.064588][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.077911][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.138941][T12309] virt_wifi0 speed is unknown, defaulting to 1000 [ 331.147791][T12309] lo speed is unknown, defaulting to 1000 [ 331.561654][ T3521] hsr_slave_0: left promiscuous mode [ 331.567661][ T3521] hsr_slave_1: left promiscuous mode [ 331.578857][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.587035][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.595331][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.603172][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.622753][ T3521] veth1_macvtap: left promiscuous mode [ 331.628343][ T3521] veth0_macvtap: left promiscuous mode [ 331.634112][ T3521] veth1_vlan: left promiscuous mode [ 331.640311][ T3521] veth0_vlan: left promiscuous mode [ 332.103753][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 332.213708][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 332.230599][T12317] netlink: 'syz.4.1507': attribute type 1 has an invalid length. [ 332.238414][T12317] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1507'. [ 332.264586][T12317] openvswitch: netlink: IP tunnel dst address not specified [ 332.679545][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.699437][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.709284][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.718629][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.729391][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.121812][ T5155] Bluetooth: hci2: command tx timeout [ 333.354512][T12336] syzkaller1: entered promiscuous mode [ 333.366400][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 333.380994][T12336] syzkaller1: entered allmulticast mode [ 333.411827][T12328] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.433700][T12328] lo speed is unknown, defaulting to 1000 [ 333.962351][T12309] chnl_net:caif_netlink_parms(): no params data found [ 334.059194][T12371] IPVS: Unknown mcast interface: pimreg0 [ 334.144793][T12373] : entered promiscuous mode [ 334.342007][T12383] xt_bpf: check failed: parse error [ 334.685607][ T3521] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.743110][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.759243][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.789732][T12309] bridge_slave_0: entered allmulticast mode [ 334.801105][ T5155] Bluetooth: hci3: command tx timeout [ 334.811512][T12309] bridge_slave_0: entered promiscuous mode [ 334.878195][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 334.901418][ T3521] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.925689][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 334.957086][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.978414][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.992454][T12309] bridge_slave_1: entered allmulticast mode [ 335.011351][T12309] bridge_slave_1: entered promiscuous mode [ 335.106189][ T3521] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.155996][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'. [ 335.200414][ T5155] Bluetooth: hci2: command tx timeout [ 335.338180][ T3521] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.348322][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.367534][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.377505][T12426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.388987][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.541066][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1535'. [ 335.753888][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 335.753888][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 335.783988][T12309] team0: Port device team_slave_0 added [ 335.811874][T12450] netlink: 'syz.1.1538': attribute type 29 has an invalid length. [ 335.851005][T12453] netlink: 'syz.1.1538': attribute type 29 has an invalid length. [ 335.863872][T12309] team0: Port device team_slave_1 added [ 335.914128][T12455] x_tables: unsorted underflow at hook 1 [ 335.942287][T12450] netlink: 'syz.1.1538': attribute type 29 has an invalid length. [ 335.997051][T12328] chnl_net:caif_netlink_parms(): no params data found [ 336.020993][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 336.301196][T12457] vlan1 (unregistering): left allmulticast mode [ 336.307777][T12457] veth0_vlan (unregistering): left allmulticast mode [ 336.435148][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.442687][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.478751][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.536635][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.544244][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.598904][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.697945][ T3521] bridge_slave_1: left allmulticast mode [ 336.706968][ T3521] bridge_slave_1: left promiscuous mode [ 336.715937][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.729175][ T3521] bridge_slave_0: left allmulticast mode [ 336.736250][ T3521] bridge_slave_0: left promiscuous mode [ 336.742334][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.891155][ T5155] Bluetooth: hci3: command tx timeout [ 337.124144][T12491] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1549'. [ 337.280893][ T5155] Bluetooth: hci2: command tx timeout [ 337.478754][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.490378][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.502882][ T3521] bond0 (unregistering): Released all slaves [ 337.751631][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 337.889231][T12517] pimreg: entered allmulticast mode [ 337.923500][T12309] hsr_slave_0: entered promiscuous mode [ 337.939577][T12309] hsr_slave_1: entered promiscuous mode [ 338.044990][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.058928][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.084753][T12328] bridge_slave_0: entered allmulticast mode [ 338.099054][T12328] bridge_slave_0: entered promiscuous mode [ 338.151101][T12328] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.158574][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.176904][T12328] bridge_slave_1: entered allmulticast mode [ 338.202307][T12328] bridge_slave_1: entered promiscuous mode [ 338.553239][T12328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.567487][T12328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.929569][ T3521] hsr_slave_0: left promiscuous mode [ 338.970057][ T5155] Bluetooth: hci3: command tx timeout [ 339.257797][ T3521] hsr_slave_1: left promiscuous mode [ 339.280723][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.288298][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.370505][ T5155] Bluetooth: hci2: command tx timeout [ 339.706512][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.741192][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.828496][ T3521] veth1_macvtap: left promiscuous mode [ 339.834561][ T3521] veth0_macvtap: left promiscuous mode [ 339.840597][ T3521] veth1_vlan: left promiscuous mode [ 339.846169][ T3521] veth0_vlan: left promiscuous mode [ 340.000255][ T49] wlan1: Trigger new scan to find an IBSS to join [ 340.389396][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 340.438369][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 340.886972][T12328] team0: Port device team_slave_0 added [ 340.940771][T12328] team0: Port device team_slave_1 added [ 341.039041][T12579] netlink: 'syz.2.1567': attribute type 13 has an invalid length. [ 341.040717][ T5155] Bluetooth: hci3: command tx timeout [ 341.091244][T12581] netlink: 'syz.1.1568': attribute type 1 has an invalid length. [ 341.099157][T12581] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1568'. [ 341.198947][T12328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.204769][T12585] xt_CT: No such helper "pptp" [ 341.226882][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.308690][T12328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.326942][T12328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.334327][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.367200][T12328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.433282][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'. [ 341.640266][T12328] hsr_slave_0: entered promiscuous mode [ 341.647110][T12328] hsr_slave_1: entered promiscuous mode [ 341.657936][T12328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.688456][T12328] Cannot create hsr debugfs directory [ 341.992388][T12618] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1578'. [ 342.273749][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 342.354046][T12309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.452206][T12309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.510574][T12309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.572185][T12309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.715991][T12645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.902471][T12658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.904983][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1591'. [ 342.974608][ T3521] wlan1: Trigger new scan to find an IBSS to join [ 342.978337][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.010149][ T3521] ------------[ cut here ]------------ [ 343.022100][ T3521] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 343.042140][ T3521] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 343.061589][ T3521] CPU: 0 UID: 0 PID: 3521 Comm: kworker/u8:8 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 343.061624][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.061638][ T3521] Workqueue: events_unbound cfg80211_wiphy_work [ 343.061695][ T3521] Call Trace: [ 343.061704][ T3521] [ 343.061721][ T3521] dump_stack_lvl+0x189/0x250 [ 343.061761][ T3521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.061796][ T3521] ? __pfx__printk+0x10/0x10 [ 343.061836][ T3521] ubsan_epilogue+0xa/0x40 [ 343.061860][ T3521] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 343.061903][ T3521] ieee80211_request_ibss_scan+0x600/0x8b0 [ 343.061952][ T3521] ieee80211_ibss_work+0xde7/0x1060 [ 343.061994][ T3521] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 343.062039][ T3521] ? ieee80211_iface_work+0xf39/0xfe0 [ 343.062075][ T3521] ? rcu_is_watching+0x15/0xb0 [ 343.062115][ T3521] cfg80211_wiphy_work+0x2dc/0x460 [ 343.062140][ T3521] ? process_scheduled_works+0x9ef/0x17b0 [ 343.062175][ T3521] process_scheduled_works+0xae1/0x17b0 [ 343.062241][ T3521] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.062295][ T3521] worker_thread+0x8a0/0xda0 [ 343.062332][ T3521] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.062375][ T3521] ? __kthread_parkme+0x7b/0x200 [ 343.062408][ T3521] kthread+0x70e/0x8a0 [ 343.062437][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 343.062469][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.062496][ T3521] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.062524][ T3521] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.062554][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.062579][ T3521] ret_from_fork+0x3fc/0x770 [ 343.062614][ T3521] ? __pfx_ret_from_fork+0x10/0x10 [ 343.062653][ T3521] ? __switch_to_asm+0x39/0x70 [ 343.062673][ T3521] ? __switch_to_asm+0x33/0x70 [ 343.062693][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.062727][ T3521] ret_from_fork_asm+0x1a/0x30 [ 343.062770][ T3521] [ 343.062778][ T3521] ---[ end trace ]--- [ 343.115868][T12666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 343.219316][ T3521] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 343.219344][ T3521] CPU: 0 UID: 0 PID: 3521 Comm: kworker/u8:8 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 343.219376][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.219394][ T3521] Workqueue: events_unbound cfg80211_wiphy_work [ 343.219430][ T3521] Call Trace: [ 343.219444][ T3521] [ 343.219457][ T3521] dump_stack_lvl+0x99/0x250 [ 343.219502][ T3521] ? __asan_memcpy+0x40/0x70 [ 343.219539][ T3521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.219579][ T3521] ? __pfx__printk+0x10/0x10 [ 343.219625][ T3521] panic+0x2db/0x790 [ 343.219671][ T3521] ? __pfx_panic+0x10/0x10 [ 343.219706][ T3521] ? _printk+0xcf/0x120 [ 343.219751][ T3521] ? __pfx__printk+0x10/0x10 [ 343.219791][ T3521] check_panic_on_warn+0x89/0xb0 [ 343.219830][ T3521] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 343.219880][ T3521] ieee80211_request_ibss_scan+0x600/0x8b0 [ 343.219940][ T3521] ieee80211_ibss_work+0xde7/0x1060 [ 343.219989][ T3521] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 343.220040][ T3521] ? ieee80211_iface_work+0xf39/0xfe0 [ 343.220082][ T3521] ? rcu_is_watching+0x15/0xb0 [ 343.220130][ T3521] cfg80211_wiphy_work+0x2dc/0x460 [ 343.220158][ T3521] ? process_scheduled_works+0x9ef/0x17b0 [ 343.220201][ T3521] process_scheduled_works+0xae1/0x17b0 [ 343.220280][ T3521] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.220343][ T3521] worker_thread+0x8a0/0xda0 [ 343.220387][ T3521] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.220434][ T3521] ? __kthread_parkme+0x7b/0x200 [ 343.220472][ T3521] kthread+0x70e/0x8a0 [ 343.220506][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 343.220545][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.220577][ T3521] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.220610][ T3521] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.220643][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.220669][ T3521] ret_from_fork+0x3fc/0x770 [ 343.220703][ T3521] ? __pfx_ret_from_fork+0x10/0x10 [ 343.220749][ T3521] ? __switch_to_asm+0x39/0x70 [ 343.220772][ T3521] ? __switch_to_asm+0x33/0x70 [ 343.220793][ T3521] ? __pfx_kthread+0x10/0x10 [ 343.220820][ T3521] ret_from_fork_asm+0x1a/0x30 [ 343.220865][ T3521] [ 343.221324][ T3521] Kernel Offset: disabled