last executing test programs: 2m17.020800099s ago: executing program 1 (id=8): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r0, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000080) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000001bc0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025f0001010400690904000703020600080724060000392505240000ff0dcd0c000000000007010900000d2413050cb3cfc68741bf4b1a152412fbffa317a88b045e4f01a607c0ffcb7e392a"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 2m13.845831534s ago: executing program 1 (id=17): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcdcffff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m13.058202684s ago: executing program 1 (id=19): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='afs_flock_op\x00', r2}, 0x18) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) 2m12.20589772s ago: executing program 1 (id=23): unshare(0x20000400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) 2m11.56416935s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0xa00}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m10.583023423s ago: executing program 1 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 1m55.264738879s ago: executing program 32 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 1m10.579146796s ago: executing program 2 (id=234): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x498e, 0x4) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000036c0)={0xa, 0x4e01, 0x800, @remote}, 0x1c, 0x0}}], 0x1, 0x24004040) 1m9.886054064s ago: executing program 2 (id=239): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d70843d0d3a7d851fa", 0x9}], 0x1}, 0x4000040) 1m7.669133582s ago: executing program 2 (id=245): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x2e, 0x4, 0x0, 0x3a, 0xb8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0xf, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x34, 0x8b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1m6.182660354s ago: executing program 2 (id=249): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r0, &(0x7f0000007a40)={0x2, 0x4e24, @loopback}, 0x10) 1m4.89858473s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m3.447063778s ago: executing program 2 (id=258): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) 47.969832593s ago: executing program 33 (id=258): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) 14.066160132s ago: executing program 5 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x3fb}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 12.940776606s ago: executing program 5 (id=409): unshare(0x400) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1618}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x3e, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20051}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES16=r5, @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) epoll_wait(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}], 0x4, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) 11.335157045s ago: executing program 5 (id=412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0c15f579c77", 0x6}], 0x1, &(0x7f0000001040)=ANY=[], 0xc8}}], 0x1, 0x24044c41) 10.535304432s ago: executing program 5 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) ioctl$FIONCLEX(r0, 0x5450) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b4"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, 0x0, 0x24008004) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000cb0a00fe1001000018120000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.188287306s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x48}}, 0x0) 8.603144696s ago: executing program 3 (id=420): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0xfe}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 8.368971137s ago: executing program 4 (id=421): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @empty, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="8400", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="1b22", 0x2, 0x800, 0x0, 0x0) 7.071635237s ago: executing program 0 (id=423): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x73, r1}) 7.053129499s ago: executing program 4 (id=424): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) 6.703529674s ago: executing program 3 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 6.031429391s ago: executing program 0 (id=426): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendfile(r1, r1, 0x0, 0x8000) 5.501213953s ago: executing program 3 (id=427): unshare(0x2c060400) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000900)) 5.210844069s ago: executing program 0 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x200}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) 5.000231619s ago: executing program 5 (id=429): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)=0x647, 0x4) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4.775578425s ago: executing program 3 (id=430): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x3, 0x20000000000001bb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 3.151392484s ago: executing program 0 (id=431): socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) 2.881034736s ago: executing program 6 (id=312): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x8, 0x5, 0x1, 0x4}, @alu={0x4, 0x0, 0xc, 0x3, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xa3, &(0x7f0000000400)=""/163, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x1ff, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x3, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, r4, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0x2, 0x7}, {0x5, 0x2, 0xe, 0x7}, {0x2, 0x1, 0x9, 0x6}], 0x10, 0x8e}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r6}, 0x38) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000700)={'macvlan0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000180)='v', 0x0}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 2.863910633s ago: executing program 3 (id=432): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x100b0) 2.190315374s ago: executing program 4 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x2}, 0x6}, 0x1c) 1.821497809s ago: executing program 0 (id=434): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe83, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe75, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe61, 0x0, @wg=@data={0x4, 0x7407, 0xfffdfffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000600)=""/4086, 0xe56}, {0x0}], 0x2) 1.36741266s ago: executing program 3 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) read$alg(r7, &(0x7f00000003c0)=""/85, 0x55) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x10001) write(r5, 0x0, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x44, 0x30, 0x9e54f29ff072a939, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@dsss={0x3, 0x1, 0xac}, @random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x40800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000000) 970.051914ms ago: executing program 4 (id=436): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x5, 0x5, {{0x22, 0x4, 0x2, 0xc, 0x88, 0x67, 0x0, 0xe6, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0x8, [{@rand_addr=0x64010100, 0x10001}, {@broadcast, 0xffff8000}, {@multicast2, 0x3}, {@empty, 0x77dd}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x88, 0x1, 0x7, [{@broadcast, 0x3}, {@broadcast, 0x3e}, {@rand_addr=0x64010102, 0x7f}]}, @timestamp={0x44, 0x20, 0x3b, 0x0, 0x3, [0x6, 0xff, 0x4, 0x91c, 0x767, 0xffffffff, 0x3ff]}, @timestamp={0x44, 0x4, 0xb9, 0x0, 0x9}, @timestamp={0x44, 0xc, 0xaa, 0x0, 0x2, [0x90f, 0x0]}]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ec0)=@assoc_value={r4, 0x3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000002c0)={0x0, 0x3ff, 0x100000000}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x1f}) epoll_pwait(r6, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000f00)=ANY=[@ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf25100000", @ANYRES32=0x0, @ANYBLOB="8db78a091724ff92d1fac292b6cb138103000000000000008237a2872c5bfe535d35687f4b5ce54f7b68648f8f87554106e42ac2d9e9c43b1242928adc2361a57e0872c221a08d822c7e527716737fe5aba8ca689713f523390c8d56e9862987c688fe82c545d18d72f34d08ec201ef851ec53482dac0e69fba9d38cae8540fdc0df03ad40213ca23d43e30a9871128566c8adb7aa08ebc6c9898f74486b681b0739bc29f093b692a7e3e0d7476930586fdf20c5341fac9b00e7082f7a0e7c1ca876b2a1433b91b3c6fc7dd5826349aa38e41cfbf4f3"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r10, 0x1, 0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 774.566792ms ago: executing program 6 (id=437): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0xf9e, 0x0, @gue={{0x2, 0x0, 0x3, 0x6}, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xfdffff54}], 0x1, 0x22, 0x0) 717.919628ms ago: executing program 5 (id=438): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 154.005943ms ago: executing program 4 (id=439): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 135.520103ms ago: executing program 0 (id=440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 0s ago: executing program 6 (id=441): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r1, 0x0, 0xa0028000}, 0x86) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) preadv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 172.958656][ T5798] cgroup: Unknown subsys name 'net' [ 173.096826][ T5798] cgroup: Unknown subsys name 'cpuset' [ 173.112096][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 178.831314][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 182.870842][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.879917][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.888650][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.899819][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.909704][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.958257][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.968804][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.978318][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.999038][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.006682][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.016594][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.025980][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.035837][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.045065][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.053779][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.066852][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.082414][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.084711][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.102231][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.121334][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.130012][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.143349][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.154666][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.182156][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.201596][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.303896][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 185.018163][ T5816] Bluetooth: hci0: command tx timeout [ 185.079028][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 185.179379][ T5816] Bluetooth: hci1: command tx timeout [ 185.184975][ T5816] Bluetooth: hci4: command tx timeout [ 185.258211][ T5816] Bluetooth: hci3: command tx timeout [ 185.263812][ T5816] Bluetooth: hci2: command tx timeout [ 185.443266][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 185.464328][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 185.488565][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.496065][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.503862][ T5814] bridge_slave_0: entered allmulticast mode [ 185.513316][ T5814] bridge_slave_0: entered promiscuous mode [ 185.572596][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.580433][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.588214][ T5814] bridge_slave_1: entered allmulticast mode [ 185.597556][ T5814] bridge_slave_1: entered promiscuous mode [ 185.664474][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 185.978052][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.061849][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.460365][ T5814] team0: Port device team_slave_0 added [ 186.470315][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.478158][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.485749][ T5820] bridge_slave_0: entered allmulticast mode [ 186.495342][ T5820] bridge_slave_0: entered promiscuous mode [ 186.660487][ T5814] team0: Port device team_slave_1 added [ 186.670980][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.679578][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.687319][ T5819] bridge_slave_0: entered allmulticast mode [ 186.696648][ T5819] bridge_slave_0: entered promiscuous mode [ 186.710391][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.718080][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.725644][ T5820] bridge_slave_1: entered allmulticast mode [ 186.737226][ T5820] bridge_slave_1: entered promiscuous mode [ 186.860202][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.867836][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.875287][ T5819] bridge_slave_1: entered allmulticast mode [ 186.883562][ T5819] bridge_slave_1: entered promiscuous mode [ 186.966951][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.974246][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.000447][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.108976][ T5816] Bluetooth: hci0: command tx timeout [ 187.224311][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.232029][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.239729][ T5818] bridge_slave_0: entered allmulticast mode [ 187.249344][ T5818] bridge_slave_0: entered promiscuous mode [ 187.262063][ T5816] Bluetooth: hci4: command tx timeout [ 187.262382][ T5110] Bluetooth: hci1: command tx timeout [ 187.311534][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.319167][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.345735][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.348203][ T5110] Bluetooth: hci2: command tx timeout [ 187.358772][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.362044][ T5110] Bluetooth: hci3: command tx timeout [ 187.369339][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.381958][ T5823] bridge_slave_0: entered allmulticast mode [ 187.391322][ T5823] bridge_slave_0: entered promiscuous mode [ 187.436019][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.443732][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.451511][ T5818] bridge_slave_1: entered allmulticast mode [ 187.460698][ T5818] bridge_slave_1: entered promiscuous mode [ 187.481428][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.510513][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.518145][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.525595][ T5823] bridge_slave_1: entered allmulticast mode [ 187.534393][ T5823] bridge_slave_1: entered promiscuous mode [ 187.554716][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.646340][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.707063][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.728928][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.747713][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.942269][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.959143][ T5819] team0: Port device team_slave_0 added [ 187.976016][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.026513][ T5820] team0: Port device team_slave_0 added [ 188.104302][ T5819] team0: Port device team_slave_1 added [ 188.184486][ T5820] team0: Port device team_slave_1 added [ 188.269995][ T5818] team0: Port device team_slave_0 added [ 188.293649][ T5814] hsr_slave_0: entered promiscuous mode [ 188.303836][ T5814] hsr_slave_1: entered promiscuous mode [ 188.389965][ T5823] team0: Port device team_slave_0 added [ 188.404589][ T5818] team0: Port device team_slave_1 added [ 188.422606][ T5823] team0: Port device team_slave_1 added [ 188.499595][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.506636][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.533007][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.581319][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.588721][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.615074][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.729442][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.736563][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.762923][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.808053][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.815169][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.841482][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.874621][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.881889][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.908229][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.922796][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.930063][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.956217][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.972848][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.980181][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.006437][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.092288][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.099771][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.126691][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.177549][ T5816] Bluetooth: hci0: command tx timeout [ 189.305579][ T5823] hsr_slave_0: entered promiscuous mode [ 189.316077][ T5823] hsr_slave_1: entered promiscuous mode [ 189.324905][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 189.330920][ T5823] Cannot create hsr debugfs directory [ 189.338913][ T5816] Bluetooth: hci4: command tx timeout [ 189.344471][ T5816] Bluetooth: hci1: command tx timeout [ 189.419977][ T5816] Bluetooth: hci3: command tx timeout [ 189.425610][ T5110] Bluetooth: hci2: command tx timeout [ 189.597318][ T5819] hsr_slave_0: entered promiscuous mode [ 189.605822][ T5819] hsr_slave_1: entered promiscuous mode [ 189.614544][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 189.620476][ T5819] Cannot create hsr debugfs directory [ 189.641165][ T5820] hsr_slave_0: entered promiscuous mode [ 189.651056][ T5820] hsr_slave_1: entered promiscuous mode [ 189.659654][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 189.665517][ T5820] Cannot create hsr debugfs directory [ 189.837384][ T5818] hsr_slave_0: entered promiscuous mode [ 189.847401][ T5818] hsr_slave_1: entered promiscuous mode [ 189.856015][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 189.862093][ T5818] Cannot create hsr debugfs directory [ 191.108000][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.183521][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.247956][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.257456][ T5110] Bluetooth: hci0: command tx timeout [ 191.323087][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.447910][ T5110] Bluetooth: hci1: command tx timeout [ 191.453503][ T5110] Bluetooth: hci4: command tx timeout [ 191.460842][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.512832][ T5816] Bluetooth: hci2: command tx timeout [ 191.518721][ T5110] Bluetooth: hci3: command tx timeout [ 191.540523][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.568409][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.616000][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.648920][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.733657][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.808846][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.877711][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.018878][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.065274][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.099835][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.128596][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.205874][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.297742][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.381013][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.412093][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.875409][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.093170][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.215445][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.254504][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.262095][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.358999][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.366484][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.434169][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.503885][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.539422][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.608102][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.615574][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.679881][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.742037][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.749625][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.841040][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.862135][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.869728][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.942616][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.993803][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.069363][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.076846][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.093248][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.100838][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.122281][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.129769][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.264964][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.381284][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.388972][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.549767][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.557332][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.046353][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.288175][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.807508][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.886388][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.936084][ T5819] veth0_vlan: entered promiscuous mode [ 196.952964][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.103128][ T5819] veth1_vlan: entered promiscuous mode [ 197.446074][ T5823] veth0_vlan: entered promiscuous mode [ 197.600670][ T5820] veth0_vlan: entered promiscuous mode [ 197.637873][ T5819] veth0_macvtap: entered promiscuous mode [ 197.659673][ T5818] veth0_vlan: entered promiscuous mode [ 197.710077][ T5823] veth1_vlan: entered promiscuous mode [ 197.734466][ T5820] veth1_vlan: entered promiscuous mode [ 197.751872][ T5819] veth1_macvtap: entered promiscuous mode [ 197.798602][ T5818] veth1_vlan: entered promiscuous mode [ 197.991672][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.159674][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.264281][ T5820] veth0_macvtap: entered promiscuous mode [ 198.300426][ T5823] veth0_macvtap: entered promiscuous mode [ 198.319797][ T3578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.354057][ T5823] veth1_macvtap: entered promiscuous mode [ 198.387903][ T3578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.405560][ T5100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.416308][ T5818] veth0_macvtap: entered promiscuous mode [ 198.482587][ T5820] veth1_macvtap: entered promiscuous mode [ 198.502791][ T5814] veth0_vlan: entered promiscuous mode [ 198.527710][ T5100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.578537][ T5818] veth1_macvtap: entered promiscuous mode [ 198.606360][ T5814] veth1_vlan: entered promiscuous mode [ 198.708128][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.730929][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.838554][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.875840][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.927625][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.981244][ T5814] veth0_macvtap: entered promiscuous mode [ 199.006936][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.038302][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.085754][ T5814] veth1_macvtap: entered promiscuous mode [ 199.139117][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.195981][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.248414][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.290307][ T4014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.378236][ T4014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.437215][ T4014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.450276][ T1135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.468097][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.506615][ T1135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.542098][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.571795][ T1135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.600544][ T2899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.670790][ T2899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.732251][ T2899] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.790157][ T4364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.812937][ T5100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.878882][ T4364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.086926][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.095016][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.314638][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.323285][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.782783][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.791322][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.917307][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.925314][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.008432][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.033187][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.041334][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.184713][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.194498][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.218003][ T4014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.225979][ T4014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.313447][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.321804][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.344312][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.352492][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.641963][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.650243][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.258610][ T6013] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 207.295585][ T6013] netlink: 524 bytes leftover after parsing attributes in process `syz.2.3'. [ 207.657966][ T5956] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.678134][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 207.823258][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 207.857663][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 207.921515][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.948273][ T5881] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 207.957782][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.965972][ T5881] usb 1-1: Product: syz [ 207.970579][ T5881] usb 1-1: Manufacturer: syz [ 207.975349][ T5881] usb 1-1: SerialNumber: syz [ 208.007302][ T5956] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 208.015707][ T5956] usb 4-1: config 13 has no interface number 0 [ 208.022345][ T5956] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 208.032859][ T5956] usb 4-1: config 13 interface 50 has no altsetting 0 [ 208.062980][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.086301][ T5881] usb 1-1: config 0 descriptor?? [ 208.105983][ T5956] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 208.115597][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.124534][ T5956] usb 4-1: Product: syz [ 208.129033][ T5956] usb 4-1: Manufacturer: syz [ 208.133811][ T5956] usb 4-1: SerialNumber: syz [ 208.163740][ T5881] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 208.174147][ T5881] usb 1-1: Detected FT232H [ 208.275082][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 208.299099][ T5909] usb 3-1: config 3 has an invalid interface number: 117 but max is 2 [ 208.308098][ T5909] usb 3-1: config 3 has an invalid interface number: 139 but max is 2 [ 208.316594][ T5909] usb 3-1: config 3 has an invalid interface number: 248 but max is 2 [ 208.325441][ T5909] usb 3-1: config 3 has no interface number 0 [ 208.331993][ T5909] usb 3-1: config 3 has no interface number 1 [ 208.338550][ T5909] usb 3-1: config 3 has no interface number 2 [ 208.349010][ T5909] usb 3-1: config 3 interface 139 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 208.361857][ T5909] usb 3-1: config 3 interface 248 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 208.373746][ T5909] usb 3-1: config 3 interface 117 has no altsetting 0 [ 208.381001][ T5909] usb 3-1: config 3 interface 139 has no altsetting 0 [ 208.388079][ T5909] usb 3-1: config 3 interface 248 has no altsetting 0 [ 208.438351][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 208.440278][ T6016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 208.535997][ T5909] usb 3-1: New USB device found, idVendor=2040, idProduct=d8d4, bcdDevice=2a.67 [ 208.550779][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.560847][ T5909] usb 3-1: Product: ⠊ [ 208.565387][ T5909] usb 3-1: Manufacturer: 嚼ᣎᚏ吐餼齾묭暴폡ⲍ✪򿇎乂鰍흐䨋궣쭪ه㉁剘痝਺檯엟斵㹇ю뿬ᶜ冲쭜ࠢ菀ˏ囹酏 [ 208.580063][ T5909] usb 3-1: SerialNumber: ď釈⢡ส㑭Ს଱꭫㾻 [ 208.658764][ T1996] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 208.734658][ T5881] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 208.795969][ T5881] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 208.897331][ T6027] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 208.945906][ T1996] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.972970][ T5881] usb 1-1: USB disconnect, device number 2 [ 208.983905][ T1996] usb 2-1: not running at top speed; connect to a high speed hub [ 209.013756][ T5956] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.021222][ T5956] usb 4-1: MIDIStreaming interface descriptor not found [ 209.042073][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.054694][ T5881] ftdi_sio 1-1:0.0: device disconnected [ 209.070406][ T1996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.080903][ T1996] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.094124][ T1996] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.181912][ T5909] usb 3-1: USB disconnect, device number 2 [ 209.244082][ T1996] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.253880][ T1996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.266893][ T1996] usb 2-1: Product: syz [ 209.272734][ T1996] usb 2-1: Manufacturer: syz [ 209.277965][ T1996] usb 2-1: SerialNumber: syz [ 209.380078][ T5956] usb 4-1: USB disconnect, device number 2 [ 209.832232][ T1996] cdc_ether 2-1:1.0: skipping garbage [ 209.838178][ T1996] usb 2-1: bad CDC descriptors [ 209.948976][ T1996] usb 2-1: USB disconnect, device number 2 [ 210.178715][ T6039] lo speed is unknown, defaulting to 1000 [ 210.194166][ T6039] lo speed is unknown, defaulting to 1000 [ 210.202399][ T6039] lo speed is unknown, defaulting to 1000 [ 210.794637][ T6039] infiniband syz0: set active [ 210.805938][ T6039] infiniband syz0: added lo [ 210.812846][ T5880] lo speed is unknown, defaulting to 1000 [ 210.862990][ T6039] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 210.936061][ T6039] infiniband syz0: Couldn't open port 1 [ 210.968643][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.134503][ T6039] RDS/IB: syz0: added [ 211.138943][ T6039] smc: adding ib device syz0 with port count 1 [ 211.145395][ T6039] smc: ib device syz0 port 1 has pnetid [ 211.153654][ T6039] lo speed is unknown, defaulting to 1000 [ 211.187339][ T1996] lo speed is unknown, defaulting to 1000 [ 212.042928][ T6039] lo speed is unknown, defaulting to 1000 [ 212.534655][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 212.617333][ T6039] lo speed is unknown, defaulting to 1000 [ 213.276646][ T6039] lo speed is unknown, defaulting to 1000 [ 213.317148][ T6075] netlink: 'syz.4.24': attribute type 29 has an invalid length. [ 213.368846][ T6074] netlink: 76 bytes leftover after parsing attributes in process `syz.0.25'. [ 213.525322][ T6075] netlink: 'syz.4.24': attribute type 29 has an invalid length. [ 213.602941][ T6075] netlink: 592 bytes leftover after parsing attributes in process `syz.4.24'. [ 213.613211][ T6075] unsupported nla_type 58 [ 213.914839][ T6039] lo speed is unknown, defaulting to 1000 [ 214.288480][ T6085] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.288689][ T6100] warning: `syz.0.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.308455][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.38'. [ 216.882175][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 218.021523][ T6138] syz_tun: entered allmulticast mode [ 218.538046][ T6145] syzkaller1: entered promiscuous mode [ 218.543721][ T6145] syzkaller1: entered allmulticast mode [ 218.893905][ T6148] netlink: 72 bytes leftover after parsing attributes in process `syz.4.51'. [ 218.980329][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.153788][ T6148] lo speed is unknown, defaulting to 1000 [ 220.705107][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 220.718030][ T6166] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.923431][ T6166] Zero length message leads to an empty skb [ 222.538990][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 223.235696][ T6182] sctp: [Deprecated]: syz.0.65 (pid 6182) Use of int in max_burst socket option. [ 223.235696][ T6182] Use struct sctp_assoc_value instead [ 224.498307][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.504928][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.980637][ T6212] tipc: Started in network mode [ 225.985914][ T6212] tipc: Node identity 46e6bcbe532e, cluster identity 4711 [ 225.998478][ T6212] tipc: Enabled bearer , priority 0 [ 226.242778][ T6212] syzkaller0: entered promiscuous mode [ 226.248642][ T6212] syzkaller0: entered allmulticast mode [ 226.257692][ T6212] tipc: Resetting bearer [ 226.497748][ T6211] tipc: Resetting bearer [ 226.717847][ T6211] tipc: Disabling bearer [ 227.107556][ T5110] Bluetooth: hci4: command 0x0405 tx timeout [ 227.220642][ T6223] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 228.074272][ T6234] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 228.082999][ T6234] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 228.091788][ T6234] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 228.460964][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 228.549623][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 228.818333][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 229.248255][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 229.260828][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 229.409879][ T6248] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 229.491825][ T6248] trusted_key: syz.4.93 sent an empty control message without MSG_MORE. [ 230.253307][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 231.081301][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.090990][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.105784][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.129062][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.140995][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.319506][ T6272] lo speed is unknown, defaulting to 1000 [ 232.196736][ T6269] lo speed is unknown, defaulting to 1000 [ 233.177540][ T5110] Bluetooth: hci5: command tx timeout [ 235.262356][ T5110] Bluetooth: hci5: command tx timeout [ 236.445102][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 236.468070][ T6322] tipc: Started in network mode [ 236.473194][ T6322] tipc: Node identity 7a6ece727516, cluster identity 4711 [ 236.481610][ T6322] tipc: Enabled bearer , priority 0 [ 236.518574][ T6325] syzkaller0: entered promiscuous mode [ 236.524243][ T6325] syzkaller0: entered allmulticast mode [ 236.580252][ T6319] tipc: Resetting bearer [ 236.670142][ T6318] tipc: Resetting bearer [ 236.691811][ T6318] tipc: Disabling bearer [ 237.347681][ T5110] Bluetooth: hci5: command tx timeout [ 238.847398][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.855010][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.869361][ T6269] bridge_slave_0: entered allmulticast mode [ 238.878784][ T6269] bridge_slave_0: entered promiscuous mode [ 239.092166][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.100053][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.108042][ T6269] bridge_slave_1: entered allmulticast mode [ 239.117567][ T6269] bridge_slave_1: entered promiscuous mode [ 239.438111][ T5110] Bluetooth: hci5: command tx timeout [ 240.256862][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.363978][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.214497][ T6269] team0: Port device team_slave_0 added [ 242.350977][ T6269] team0: Port device team_slave_1 added [ 243.324085][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.332539][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.359150][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.474246][ T6332] Set syz1 is full, maxelem 65536 reached [ 243.556464][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.563742][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.581099][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 243.594501][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.600183][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 243.641162][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 243.779644][ T6365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.134'. [ 243.873276][ T6365] netlink: 34 bytes leftover after parsing attributes in process `syz.4.134'. [ 244.198627][ T6368] syz.4.134 uses obsolete (PF_INET,SOCK_PACKET) [ 244.559573][ T6368] syzkaller1: entered allmulticast mode [ 244.625543][ T6269] hsr_slave_0: entered promiscuous mode [ 244.635791][ T6269] hsr_slave_1: entered promiscuous mode [ 244.644533][ T6269] debugfs: 'hsr0' already exists in 'hsr' [ 244.650476][ T6269] Cannot create hsr debugfs directory [ 245.766683][ T6385] tipc: Enabled bearer , priority 0 [ 246.017449][ T6384] syzkaller0: entered promiscuous mode [ 246.023113][ T6384] syzkaller0: entered allmulticast mode [ 246.133935][ T6385] tipc: Resetting bearer [ 246.267766][ T6383] tipc: Resetting bearer [ 246.346598][ T6383] tipc: Disabling bearer [ 246.518209][ T6392] lo speed is unknown, defaulting to 1000 [ 247.061885][ T6269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.219861][ T6269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.327227][ T6269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.378526][ T6269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.337281][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.454000][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.488809][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.496299][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.601850][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.609418][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.902786][ T6419] Illegal XDP return value 4294967294 on prog (id 24) dev N/A, expect packet loss! [ 251.489379][ T6425] netlink: 72 bytes leftover after parsing attributes in process `syz.2.153'. [ 251.599375][ T6425] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 251.618127][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.627972][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.101236][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.048865][ T6442] netlink: 'syz.3.158': attribute type 29 has an invalid length. [ 255.143326][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 255.245578][ T6462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.164'. [ 255.297204][ T6269] veth0_vlan: entered promiscuous mode [ 255.526175][ T6269] veth1_vlan: entered promiscuous mode [ 255.836415][ T6269] veth0_macvtap: entered promiscuous mode [ 255.991113][ T6269] veth1_macvtap: entered promiscuous mode [ 256.249339][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.422380][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.596601][ T4014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.685747][ T4014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.745745][ T1135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.817614][ T1135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.199141][ T6490] netlink: 666 bytes leftover after parsing attributes in process `syz.3.173'. [ 259.279220][ T6513] syzkaller1: entered promiscuous mode [ 259.284904][ T6513] syzkaller1: entered allmulticast mode [ 261.664966][ T6547] syzkaller0: entered promiscuous mode [ 261.670876][ T6547] syzkaller0: entered allmulticast mode [ 261.813772][ T6547] tipc: Enabled bearer , priority 0 [ 261.887970][ T6542] tipc: Resetting bearer [ 262.049611][ T6542] tipc: Disabling bearer [ 265.769370][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.781491][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.131926][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.140346][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.048134][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 269.423130][ T6632] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 269.432629][ T6632] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 269.440621][ T6632] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.213'. [ 270.248396][ T6637] ipvlan2: entered promiscuous mode [ 270.261016][ T6637] bridge0: port 3(ipvlan2) entered blocking state [ 270.268029][ T6637] bridge0: port 3(ipvlan2) entered disabled state [ 270.275061][ T6637] ipvlan2: entered allmulticast mode [ 270.280847][ T6637] dummy0: entered allmulticast mode [ 270.288864][ T6637] ipvlan2: left allmulticast mode [ 270.298569][ T6637] dummy0: left allmulticast mode [ 270.385557][ T6639] netlink: 64 bytes leftover after parsing attributes in process `syz.2.211'. [ 272.182340][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 272.391370][ T6654] veth1_macvtap: left promiscuous mode [ 273.928649][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 274.953602][ T6687] lo speed is unknown, defaulting to 1000 [ 276.210573][ T6708] lo speed is unknown, defaulting to 1000 [ 276.486043][ T6713] lo: entered allmulticast mode [ 276.497899][ T6713] tunl0: entered allmulticast mode [ 276.510875][ T6713] gre0: entered allmulticast mode [ 276.521636][ T6713] gretap0: entered allmulticast mode [ 276.531211][ T6713] erspan0: entered allmulticast mode [ 276.546218][ T6713] ip_vti0: entered allmulticast mode [ 276.556176][ T6713] ip6_vti0: entered allmulticast mode [ 276.567085][ T6713] sit0: entered allmulticast mode [ 276.576748][ T6713] ip6tnl0: entered allmulticast mode [ 276.586880][ T6713] ip6gre0: entered allmulticast mode [ 276.597256][ T6713] syz_tun: entered allmulticast mode [ 276.607238][ T6713] ip6gretap0: entered allmulticast mode [ 276.616910][ T6713] bridge0: entered allmulticast mode [ 276.628418][ T6713] vcan0: entered allmulticast mode [ 276.635140][ T6713] bond0: entered allmulticast mode [ 276.640522][ T6713] bond_slave_0: entered allmulticast mode [ 276.651808][ T6713] bond_slave_1: entered allmulticast mode [ 276.664330][ T6713] team0: entered allmulticast mode [ 276.669719][ T6713] team_slave_0: entered allmulticast mode [ 276.675590][ T6713] team_slave_1: entered allmulticast mode [ 276.688231][ T6713] dummy0: entered allmulticast mode [ 276.698696][ T6713] nlmon0: entered allmulticast mode [ 276.853902][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880518ab000: rx timeout, send abort [ 276.865691][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880518ab000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.125148][ T6713] caif0: entered allmulticast mode [ 277.131432][ T6713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.662407][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 277.676689][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.246'. [ 278.042143][ T6724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.059396][ T6724] bridge0: port 3(bond1) entered blocking state [ 278.066107][ T6724] bridge0: port 3(bond1) entered disabled state [ 278.073177][ T6724] bond1: entered allmulticast mode [ 278.090233][ T6724] bond1: entered promiscuous mode [ 278.098980][ T6724] bridge0: port 3(bond1) entered blocking state [ 278.105698][ T6724] bridge0: port 3(bond1) entered forwarding state [ 278.132578][ T6726] dummy0: entered promiscuous mode [ 278.144038][ T6726] team0: entered promiscuous mode [ 278.149513][ T6726] team_slave_0: entered promiscuous mode [ 278.156378][ T6726] team_slave_1: entered promiscuous mode [ 278.176623][ T6726] bridge0: port 4(hsr1) entered blocking state [ 278.190317][ T6726] bridge0: port 4(hsr1) entered disabled state [ 278.197435][ T6726] hsr1: entered allmulticast mode [ 278.202629][ T6726] dummy0: entered allmulticast mode [ 278.208162][ T6726] team0: entered allmulticast mode [ 278.213436][ T6726] team_slave_0: entered allmulticast mode [ 278.221941][ T6726] team_slave_1: entered allmulticast mode [ 278.232078][ T6726] hsr1: entered promiscuous mode [ 278.239957][ T6726] bridge0: port 4(hsr1) entered blocking state [ 278.246575][ T6726] bridge0: port 4(hsr1) entered forwarding state [ 278.284255][ T4364] bridge0: port 3(bond1) entered disabled state [ 280.519184][ T6742] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 280.528182][ T6741] IPVS: stopping backup sync thread 6742 ... [ 280.682403][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 282.109761][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 283.857385][ T6782] netlink: 'syz.0.267': attribute type 13 has an invalid length. [ 283.865302][ T6782] netlink: 'syz.0.267': attribute type 17 has an invalid length. [ 283.984302][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.268'. [ 284.794917][ T6796] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 284.803032][ T6796] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 284.811230][ T6796] netlink: 15130 bytes leftover after parsing attributes in process `syz.3.269'. [ 285.202968][ T6782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.238091][ T6783] bond0: entered promiscuous mode [ 285.248832][ T6783] bond_slave_0: entered promiscuous mode [ 285.257702][ T6783] bond_slave_1: entered promiscuous mode [ 285.273302][ T6783] macvlan0: entered promiscuous mode [ 285.283341][ T6783] hsr2: entered promiscuous mode [ 285.978196][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.984822][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.192803][ T6807] lo speed is unknown, defaulting to 1000 [ 287.001191][ T6811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.240491][ T6813] lo speed is unknown, defaulting to 1000 [ 287.246824][ T6813] lo speed is unknown, defaulting to 1000 [ 287.254724][ T6813] lo speed is unknown, defaulting to 1000 [ 287.274075][ T6813] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 287.314314][ T6816] netlink: 'syz.3.274': attribute type 12 has an invalid length. [ 287.322160][ T6813] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.406812][ T6813] lo speed is unknown, defaulting to 1000 [ 287.416351][ T6813] lo speed is unknown, defaulting to 1000 [ 287.426623][ T6813] lo speed is unknown, defaulting to 1000 [ 287.435456][ T6813] lo speed is unknown, defaulting to 1000 [ 287.444226][ T6813] lo speed is unknown, defaulting to 1000 [ 287.453258][ T6813] lo speed is unknown, defaulting to 1000 [ 287.462008][ T6813] lo speed is unknown, defaulting to 1000 [ 289.918517][ T6848] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 289.926537][ T6848] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 290.847285][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 290.998381][ T6857] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 292.348588][ T6874] netlink: 72 bytes leftover after parsing attributes in process `syz.0.292'. [ 292.458085][ T6875] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.760782][ T6877] erspan0: entered promiscuous mode [ 292.774889][ T6877] erspan0: left promiscuous mode [ 293.696397][ T4364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.957323][ T4364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.159966][ T4364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.383008][ T4364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.645573][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 294.746686][ T6897] syz_tun: entered promiscuous mode [ 294.754237][ T6897] macvtap1: entered promiscuous mode [ 294.760918][ T6897] macvtap1: entered allmulticast mode [ 294.824914][ T6903] syz_tun: left promiscuous mode [ 294.940300][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 294.949907][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.388803][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.884477][ T4364] bridge_slave_1: left allmulticast mode [ 295.891657][ T4364] bridge_slave_1: left promiscuous mode [ 295.903320][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.059069][ T4364] bridge_slave_0: left allmulticast mode [ 296.065094][ T4364] bridge_slave_0: left promiscuous mode [ 296.071908][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.228903][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.310'. [ 296.499218][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'. [ 297.286175][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.358872][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.413078][ T4364] bond0 (unregistering): Released all slaves [ 299.114521][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.128754][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.139333][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.154002][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.166055][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.386679][ T4364] hsr_slave_0: left promiscuous mode [ 299.396232][ T4364] hsr_slave_1: left promiscuous mode [ 299.404407][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.413977][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.426017][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.434269][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.655779][ T4364] veth1_macvtap: left promiscuous mode [ 299.662166][ T4364] veth0_macvtap: left promiscuous mode [ 299.668326][ T4364] veth1_vlan: left promiscuous mode [ 299.673884][ T4364] veth0_vlan: left promiscuous mode [ 301.258095][ T5816] Bluetooth: hci1: command tx timeout [ 301.889117][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 301.956451][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 302.638458][ T6941] lo speed is unknown, defaulting to 1000 [ 303.082793][ T6974] bridge_slave_0: invalid flags given to default FDB implementation [ 303.339188][ T5816] Bluetooth: hci1: command tx timeout [ 304.288601][ T6941] lo speed is unknown, defaulting to 1000 [ 305.421201][ T5816] Bluetooth: hci1: command tx timeout [ 305.833410][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 306.271804][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.5.341'. [ 306.642556][ T7025] lo speed is unknown, defaulting to 1000 [ 307.079238][ T7025] lo speed is unknown, defaulting to 1000 [ 307.497479][ T5831] Bluetooth: hci1: command tx timeout [ 308.466175][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 308.483053][ T5110] Bluetooth: hci3: command 0x0406 tx timeout [ 308.492924][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 309.143449][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.151563][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.159550][ T6941] bridge_slave_0: entered allmulticast mode [ 309.169266][ T6941] bridge_slave_0: entered promiscuous mode [ 309.381322][ T7053] lo speed is unknown, defaulting to 1000 [ 309.420543][ T7052] tipc: Enabled bearer , priority 0 [ 309.558572][ T7052] syzkaller0: entered promiscuous mode [ 309.564239][ T7052] syzkaller0: entered allmulticast mode [ 309.573135][ T7052] tipc: Resetting bearer [ 309.813322][ T7053] lo speed is unknown, defaulting to 1000 [ 309.962504][ T7050] tipc: Resetting bearer [ 310.144216][ T7050] tipc: Disabling bearer [ 310.338738][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.346366][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.354384][ T6941] bridge_slave_1: entered allmulticast mode [ 310.364196][ T6941] bridge_slave_1: entered promiscuous mode [ 311.232483][ T7067] dvmrp8: entered allmulticast mode [ 311.460948][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.533921][ T7062] lo speed is unknown, defaulting to 1000 [ 311.586878][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.079118][ T7060] dvmrp8: left allmulticast mode [ 312.435920][ T6941] team0: Port device team_slave_0 added [ 312.573793][ T6941] team0: Port device team_slave_1 added [ 313.266371][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.273762][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.300657][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.325689][ T7062] lo speed is unknown, defaulting to 1000 [ 313.408370][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.415496][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.445013][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.005909][ T6941] hsr_slave_0: entered promiscuous mode [ 314.016238][ T6941] hsr_slave_1: entered promiscuous mode [ 314.032225][ T6941] debugfs: 'hsr0' already exists in 'hsr' [ 314.038377][ T6941] Cannot create hsr debugfs directory [ 314.876547][ T7091] netlink: 14 bytes leftover after parsing attributes in process `syz.0.357'. [ 316.414996][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.361'. [ 316.425242][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 316.434583][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.361'. [ 316.443855][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.0.361'. [ 316.999817][ T6941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 317.133807][ T6941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.262792][ T6941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.373144][ T6941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.364170][ T7134] netlink: 248 bytes leftover after parsing attributes in process `syz.3.370'. [ 319.095517][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.363833][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.487963][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.495460][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.628072][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.635569][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.981894][ T7169] netlink: 'syz.5.381': attribute type 2 has an invalid length. [ 322.589221][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.373460][ T7164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.576101][ T7164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.675794][ T7164] bond0 (unregistering): Released all slaves [ 324.024015][ T30] audit: type=1800 audit(1757931402.290:2): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.382" name="memory.events" dev="tmpfs" ino=482 res=0 errno=0 [ 325.809118][ T7218] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 325.818027][ T7218] netlink: 2 bytes leftover after parsing attributes in process `syz.0.392'. [ 325.827257][ T7218] team0: entered promiscuous mode [ 325.832630][ T7218] team_slave_0: entered promiscuous mode [ 325.839548][ T7218] team_slave_1: entered promiscuous mode [ 325.848152][ T7218] bridge0: port 3(team0) entered blocking state [ 325.854885][ T7218] bridge0: port 3(team0) entered disabled state [ 325.861989][ T7218] team0: entered allmulticast mode [ 325.867436][ T7218] team_slave_0: entered allmulticast mode [ 325.873333][ T7218] team_slave_1: entered allmulticast mode [ 325.887915][ T7218] bridge0: port 3(team0) entered blocking state [ 325.894666][ T7218] bridge0: port 3(team0) entered forwarding state [ 325.951980][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 326.664691][ T6941] veth0_vlan: entered promiscuous mode [ 326.960821][ T6941] veth1_vlan: entered promiscuous mode [ 327.482127][ T6941] veth0_macvtap: entered promiscuous mode [ 327.605354][ T6941] veth1_macvtap: entered promiscuous mode [ 327.910481][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.003715][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.219519][ T5100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.319630][ T5100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.431727][ T4364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.528826][ T3578] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.585140][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 328.931076][ T7251] syz_tun (unregistering): left allmulticast mode [ 329.209436][ T7243] sctp: failed to load transform for md5: -2 [ 329.990626][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.405'. [ 334.380614][ T7309] tipc: Invalid UDP bearer configuration [ 334.380846][ T7309] tipc: Enabling of bearer rejected, failed to enable media [ 337.478772][ T5880] lo speed is unknown, defaulting to 1000 [ 338.245300][ T7356] lo speed is unknown, defaulting to 1000 [ 338.669557][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 339.461033][ T7356] lo speed is unknown, defaulting to 1000 [ 339.879777][ T7371] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 340.428483][ T7376] bond0: entered promiscuous mode [ 340.433737][ T7376] bond0: entered allmulticast mode [ 340.443281][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.492272][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.500478][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.638082][ T3739] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 340.639357][ T7371] bridge2: entered promiscuous mode [ 340.658900][ T7371] bridge2: entered allmulticast mode [ 340.667374][ T7371] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 340.768037][ T3972] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.028666][ T7382] lo speed is unknown, defaulting to 1000 [ 341.405096][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.414786][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.437316][ T7382] lo speed is unknown, defaulting to 1000 [ 342.626467][ T7394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.637741][ T7394] bridge0: port 3(bond1) entered blocking state [ 342.644497][ T7394] bridge0: port 3(bond1) entered disabled state [ 342.651753][ T7394] bond1: entered allmulticast mode [ 342.663545][ T7394] bond1: entered promiscuous mode [ 342.671629][ T7394] bridge0: port 3(bond1) entered blocking state [ 342.678553][ T7394] bridge0: port 3(bond1) entered forwarding state [ 342.729072][ T3676] bridge0: port 3(bond1) entered disabled state [ 344.768627][ T5463] ===================================================== [ 344.775992][ T5463] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 344.783662][ T5463] _copy_to_iter+0xef3/0x33f0 [ 344.788658][ T5463] __skb_datagram_iter+0x196/0x12c0 [ 344.794060][ T5463] skb_copy_datagram_iter+0x5b/0x1e0 [ 344.799701][ T5463] netlink_recvmsg+0x4bb/0xfe0 [ 344.804647][ T5463] sock_recvmsg+0x2df/0x390 [ 344.809393][ T5463] ____sys_recvmsg+0x193/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 344.814340][ T5463] ___sys_recvmsg+0x20b/0x850 [ 344.819298][ T5463] __x64_sys_recvmsg+0x20e/0x3d0 [ 344.824426][ T5463] x64_sys_call+0x35f0/0x3e20 [ 344.830271][ T5463] do_syscall_64+0xd9/0x210 [ 344.834913][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.845167][ T5463] [ 344.849870][ T5463] Uninit was stored to memory at: [ 344.855147][ T5463] pskb_expand_head+0x310/0x1610 [ 344.861686][ T5463] netlink_trim+0x496/0x500 [ 344.866374][ T5463] netlink_broadcast_filtered+0x80/0x2430 [ 344.873224][ T5463] nlmsg_notify+0x15b/0x2f0 [ 344.877980][ T5463] rtnl_notify+0xba/0x100 [ 344.882465][ T5463] wireless_nlevent_process+0xfe/0x290 [ 344.888192][ T5463] process_scheduled_works+0xb8e/0x1d80 [ 344.893931][ T5463] worker_thread+0xedf/0x1590 [ 344.898897][ T5463] kthread+0xd59/0xf00 [ 344.903100][ T5463] ret_from_fork+0x233/0x380 [ 344.907904][ T5463] ret_from_fork_asm+0x1a/0x30 [ 344.912847][ T5463] [ 344.915226][ T5463] Uninit was stored to memory at: [ 344.920652][ T5463] wireless_send_event+0x67f/0x1530 [ 344.926003][ T5463] ioctl_standard_iw_point+0x12b0/0x13f0 [ 344.931935][ T5463] compat_standard_call+0x188/0x4c0 [ 344.937991][ T5463] wext_ioctl_dispatch+0x18f/0x7a0 [ 344.947172][ T5463] compat_wext_handle_ioctl+0x1a1/0x300 [ 344.952897][ T5463] compat_sock_ioctl+0x20c/0xff0 [ 344.959153][ T5463] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 344.964864][ T5463] ia32_sys_call+0x2d5f/0x4310 [ 344.969852][ T5463] __do_fast_syscall_32+0xb0/0x150 [ 344.975108][ T5463] do_fast_syscall_32+0x38/0x80 [ 344.980297][ T5463] do_SYSENTER_32+0x1f/0x30 [ 344.984952][ T5463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.991569][ T5463] [ 344.993953][ T5463] Local variable iwp created at: [ 344.999095][ T5463] compat_standard_call+0x4a/0x4c0 [ 345.004360][ T5463] wext_ioctl_dispatch+0x18f/0x7a0 [ 345.009700][ T5463] [ 345.012084][ T5463] Bytes 60-63 of 64 are uninitialized [ 345.017654][ T5463] Memory access of size 64 starts at ffff888063b4ac00 [ 345.024517][ T5463] Data copied to user address 00007fffc0b313a0 [ 345.030855][ T5463] [ 345.033296][ T5463] CPU: 1 UID: 101 PID: 5463 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 345.042796][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.057975][ T5463] ===================================================== [ 345.065007][ T5463] Disabling lock debugging due to kernel taint [ 345.071353][ T5463] Kernel panic - not syncing: kmsan.panic set ... [ 345.077976][ T5463] CPU: 1 UID: 101 PID: 5463 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 345.088839][ T5463] Tainted: [B]=BAD_PAGE [ 345.093081][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.103268][ T5463] Call Trace: [ 345.106643][ T5463] [ 345.109655][ T5463] __dump_stack+0x26/0x30 [ 345.114160][ T5463] dump_stack_lvl+0x53/0x270 [ 345.118920][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.124918][ T5463] dump_stack+0x1e/0x25 [ 345.129241][ T5463] vpanic+0x361/0xc50 [ 345.133407][ T5463] panic+0x15d/0x160 [ 345.137515][ T5463] kmsan_report+0x31c/0x320 [ 345.142191][ T5463] ? kmsan_internal_check_memory+0x1e1/0x230 [ 345.148320][ T5463] ? kmsan_copy_to_user+0xf1/0x190 [ 345.153585][ T5463] ? _copy_to_iter+0xef3/0x33f0 [ 345.158593][ T5463] ? __skb_datagram_iter+0x196/0x12c0 [ 345.164148][ T5463] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 345.169803][ T5463] ? netlink_recvmsg+0x4bb/0xfe0 [ 345.174920][ T5463] ? sock_recvmsg+0x2df/0x390 [ 345.179757][ T5463] ? ____sys_recvmsg+0x193/0x610 [ 345.184884][ T5463] ? ___sys_recvmsg+0x20b/0x850 [ 345.189924][ T5463] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 345.195237][ T5463] ? x64_sys_call+0x35f0/0x3e20 [ 345.200270][ T5463] ? do_syscall_64+0xd9/0x210 [ 345.205176][ T5463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.211415][ T5463] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 345.216794][ T5463] ? filter_irq_stacks+0x49/0x190 [ 345.221994][ T5463] ? stack_depot_save_flags+0x35/0x7b0 [ 345.227624][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.232912][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.238204][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.243486][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.248760][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.254043][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.260040][ T5463] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 345.265425][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.270693][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.276672][ T5463] kmsan_internal_check_memory+0x1e1/0x230 [ 345.282646][ T5463] kmsan_copy_to_user+0xf1/0x190 [ 345.287741][ T5463] _copy_to_iter+0xef3/0x33f0 [ 345.292559][ T5463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 345.299032][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.304311][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.310284][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.315568][ T5463] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 345.322076][ T5463] __skb_datagram_iter+0x196/0x12c0 [ 345.327461][ T5463] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 345.333304][ T5463] skb_copy_datagram_iter+0x5b/0x1e0 [ 345.338762][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.344738][ T5463] netlink_recvmsg+0x4bb/0xfe0 [ 345.349681][ T5463] ? aa_sock_msg_perm+0x29c/0x2f0 [ 345.354895][ T5463] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.360365][ T5463] sock_recvmsg+0x2df/0x390 [ 345.365021][ T5463] ____sys_recvmsg+0x193/0x610 [ 345.369963][ T5463] ? should_fail_ex+0x10/0x8a0 [ 345.374868][ T5463] ? stack_depot_save_flags+0x35/0x7b0 [ 345.380503][ T5463] ___sys_recvmsg+0x20b/0x850 [ 345.385395][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.391361][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.396619][ T5463] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 345.402588][ T5463] __x64_sys_recvmsg+0x20e/0x3d0 [ 345.407715][ T5463] ? kmsan_get_metadata+0xfb/0x160 [ 345.412991][ T5463] x64_sys_call+0x35f0/0x3e20 [ 345.417848][ T5463] do_syscall_64+0xd9/0x210 [ 345.422477][ T5463] ? irqentry_exit+0x16/0x60 [ 345.427231][ T5463] ? clear_bhb_loop+0x40/0x90 [ 345.432050][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.438086][ T5463] RIP: 0033:0x7f83b879d407 [ 345.442604][ T5463] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 345.462350][ T5463] RSP: 002b:00007fffc0b31290 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 345.470915][ T5463] RAX: ffffffffffffffda RBX: 00007f83b8713740 RCX: 00007f83b879d407 [ 345.479000][ T5463] RDX: 0000000000000040 RSI: 00007fffc0b31310 RDI: 0000000000000009 [ 345.487081][ T5463] RBP: 0000555afe1c2aa0 R08: 0000000000000000 R09: 0000000000000000 [ 345.495146][ T5463] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 345.503209][ T5463] R13: 00007fffc0b35470 R14: 0000000000000000 R15: 00007fffc0b35460 [ 345.511312][ T5463] [ 345.514688][ T5463] Kernel Offset: disabled [ 345.519071][ T5463] Rebooting in 86400 seconds..