last executing test programs: 1m7.762162511s ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 55.862797836s ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 54.504583762s ago: executing program 4 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) close(r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x100}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) (async) close(r2) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'sit0\x00', 0x100}) (async) 53.828998488s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x119, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20000020) 40.546829393s ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 36.502818784s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x119, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20000020) 27.464557767s ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 25.957147983s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x119, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20000020) 13.954705479s ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 13.110514686s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x119, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20000020) 11.61235967s ago: executing program 4 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x119, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000000700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x4, 0x0, &(0x7f0000000180)) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="470d00000000000000000000000008000280040005"], 0x1c}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r14, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x20000020) 2.116003805s ago: executing program 2 (id=2443): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) close(r2) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x40, 0x10, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x8e, 0x0, 0x0, @local, @private=0xa010102}}}}) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 1.928722954s ago: executing program 2 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x421, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x86be1e08d60d6e88}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x412ea}]}, 0x34}}, 0x0) 1.71711683s ago: executing program 3 (id=2448): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x29, 0x43, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000001b40)={&(0x7f00000018c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={0x28, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz1\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.566187735s ago: executing program 3 (id=2450): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x178, 0xa, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x6030000, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21, 0x0, 0x40}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="4cb58aaf5db9", 0x1, 0xc, [0x1d, 0x3f, 0x1, 0x38, 0x3, 0x29, 0x12, 0x33, 0x39, 0x8, 0xa, 0x27, 0x26, 0x20, 0x17, 0x8], 0x0, 0x1, 0x59}}}, {{@ip={@multicast2, @broadcast, 0xffffffff, 0xffffff00, 'wlan0\x00', 'ip_vti0\x00', {}, {}, 0xff, 0x1, 0x11}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r4 = socket(0x11, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8001}]}}]}, 0x3c}}, 0x0) 1.336235542s ago: executing program 1 (id=2452): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xc4, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="c9c0b4436079a830ab711fe046ed3ed135286729cbc06b37830e31ad2e29c50fcf80bd89c513a13f234c55ac52c35aff6cde38e89b8c0fcaeffeeffb8033eb4b390ef1e2e74d6bdaee3435802663911c49bf9e30e4f4875d6fda3f89162d5bb8683c23db524d9a18922f0836e04e17bb61181977200f42fce66857ff3d0e1796496fce", 0x83}, {&(0x7f0000000140)="850cdfa3c640137c2c2f5deb3fa2dd5a70ed5dcdf3c0c8249e46175fc7ca08d5d07e9ee685eb89db6ecea77f0c1af60358915b58595791bc8b20d8a9e07ef819a9dec15f0cb0e22b0d7d39ef58f6ae9356206d452385e4e398b6cb5a451e43250a569247847b982d4bf531618a3bac1d0a771c0e3e88136ca646eca8f6a9766d7d6f45e77c7288141ff87c57d7ad09cb0e07937dfdbf61059afe55559718d5bdb5dd74b16e", 0xa5}, {&(0x7f0000000240)="23a253cb5bff46a03aeb644ffe8435b2", 0x10}], 0x3}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000003c0)="b268446e1102686f5662a3c4addf0e75ccef71193d1e9d56046c7c3f26b8424ba732755811396b994767493ddcbdd28ca55e82096b9a7acdf5ed02c71fc50ffd544fd96fa6b4e3fbedf14e9c6e7a0c8642406f5d362a01fc0ef411be", 0x5c}, {&(0x7f0000000480)="0a543149ec86241b028665153e3602697ed4209a8cf782755bf0b7035402e5bc16d964bfdeaf968c466309b7691bc6299e093bf32211542013e7e05e37b9fc504790b2b69610d61f3d3a4bcc23e6380dbefb155d70847376f045f17a80857ea415a8b8eb", 0x64}], 0x2}}], 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) sendmsg$netlink(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1c8}, {&(0x7f0000000480)={0x1118, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r1}, @generic="abb63e85dda0f423eb28022b1b651fe58637753fa7a8ca9fca3677871ee6e7ea2001916f8b47f643fdff79712f90e7da31d04702f5bc7ddd4524a32788ebb94e39fbb767d570888a023db6d466e269352877c506ba9c664c2ac1e43d073f5e1631d58f2c908f9313131cf104f749905910debe5a66b200194362085f3a0306bb196f116b7e0681997f5bcc4c3fb06f3be5a3159cd20ae8d6fd37681c2d08b4c27dd12ee1d193cd229fbb9fada631a7151064d5", @nested={0x28, 0xb, 0x0, 0x1, [@generic="d4cb5ccab13395b506ad5b5dafd0b6e7d7c71c0a64405ad7", @nested={0x4, 0xc6}, @typed={0x8, 0xb5, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cfde4fff32d30035313a18afe1941e6d91a6d1890e1445c286169993a393d1cd0b9032ee6b42a71fbe38c2319d753928ed0d244aa27d94fb540680936a8f4c8fbab1a9f7192d2b39383933791698be6c6e10a9c768cabd5c4c4ba4a464afb868e5f0b371434a82fe7bde83fa065b77e3693a001316757f2cf197c7c6de1c5eb29597d2dba2b37d842efd599f0cfa237e90339a90fdf95f3dad217c5ff9b92d7a1881e1f0f14e4f01d0b12b6845105fa4179cb0a6ba513975dbc4896632ec69dcc5a9801ac2ce719daf861db292ba094414d999acff03e40be2a28fec04c0b787c0041baae70991b0d099d064aad27daacdf087ed9d125880a7998e57fe67fc5d29abe600a80d970775d0f96e10ab0ab79000b437ad52da638af8ba57e3160ebb393f350132194d8d4fe0bea85cea650216b191cd7d31bba27bef8d057698bea1bb803e76d299f2d298b316333e21ced26c5ba6cde2412f56549d5819ff4d0efe1416db48919f42457b32328fc5664027f42de6f66f43c4f32d0cc55e2bd6a37ad826b8dd583b18a7b4dc5015ffd9d3c588061f5cdedf6a51eb11668ec783bf29392d99e6babfdd9c45ed7f9390cf48590aa714f5040e4053f81a42847824ceba0bca9dc9ea1d5999afdecb457fa2fed55bcb2a19991e9bbedc60f5589836d0a5171ec16fa9376c0038eb57516ad6ee995853d13e49a2a83e570241e5740fa7c015942cf5813d76cdcfc06d59b3c91930f3dfb2945b05bc68be5ca8c08a1a104b1268d49a7fcb2dd45e90ef79da59bcf8f3e138e39b105897e87efdd4de6585c74a51540dcb82dc225de09a75d79f1e51d3a5c5f1df1a799933138cf04f9c719db0bb5ad8a1e37761916d4d3aad1dbba0a4e6a0e95dd761c95c14c5d62296334cb8271b52391662832cf03d63d465fe9088fc705b5aec366dad3470bba54c688e7632fd398a0a18a28a1e8a7d2786f02d3ae2f502b1781b29e8ea91e34249372e49bd185840860cbb317b1448e0f00738f40bddb43f69494b3176a4a961de55936d2ea7cdcd16a3cabc35000152bbb461d8b1afbf6909751a21b54a500b9750061a3a44c28d99a479f0826a86f6d4b3bf5dc53ae747bbb251915927a0461da6ded974f97563cda36cefdc0f3a7b935f2424ab15d49d63d61077ee7df43992e07dfd0e8b20ec2cc02930b8e2a8a65b1052b8d13ff11f230384bbec3799dcd3fd47fdb9a56eff7622ee6a2d819d9b5954029d65f3082a7b4602594cc43151bcd9f5dfdae7d303ab64b1a91bbd22c0879949fe4af49883f5b8de72b9f5b3fc9207b911c67343f44dbecf21c468aedc731ed5e91c00e07bb9616d40e3378aca35840544152b87a1f3be965c1a79574982712b5b30b4889c047a39c7f7d9401e846bdf5face936ef5810fe27828ca38335a3de9a8d8a86ac37688edb22c4c88511e4ed8f71986a7e47a6ba07a148db2053f05bae2f3048d1cded9c933307e3abc58ebf89fa8f2404a154622f5c9ea74344f301aa048d9294fe8b7fcde434a7714c397643e61bbf0b0a640ffbce3fe7ca272b39d0ce4dd5c3946b182b719e56b74e1b25e6e4c7c12f96f1d2442945eb63f504f026b04e0174bcdee04b12ee0cb7aba4666a72ff72d35850a59349c59f8a0eb5ccd618bd82e35b424d2fa6ef9b87454fe39a5257c01b5f1716bf0c2ecd521ae3da5fd6b8525d6de7f2e2adb4b74b4d10cf9043f5a1c3f21bf2da8d1ee5a885d628ebe5ff885e02bc1aab22f09ced7dcf2a527783ee9eff87a629055bada51d15f3dccf07442226c5be33983d31f0ebc3191098c61590c5d9f3ad66a0eb4e763f1ed0847449e29a718ea599848b2458823a19c78870cfdd881f18a77be7d4b2fd83ca66aece8e4eec86d9d406ff8599d8603051d15ba937c847b5cde6876225ad1128f3a684c8812486c4461f4a7e1b2e46731591da6e670e5c9a96f8952a6b0e79ea21cc0e7ce2e7822b6cca8c0909d4dd651f25b1ce1728cebd5a4d699f17d0c9117f469dd6a968c793103dff316a8bb2db6139a9afa4847306124f95f7989708b5d94477e41ee4d203f7a60ba14f62e1940444b7c97f5c5120644a4f109f4fad34844c201c0af5753f9fbe6fa2817ab503d2b80234c3b465356844b02487c7cd74471007e457ddf9601fb85740add726ba4f12fc91e1f6e6839b461aa40ec0ad36107941cef1321ad7e5f06a21d37b8434fb0b153ca030cda91ff0ce0e9583de6bce4f247549175017f2e79a6b3f925d30b49c9d269f4d140865788935287773edbad77e9211c6a46a79956c9947133c83c15d25cb6e3c2c270d22409e6f76dd75a35d62a75c03a18fa17aa35ab92a97737946d0afd14517dfc9130dd0fc0b7ee2f3b2bab05996f5b2f201beb6d88e14b02c3e52a73ab96496d3f708275ca45c802836fc3e1abcb0e5a56907e413bd7eed7c9b730dd5f128fc48e20901a5408991e205b973a860a7640e7002fbb505ba2034f71f786daf88be053e497d574d50cec0559c5e7710e30c2404ccf6746a6220cc072c67fb6e9c068fed0b72238736fc72a2706a78d4d89337529268b5de51f12cb23d33eae30da7f5cb98eff7fc666a33846917f9bbdcef99bcde4cddbfd655efbcee24fcf0415572a08db780326e2c38f8bfc4ec5e81ac46976875f842880bb3cf67446c05730a0a64e3e2d965e3c1f70a40bf3dfde1c5ac98479820a990a4fe142d40307b1c490b884e56583cf5fe2247d51f9b571eebe5c998a7a95d3bcfb34e5bf178a04bc2997964e463eab60756b107d3ccc07eabb61e752356a218711202a5634c775747de3a9372f28ca7a0b98a1756f5581c95c6d5eb12d583a5a8b794d4d09c761d02b1780f19cc7f173967d1cdc9e1344298fc046fb4090929b207690541e3ea16f65cbafb648e7c203c6444eb4b4bce7193ac9a8e5bd5051c3b412a6befc6caf43dde876331b86313d63d4cce47285f22ac66646d1a6aadff392335b82ccc5ef045334ae06513ab341e66f6a04601f650600ecae03a8fa6ecbe3f3489a1bad2e11cf3603b7636a5799984f59e597786dc59fb7485b75d5e99dfcc0c47e1f00aa601b67aa6dd1bff155ef32289775781920e31a6f48de8b56ca99bc06e746caf6084636ffec11e1c4af6a732e16db81d0bc5580613abf8a06d78647b7d7610f8e88bcdf6bce49a3318bccf74aa0167ee06f8c181944d9c8a0021e68a3ae99b0c37e6a8d3a5e81e5365985b71442d6692290f04702ee8a8e02f4378b978078246cb168f042ccc58658a51e804a820fd93d0bc5f639e0f210c699cd7d852c13c74caba76b59b349c5e97ff40fa9e134f6e2e02ade0831937728347cd5dc53bf7b01d28eaafe2c467ba7bbf8fbf932f3db06b1549004155d076cb0126925d9cb59efce04e1a3d04c2c5a35f60af9e02769366196f85c9f1558897a54bc229883c842ed12493647db3c4c8cd633624409cccfa40bd95c7849df254041be246866798d704aebf5e75c056e2a4a15b845bd2ed5ca61bcbe4f603a728fec60f764d732c2715293be8ec11db616582a43aba73f1be9424158edd8e2bd716d0fcb4db7c843811810fd7ec8991892268bba9d540b9f81daf407a4f455a2319e7b763bdceb255c289685492d35fe885f57f8d44c800f181340528826f70d79c548e67f49755daaef6f3d5919bc9ac2327ee2e47195909908f62c871b742074e9314ca3b896d70e07bbdfa50984eacea189a26a6703a49192c5a64ebcd906c83299401771a54a6c7cf4564cfd2f0b2304612dda86b2632a97bdc761209de00e589cb9f65cc6ad045a0d3b78154685ed4f21a0952e75f30943691aece2ab3fdeb021c63f09f8d112e8b9efadb2fd111bbfbbc28487cb8f9e5cf8ef9ed1cad1521d92bfc3e2eb40a4f0657421a9c7c41adf36568edd44f85238aaff3464babba2e71ca852ac419f3740fcbf2aadca489cb3959740c5c0f9269b7769dc0a2f63a24e2d7301685a03e5b8cad01996b9050ca4bc8241bdad977adc99c134c3240d74c0172f69e3db08cbf78f0eac3b5872ca710fe8fcfe39d4d9b2f8b40721c9cea93ad61d8c954513fb164354ae7c41ddb62c0d84231cdb27c7550a9a5a230c79225a491a2a8ec3c50d81e5826bc5157e25587d1b4ff0aea10052a6e5486db3b8c890898d31a1d36e1a95f17101270a0dd41e028dfeed3fb6d7d2624eceef4d7af2c31b756000305871b4419551689a5738dab964ca0a00aa25a2eccf3cb51fbd3374d5858dee7799947000c92bcb2c00c75d1782d73d194cd7ad4d04897a233228c6f1ceea5720221a9b6ee2ca70b13781e65960a22f7be5ab009d6508f9d31a9a4ad80e0dba43314412816eb5d16849bdc7f67320304e146592770a40541938e17dac216984702efa1e9b289252894a559f13b2c698ffb44b0d406ce78ee8d9efda4c5d90c531bafcfab0777c904a5be534f573718834c6eeef2df858f41e836c219249511e4237505dda53b7802184d88a532d66aa9ddbd84dd47db952d28f336e4efc64b54e59806f80000f04f885fb47836e0ed7326c7710b2888c85578ef7156aa63685b44dbe83a2074853da1c2c8c7575dc73b4c1fb475a80523a7f6299c21ac0d66f446d272a0939bc6bb042b19492b01c40419221424761f9c9bb3a5964171ddfadda1da6d4d8b529c00010814a7786fd604a397583b65bd565a09ff7b3ac986a9af08ede54f04b18061aeeca460d6c95c949e19e3cf2203080b2ca674077ca660b70f304db06a8b41828240827c42b0eae7cc257951ddf8d4d0e3c317247766f183836f537cc7b1ab1d7858d85718d1361ce685674548c719c03fc9a12b7f6dbcb9c1a8fb9cf479f01f92b3828b3e3f70eb5bd13ea2f1f26eb9d9654efa9bd0131a359d3675c70b901d5acf043574bfaae9a181c89139721c8c391c0c155000343eb2d82ba7550f4de530dab04999dc301bd8b92b92e0c3a44cd0c6665969004a038b243d0d9c65567b894cb06ed5ab1851054cfde1f5197701488e34b21d451efae6c2812b3589903d79f485be215fb1f64b1f00913a7a4674af2d3acbfd7972db8cbedc71907b46fcce96ab12866927b452631bb143cf037b35e63afcb9b4b0d52de519f062deb5c817a278ed35ef77f58489051df9022e75a40faf9f6ae722ed0976dc687e8404e8480129ad2e9a5db0dd33792acc574edcc61c065937f4766a3027ae7d31a6de9e5b1b49095e83729e001bcf6c40f9ba84aea98d45a1d68772dafdbaf02c161a035f33578a2605600e5fe6723c4340fa1ebc5773ca0f8012c598712cd0090377c14b8c6c634c698381ada1ca0b2ce551351cf3f4d4dfaac15490de96d1ce59c6bd9a586b982fd4a927c10f0285e832937f6ebf30a0342100fee90c45fde1e5680061fc076a920ab844c158cea9b3fdde082cea4a30218abbf5d134592105c0b8e83677f49128c4b4befa41348576b4223c256ab75820ed5e6e86c403ae4d098a07a74e2f65fe7db9caf8410a900ffe7a696daee3e9cb30cd19cff2d7917095022f7db8b6280e41ecc58461b14125d4df0de8c33cf233d849669dc3827ddc4cb8fdc96a7ddd229388148314f7d18039b10a44d023c6afbf3a81cf4ecb3af7817c3dc43126cff58bbe5498544e97e901e6fec67657cff11788e37eb26239edee5d727694af8c9b459df94b00b6759723c3b68bedb7ecd109234429a83dbf841c05e3e89f7e33144f951c25cf8188c33c129f23e952076942efdfc5f785ca90794fee4f73f5a45fde0aa17fb29d7e70fe72a11c6d", @typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}]}, 0x1118}, {&(0x7f00000015c0)={0x184, 0x17, 0x400, 0x70bd28, 0x25dfdbff, "", [@nested={0x174, 0xfc, 0x0, 0x1, [@generic="c40ad396db004dab1c78a08d796c3f1aa03bf35df36c05487c261938d084120bb609b25db784b4a1801c798460d242bc6bd1ada493d5c25b5b8c9bc9b874c54ddfc8ede304673692d269b6f99d0459b03601c9acbcbd58b627b4bf0ad46cc43c25f6204c74d191b61878c7ca75bccc1ceeea2ffff02485694fc76617f8dd2f903ccb248e7dede68011afcd20fa7ee71c76c11ed1d5f6156f44a82460f9157eb93fa1b48d75e420099bc26f1ae0bfad9fde4072d27b73790cc9514ec53733c90a8a970c46c33d04", @nested={0x4, 0x71}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r0}, @generic="d7b113", @nested={0x4, 0x81}, @typed={0x9, 0x7e, 0x0, 0x0, @str='lzjh\x00'}, @generic="4c9e6bb9760dae0437286f008187de30c46bcf9d469257646139f85b23203df8a868dda8248e8f0472f84d92f18ad2c49e3f2a5249ac79563e17bab9e549f7dea8f7185cecf5b0bac91260cd67c1ced7e7703c136a65b44c9d61f7042d14582a9f6f7790a58889834084b1e265dc5a3f5574d9039cdfd2a3defd287cb6e1", @nested={0x4, 0xc}, @nested={0x4, 0xd7}, @nested={0x4, 0x59}]}]}, 0x184}, {&(0x7f0000000240)={0x1c, 0x20, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0xc, 0xe5, 0x0, 0x1, [@nested={0x4, 0x142}, @nested={0x4, 0x24}]}]}, 0x1c}, {&(0x7f0000001780)={0x54, 0x31, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@generic="221b6080d5af4fb0536c9b11605dd6ecb8a6b7da0d7ef18651d2e1d9e1f5b159a0d07e26f87edc2120088b45118c31e0349921f614ccd635df4d4ddcfbb0dc1f419622"]}, 0x54}], 0x5, 0x0, 0x0, 0x4048804}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) 1.299878174s ago: executing program 3 (id=2453): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x11c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "e7f09dfd0b9ff3eec48d75fe53c4f7d3d1d1a10d26971f5becbc5d761076de805e8b38a40ab068f608aad28ecb6a7732b30e768b0e82d355eba16f9c61fc5f6b7218b71143513836d427f5e2223a3a0ed03412a7288f72c23392a888b9c39cc54c8784e0eec25f754264e95244f060729b21a9ff7c948b79bea5fd69e2a2e3b4106c717472567fdf27fc0af2e2ee45d948c2f4c054420711c0001c2910d29c98826e2b1c44d8ef3d34c8719c4248e349963f5d0f70ec3214a893d4a0022e311fa9d255008acfd0"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x8) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="48ed16350a46", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x8, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x20040810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000580)={0x48, r5, 0xc1d, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1.153150494s ago: executing program 1 (id=2454): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xbb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.112842967s ago: executing program 2 (id=2455): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa6c"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r3, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 982.347273ms ago: executing program 1 (id=2456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r6, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, r8, 0x2f, 0x18, 0x4, @void, @value=r8}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0x3}, &(0x7f0000000680)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000010}, 0x4001) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r11, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r12}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex=r4, r8, 0x21, 0x20, 0x0, @void, @void, @void, @value=r12}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r10, @ANYBLOB="1400040070696d36726567300000000000000000080005000623f370a9001780f0ff0500daa1ca0b4c271f9874ee7b135aeb1326f712c8d078639b3469cd909ce397d60efd326cc7532c57449c992c35ece94804e8963aceb57979b6d5e20fb4832f1abd13a8998b0bc0554dbfa22ab9c8a67d9ba52e9d4b7901fd3c0838fb168635360b11124446616e449758eb0d91543363160653fa176b7f8fc47f036a3d7cff2d2ac8b5"], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x7) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 915.784744ms ago: executing program 3 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000001500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}}, 0x0) 607.154687ms ago: executing program 2 (id=2458): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x10}}, 0xc0) 572.88574ms ago: executing program 3 (id=2459): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x284, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x270, 0x1, [@m_skbedit={0x30, 0x19, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xfc, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xbf1, 0x8001, 0x4, 0xae5a, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x5, 0xe, 0x466e, 0x80000001}}]}, {0x9d, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9"}, {0xc}, {0xc}}}, @m_sample={0xb0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xef3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x40000009}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8001, 0x1, 0x0, 0x5}}]}, {0x31, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x30, 0x33, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x60, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffc, 0x2, 0x7, 0x7f, 0x8}, @broadcast, @rand_addr=0x64010101}}]}, {0x10, 0x6, "86fe02a44120c13541d04aaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x284}}, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x24d3, 0x2, 0x8, 0xe4000000}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) 501.046681ms ago: executing program 2 (id=2460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2c, 0x3, 0x40) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x20010, r0, 0xec5d3000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x40000c4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001200000005002a000000000008000300", @ANYRES32=r9, @ANYBLOB="060028"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010008004273a21d1d2ab39e0c11e5627c0300000000000000848ff22d8688359646c5936655841fba52b0077c13b76a552ea96b6fd9be2b908495036655f66624d7923575e067cfae80f6b919515845c599e2886a2ca8476f3acb95c207a4e4af05288d691bacdb46992df945dbbab07d32de4a202ef17411428c2095dd770eac0e4bbd67d0f8ca0b768844638fe71b", @ANYRES16=r8, @ANYBLOB="000426bd7000fddbdf250f00000005002e00010000000600280000000000"], 0x24}}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x4) (async) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r11, 0x6, 0x1c, 0x0, &(0x7f0000000140)) (async) close(0x4) 420.964534ms ago: executing program 1 (id=2461): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x80}]}}]}]}, 0x3c}}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xc}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 210.76623ms ago: executing program 1 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x48090) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x48090) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="2245069df09aebca04554a9c0b45aa7eeb6ee90531e049e6d34e0fe2c3", @ANYRES64=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r5) 140.947455ms ago: executing program 2 (id=2463): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="62daa1f3e2cf89479e33fd2f049c527341db5d1fe6513185a657858336a87de35f384024e8efcb63fd1c7ab1c501e7d3bf3f6118cd35e422445d9e2379dce8592e", 0x41}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}]}}]}, 0x38}}, 0x4000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 139.839939ms ago: executing program 3 (id=2464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b33, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xb8825000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="020000ffffffba000040000086ddb79842fa7e453e3570a86f7f1c1e205ba9406b3c95b016e99dbd67efb6932c709220eed326ddb389", 0x36, 0x4000000, &(0x7f0000000000)={0x11, 0x1a, r5, 0x1, 0xc, 0x6, @random="0021000400"}, 0x14) 66.22733ms ago: executing program 0 (id=1951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000005c0)={r7, 0xff, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e22, 0x9, @private0, 0x4}}, [0x1, 0xbc, 0x1fffc00000000, 0xf, 0x2, 0x0, 0x8001, 0x2, 0xffffffffffffffd8, 0xdb3a, 0x3, 0x7, 0x2, 0x3, 0xfffffffffffffba3]}, &(0x7f0000000040)=0x100) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000700)={r9}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={r9, 0x8c, "e9fdf9dc1795924dd52974a3d6ffcd81c6d5735b33c3fc252cae49e08d50ae7af4b7dbfbce8a098c4928a984c8c08e45bce378b63d23dc52fa777cf4593f747a0d95c1c5c98e6536cde459bec6e011840477aa4a715ad82aeb15ec5f1c2729208c5f5a152f6e8f609a22a0a128c02f4c119d3f823c0151620b102d5fed5675cdd7d35fc524624499309e25b2"}, &(0x7f0000000100)=0x94) read$alg(r2, &(0x7f0000000340)=""/29, 0x1d) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135", 0x1e}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x4804) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) 0s ago: executing program 1 (id=2465): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0xc}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) kernel console output (not intermixed with test programs): 139.714239][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.729308][ T9452] bond1: entered promiscuous mode [ 139.738371][ T9447] netlink: 'syz.1.956': attribute type 28 has an invalid length. [ 139.750877][ T9447] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 139.758680][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.768699][ T9447] netlink: 'syz.1.956': attribute type 28 has an invalid length. [ 139.769696][ T9452] bond1: entered allmulticast mode [ 139.776538][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.776696][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.800091][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.809312][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.818734][ T9447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.956'. [ 139.835879][ T9452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.268486][ T9474] openvswitch: netlink: nsh attr 6564 is out of range max 3 [ 140.298339][ T9474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.843893][ T9508] geneve2: entered promiscuous mode [ 140.880524][ T9508] geneve2: entered allmulticast mode [ 141.234917][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 142.032046][ T9574] openvswitch: netlink: IPv4 tun info is not correct [ 142.616789][ T9601] sctp: [Deprecated]: syz.4.1012 (pid 9601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.616789][ T9601] Use struct sctp_sack_info instead [ 142.665669][ T9607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.869676][ T9620] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 143.884180][ T9683] __nla_validate_parse: 67 callbacks suppressed [ 143.884197][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 144.089550][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 144.138312][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1038'. [ 144.175884][ T9690] delete_channel: no stack [ 144.423755][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 144.439850][ T9709] sit1: entered promiscuous mode [ 144.450368][ T9709] sit1: entered allmulticast mode [ 144.511697][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 144.542811][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 144.555088][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 144.590618][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 144.605438][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 144.631159][ T9713] validate_nla: 128 callbacks suppressed [ 144.631176][ T9713] netlink: 'syz.3.1046': attribute type 3 has an invalid length. [ 144.654841][ T9721] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1046'. [ 144.907908][ T9739] netlink: 'syz.2.1052': attribute type 21 has an invalid length. [ 145.136560][ T9752] batadv_slave_1: entered promiscuous mode [ 145.164365][ T9751] batadv_slave_1: left promiscuous mode [ 145.351941][ T9759] smc: net device bond0 applied user defined pnetid SYZ0 [ 145.372435][ T9759] smc: net device bond0 erased user defined pnetid SYZ0 [ 145.483485][ T9759] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 145.550586][ T9759] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 145.717022][ T9779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.950299][ T9792] bridge2: entered promiscuous mode [ 145.971863][ T9793] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4. [ 145.987292][ T9792] bridge2: entered allmulticast mode [ 146.011382][ T9792] team0: Port device bridge2 added [ 146.104411][ T9793] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 147.268842][ T9853] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 147.424900][ T9859] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 147.634605][ T9853] veth7: entered promiscuous mode [ 147.649208][ T9853] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 147.887237][ T9871] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 147.907233][ T9871] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 147.945290][ T9883] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 147.985002][ T9883] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 148.057855][ T9899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.092355][ T9899] batadv0: mtu less than device minimum [ 148.126702][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.139274][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.151927][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.164316][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.176837][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.189460][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.201885][ T9899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.263239][ T9925] netlink: 'syz.4.1101': attribute type 4 has an invalid length. [ 148.266445][ T9899] batadv_slave_0: entered promiscuous mode [ 148.277932][ T9899] batadv_slave_0: entered allmulticast mode [ 148.328193][ T9929] netlink: 'syz.4.1101': attribute type 4 has an invalid length. [ 148.784278][ T9954] unsupported nlmsg_type 40 [ 148.914611][ T9966] geneve2: entered promiscuous mode [ 148.928177][ T9966] geneve2: entered allmulticast mode [ 149.042284][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 149.052890][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.065775][ T9968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 149.078300][ T9968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.579225][ T9996] netlink: 'syz.0.1126': attribute type 4 has an invalid length. [ 149.588980][ T9996] __nla_validate_parse: 11 callbacks suppressed [ 149.588997][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 149.744189][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.790710][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.825764][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.860721][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.900300][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.933269][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.944267][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 149.997055][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 150.110995][T10004] netlink: 77 bytes leftover after parsing attributes in process `syz.4.1129'. [ 150.224027][T10033] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 150.451334][T10047] netlink: 'syz.0.1142': attribute type 62 has an invalid length. [ 150.472334][T10038] raw_sendmsg: syz.1.1140 forgot to set AF_INET. Fix it! [ 150.654212][T10056] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 150.784269][T10056] bond3: entered promiscuous mode [ 150.807457][T10056] bond3: entered allmulticast mode [ 151.083113][T10082] net_ratelimit: 13 callbacks suppressed [ 151.083131][T10082] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 151.262088][T10088] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 151.292056][T10087] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 151.494175][T10105] block nbd0: Unsupported socket: shutdown callout must be supported. [ 151.595867][T10104] netlink: 'syz.4.1164': attribute type 21 has an invalid length. [ 151.730501][T10114] IPVS: ip_vs_add_dest(): server weight less than zero [ 151.783864][T10117] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 152.109929][T10141] sctp: [Deprecated]: syz.0.1174 (pid 10141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.109929][T10141] Use struct sctp_sack_info instead [ 152.233623][T10149] block nbd1: not configured, cannot reconfigure [ 152.656301][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.748849][T10177] netlink: 'syz.3.1187': attribute type 7 has an invalid length. [ 153.251790][T10210] xt_NFQUEUE: number of total queues is 0 [ 153.502259][ T29] audit: type=1800 audit(1739932614.355:5): pid=10218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1198" name="memory.events" dev="tmpfs" ino=1219 res=0 errno=0 [ 153.561320][T10227] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 153.679301][T10230] geneve2: entered promiscuous mode [ 153.711453][T10230] geneve2: entered allmulticast mode [ 153.804005][T10239] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.824476][T10239] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.834519][T10239] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.860118][T10239] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.870232][T10239] geneve2: entered promiscuous mode [ 153.876252][T10239] geneve2: entered allmulticast mode [ 153.884383][T10239] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.898192][T10239] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.909563][T10239] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.919801][T10239] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.972132][T10246] wg1 speed is unknown, defaulting to 1000 [ 153.989765][T10246] wg1 speed is unknown, defaulting to 1000 [ 154.012894][T10246] wg1 speed is unknown, defaulting to 1000 [ 154.344206][ T5914] wg1 speed is unknown, defaulting to 1000 [ 154.354943][T10246] infiniband syz0: set active [ 154.359882][T10246] infiniband syz0: added wg1 [ 154.412751][T10246] syz0: rxe_create_cq: returned err = -12 [ 154.420861][T10246] infiniband syz0: Couldn't create ib_mad CQ [ 154.438646][T10246] infiniband syz0: Couldn't open port 1 [ 154.484409][T10273] openvswitch: netlink: Message has 1275 unknown bytes. [ 154.492371][T10273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.534141][T10246] RDS/IB: syz0: added [ 154.546470][T10246] smc: adding ib device syz0 with port count 1 [ 154.553077][T10246] smc: ib device syz0 port 1 has pnetid [ 154.586823][ T5914] wg1 speed is unknown, defaulting to 1000 [ 154.598786][T10246] wg1 speed is unknown, defaulting to 1000 [ 154.801134][T10286] __nla_validate_parse: 76 callbacks suppressed [ 154.801154][T10286] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1220'. [ 154.828286][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 154.842090][T10286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.857920][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 155.013438][T10246] wg1 speed is unknown, defaulting to 1000 [ 155.179905][T10294] dccp_close: ABORT with 292 bytes unread [ 155.276161][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 155.370562][T10246] wg1 speed is unknown, defaulting to 1000 [ 155.395250][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 155.669598][T10246] wg1 speed is unknown, defaulting to 1000 [ 155.707332][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1230'. [ 155.801772][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 155.947848][T10246] wg1 speed is unknown, defaulting to 1000 [ 156.221565][T10340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1237'. [ 156.357787][T10348] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.393868][T10354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1240'. [ 156.533091][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'. [ 157.043631][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 157.053812][T10387] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 157.089608][T10389] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 157.099575][T10387] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 157.114277][T10389] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 157.191875][T10393] : entered promiscuous mode [ 157.512389][T10414] sctp: [Deprecated]: syz.0.1264 (pid 10414) Use of int in maxseg socket option. [ 157.512389][T10414] Use struct sctp_assoc_value instead [ 157.599667][T10416] vxcan1: entered allmulticast mode [ 157.668453][T10426] sctp: [Deprecated]: syz.2.1267 (pid 10426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.668453][T10426] Use struct sctp_sack_info instead [ 158.200455][T10451] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 158.293117][T10451] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.502844][T10451] batman_adv: batadv0: Removing interface: dummy0 [ 158.691396][T10461] tipc: Started in network mode [ 158.748569][T10461] tipc: Node identity ac1414aa, cluster identity 4711 [ 158.778431][T10461] tipc: Enabled bearer , priority 10 [ 159.282213][ T29] audit: type=1107 audit(1739932620.135:6): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.289130][ T29] audit: type=1107 audit(1739932620.145:7): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 159.443953][T10499] lo: entered promiscuous mode [ 159.654486][T10499] tunl0: entered promiscuous mode [ 159.677409][T10499] gre0: entered promiscuous mode [ 159.687058][T10499] gre0: left allmulticast mode [ 159.693609][T10499] gretap0: entered promiscuous mode [ 159.719703][T10499] erspan0: entered promiscuous mode [ 159.747277][T10499] ip_vti0: entered promiscuous mode [ 159.766732][ T5914] tipc: Node number set to 2886997162 [ 159.771520][T10503] lo speed is unknown, defaulting to 1000 [ 159.817723][T10503] lo speed is unknown, defaulting to 1000 [ 159.826975][T10503] lo speed is unknown, defaulting to 1000 [ 159.889138][T10503] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.922521][T10503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.947103][T10521] netlink: 'syz.1.1294': attribute type 5 has an invalid length. [ 160.056834][T10503] lo speed is unknown, defaulting to 1000 [ 160.088100][T10503] lo speed is unknown, defaulting to 1000 [ 160.127082][T10503] lo speed is unknown, defaulting to 1000 [ 160.175332][T10503] lo speed is unknown, defaulting to 1000 [ 160.188057][T10503] lo speed is unknown, defaulting to 1000 [ 160.257498][T10536] __nla_validate_parse: 6 callbacks suppressed [ 160.257514][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 160.406830][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 160.493332][T10554] vlan3: entered promiscuous mode [ 160.508637][T10554] vlan3: entered allmulticast mode [ 160.514119][T10554] hsr_slave_1: entered allmulticast mode [ 160.647447][T10563] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 160.939140][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1313'. [ 161.037321][T10587] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 162.043973][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 162.053319][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 162.113883][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 162.244576][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 162.261841][T10641] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 162.312794][T10641] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1331'. [ 162.343833][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 162.354809][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 162.430572][T10643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1332'. [ 162.637010][T10662] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 162.836592][T10665] wg1 speed is unknown, defaulting to 1000 [ 162.837925][T10673] lo: entered allmulticast mode [ 162.889770][T10673] lo: left allmulticast mode [ 162.904129][T10681] dccp_invalid_packet: P.Data Offset(0) too small [ 162.920507][T10680] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.929970][T10680] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.938818][T10680] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.947616][T10680] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.034520][T10685] dccp_invalid_packet: P.Data Offset(0) too small [ 163.199079][T10665] lo speed is unknown, defaulting to 1000 [ 163.703901][T10724] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 164.675699][T10772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.175225][T10806] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 165.400082][T10816] __nla_validate_parse: 8 callbacks suppressed [ 165.400099][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 165.429651][T10822] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 165.470058][T10825] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 165.676488][T10830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1391'. [ 165.749331][T10837] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1394'. [ 165.831051][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 165.861342][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 166.160101][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 166.170832][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 166.540286][T10897] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.853591][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 166.893047][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1416'. [ 166.955709][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1416'. [ 167.002254][ T29] audit: type=1800 audit(1739932627.855:8): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1418" name="memory.events" dev="tmpfs" ino=1454 res=0 errno=0 [ 167.033238][ T29] audit: type=1804 audit(1739932627.885:9): pid=10927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1418" name="/newroot/281/memory.events" dev="tmpfs" ino=1454 res=1 errno=0 [ 167.213137][T10935] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.242463][T10935] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 167.272880][T10935] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 167.393647][T10947] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 167.402472][T10947] netlink: 'syz.0.1422': attribute type 2 has an invalid length. [ 167.415488][ T52] IPVS: starting estimator thread 0... [ 167.518768][T10953] IPVS: using max 24 ests per chain, 57600 per kthread [ 167.954178][T10983] netlink: 'syz.1.1435': attribute type 2 has an invalid length. [ 168.185180][T10997] netlink: 'syz.1.1440': attribute type 12 has an invalid length. [ 168.531443][T11020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.531594][T11019] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 168.586437][T11022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.750009][T11031] delete_channel: no stack [ 168.958894][T11042] sock: sock_set_timeout: `syz.2.1456' (pid 11042) tries to set negative timeout [ 169.418426][T11068] syz.2.1467 (11068) used greatest stack depth: 16784 bytes left [ 169.594445][T11078] lo: entered promiscuous mode [ 169.601735][T11078] netlink: 'syz.2.1469': attribute type 2 has an invalid length. [ 169.625241][T11078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.785787][T11093] netlink: 'syz.2.1475': attribute type 32 has an invalid length. [ 169.920738][T11100] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 169.936591][T11100] 0ªÃøÂFNð¡: entered allmulticast mode [ 170.270501][T11118] openvswitch: netlink: Key type 71 is out of range max 32 [ 170.307588][T11118] Bluetooth: MGMT ver 1.23 [ 170.617571][T11135] netlink: zone id is out of range [ 170.627948][T11135] netlink: zone id is out of range [ 170.642263][T11135] netlink: zone id is out of range [ 170.649736][T11135] netlink: del zone limit has 8 unknown bytes [ 170.662588][T11135] syz.4.1490 uses old SIOCAX25GETINFO [ 170.790330][T11146] netlink: 'syz.1.1494': attribute type 24 has an invalid length. [ 172.428442][T11162] __nla_validate_parse: 14 callbacks suppressed [ 172.428459][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 172.516458][T11169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 172.530297][T11170] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1500'. [ 172.860387][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 172.918960][T11191] netlink: 'syz.1.1505': attribute type 30 has an invalid length. [ 173.036673][T11200] xt_TCPMSS: Only works on TCP SYN packets [ 173.232418][T11207] x_tables: ip_tables: osf match: only valid for protocol 6 [ 173.657350][T11238] netlink: 'syz.4.1521': attribute type 10 has an invalid length. [ 173.717775][T11238] team0: Cannot enslave team device to itself [ 173.727192][T11242] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1523'. [ 173.862050][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 174.051220][T11258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'. [ 174.134164][T11266] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 174.142329][T11266] netlink: 'syz.1.1529': attribute type 2 has an invalid length. [ 174.192763][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 174.219784][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 174.441207][T11279] netlink: 'syz.1.1533': attribute type 2 has an invalid length. [ 174.730294][T11291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1536'. [ 175.009550][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 175.045289][T11306] netlink: 'syz.1.1542': attribute type 5 has an invalid length. [ 175.893687][T11364] nbd: must specify a device to reconfigure [ 176.090570][T11371] net_ratelimit: 1 callbacks suppressed [ 176.090658][T11371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.487762][T11391] batman_adv: batadv0: Interface deactivated: dummy0 [ 176.494548][T11391] batman_adv: batadv0: Removing interface: dummy0 [ 176.654158][T11391] batadv0 (unregistering): left allmulticast mode [ 176.899803][T11413] ipt_REJECT: TCP_RESET invalid for non-tcp [ 177.063051][T11423] netlink: 'syz.1.1574': attribute type 4 has an invalid length. [ 177.086220][T11426] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.111798][T11425] batadv0: entered allmulticast mode [ 177.141876][T11424] batadv0: entered allmulticast mode [ 177.458292][T11441] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 177.489073][T11441] __nla_validate_parse: 14 callbacks suppressed [ 177.489091][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 177.670469][T11458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1589'. [ 177.714066][T11464] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 177.906034][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 177.919079][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 177.928583][T11476] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1593'. [ 177.949761][T11475] wg1 speed is unknown, defaulting to 1000 [ 177.987072][T11482] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1594'. [ 178.012005][T11482] netlink: get zone limit has 8 unknown bytes [ 178.129097][T11488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1595'. [ 178.232083][T11497] netlink: 4116 bytes leftover after parsing attributes in process `syz.1.1596'. [ 178.242839][T11497] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.370239][T11475] lo speed is unknown, defaulting to 1000 [ 178.676495][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1601'. [ 179.079690][T11543] xt_time: unknown flags 0x4 [ 179.172338][T11551] netlink: 'syz.0.1610': attribute type 4 has an invalid length. [ 179.850224][T11586] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 179.872894][T11593] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 180.038030][T11603] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 180.053925][T11603] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 180.154136][T11611] ieee802154 phy0 wpan0: encryption failed: -90 [ 180.204404][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 180.242267][T11611] Cannot find set identified by id 0 to match [ 180.527781][T11632] x_tables: duplicate underflow at hook 3 [ 180.553817][T11632] veth0_to_hsr: entered promiscuous mode [ 181.258408][T11674] netlink: 'syz.4.1651': attribute type 21 has an invalid length. [ 181.327792][T11626] veth0_to_hsr: left promiscuous mode [ 181.497652][T11686] net veth1_virt_wifi : renamed from virt_wifi0 [ 181.709342][T11696] netlink: 'syz.2.1659': attribute type 2 has an invalid length. [ 181.721460][T11695] IPv6: sit1: Disabled Multicast RS [ 181.731929][T11695] sit1: entered allmulticast mode [ 181.875109][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 182.206047][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.508598][T11742] __nla_validate_parse: 7 callbacks suppressed [ 182.508617][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1670'. [ 182.545889][T11741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1669'. [ 182.617614][T11741] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 182.766947][T11741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.825390][T11758] bond2: (slave gretap1): making interface the new active one [ 182.831594][T11763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.836247][T11758] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 183.066557][T11772] netlink: 'syz.0.1677': attribute type 4 has an invalid length. [ 183.125986][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 183.165295][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 183.433957][T11804] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 183.491230][T11805] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1686'. [ 183.567707][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1686'. [ 184.008345][T11840] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1695'. [ 184.061822][T11840] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 184.245512][T11852] ip6erspan0: entered promiscuous mode [ 184.966578][T11894] macvlan0: entered allmulticast mode [ 184.982317][T11894] veth1_vlan: entered allmulticast mode [ 185.081062][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 185.081991][T11903] IPVS: length: 157 != 24 [ 185.449077][T11922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.474235][T11926] Cannot find add_set index 0 as target [ 185.738779][T11944] tipc: Enabling of bearer rejected, failed to enable media [ 186.695420][T11994] netlink: 'syz.2.1731': attribute type 13 has an invalid length. [ 186.732909][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1731'. [ 186.786178][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 186.840148][T12006] vlan3: entered allmulticast mode [ 186.897704][T11961] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 187.195389][T12017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.436673][T12042] netlink: 'syz.1.1741': attribute type 1 has an invalid length. [ 187.464117][T12042] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 187.502471][T12042] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 187.540962][T12042] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 187.565524][T12042] bond2: (slave vti0): making interface the new active one [ 187.583276][T12053] netlink: 'syz.0.1740': attribute type 24 has an invalid length. [ 187.599799][T12042] bond2: (slave vti0): Enslaving as an active interface with an up link [ 187.599964][T12054] __nla_validate_parse: 41 callbacks suppressed [ 187.599977][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1742'. [ 187.665653][T12056] netlink: 'syz.4.1743': attribute type 21 has an invalid length. [ 187.673556][T12056] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1743'. [ 187.674018][T12054] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 187.762401][T12054] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 188.057939][T12072] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 188.357688][T12092] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 188.391807][T12092] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1752'. [ 188.445161][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1752'. [ 188.483289][T12103] sctp: [Deprecated]: syz.1.1755 (pid 12103) Use of int in maxseg socket option. [ 188.483289][T12103] Use struct sctp_assoc_value instead [ 188.510396][T12092] xfrm2: entered promiscuous mode [ 188.538559][T12092] xfrm2: entered allmulticast mode [ 188.658510][T12112] wg1 speed is unknown, defaulting to 1000 [ 188.693247][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 188.792278][T12118] netlink: 'syz.3.1758': attribute type 7 has an invalid length. [ 188.803785][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 188.857745][T12122] macvlan2: entered promiscuous mode [ 188.871804][T12122] macvlan2: entered allmulticast mode [ 188.892973][T12122] bridge0: port 1(macvlan2) entered blocking state [ 188.907537][T12122] bridge0: port 1(macvlan2) entered disabled state [ 189.234397][T12112] lo speed is unknown, defaulting to 1000 [ 189.694532][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 189.698060][T12112] IPVS: You probably need to specify IP address on multicast interface. [ 189.739691][T12112] IPVS: Error connecting to the multicast addr [ 189.751271][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 190.140388][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 190.185754][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 190.553424][T12192] veth1_vlan (unregistering): left allmulticast mode [ 190.598479][T12192] macvlan0 (unregistering): left allmulticast mode [ 190.632961][T12194] syzkaller1: entered promiscuous mode [ 190.645069][T12194] syzkaller1: entered allmulticast mode [ 191.479382][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 191.479381][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 191.479431][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 193.316280][T12395] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 193.431741][T12398] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 193.715760][T12414] syzkaller1: entered promiscuous mode [ 193.737962][T12414] syzkaller1: entered allmulticast mode [ 194.342636][T12455] wg1 speed is unknown, defaulting to 1000 [ 194.368255][T12457] __nla_validate_parse: 4 callbacks suppressed [ 194.368272][T12457] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1834'. [ 194.516292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.529520][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.741131][T12472] lo: entered allmulticast mode [ 194.747101][T12472] netlink: 'syz.0.1841': attribute type 11 has an invalid length. [ 194.755195][T12472] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1841'. [ 194.835764][T12474] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 194.910426][T12477] xt_connbytes: Forcing CT accounting to be enabled [ 194.925189][T12477] --map-set only usable from mangle table [ 194.934520][T12455] lo speed is unknown, defaulting to 1000 [ 194.937669][T12477] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1844'. [ 195.255014][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 195.269809][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 195.634783][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 195.803590][T12515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.906628][T12523] netlink: 'syz.2.1855': attribute type 39 has an invalid length. [ 196.098031][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 196.113438][T12530] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1858'. [ 196.453030][T12551] netlink: 'syz.1.1862': attribute type 4 has an invalid length. [ 196.497417][T12551] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 196.548443][T12555] x_tables: duplicate underflow at hook 1 [ 196.964300][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 197.047550][T12585] netlink: 'syz.4.1871': attribute type 6 has an invalid length. [ 197.052312][T12586] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 197.083616][T12586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.179738][T12593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1873'. [ 197.672554][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1881'. [ 197.834644][T12638] netlink: 'syz.3.1885': attribute type 4 has an invalid length. [ 198.003110][T12654] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 198.108022][T12664] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 198.122463][T12654] team0: Device veth1_macvtap failed to register rx_handler [ 198.200227][T12664] team0: Device veth1_macvtap failed to register rx_handler [ 198.401487][T12677] netlink: 'syz.1.1895': attribute type 9 has an invalid length. [ 199.273453][T12734] gretap1: entered promiscuous mode [ 199.281323][T12734] gretap1: entered allmulticast mode [ 199.417387][T12742] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 199.437182][T12742] team0: Device veth0_macvtap failed to register rx_handler [ 199.830188][T12749] __nla_validate_parse: 6 callbacks suppressed [ 199.830207][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1909'. [ 199.944374][T12753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 200.247357][T12767] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.423659][T12773] xt_cgroup: path and classid specified [ 200.841625][T12793] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.928360][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 201.324234][T12821] validate_nla: 2 callbacks suppressed [ 201.324251][T12821] netlink: 'syz.0.1931': attribute type 21 has an invalid length. [ 201.351476][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1933'. [ 201.465823][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 201.663324][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 201.725951][T12845] vxcan2: entered allmulticast mode [ 202.175198][T12879] batadv_slave_1: entered allmulticast mode [ 202.304263][T12885] netlink: 'syz.4.1950': attribute type 6 has an invalid length. [ 202.981451][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 203.005541][T12917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 203.035887][T12923] netlink: 'syz.3.1960': attribute type 4 has an invalid length. [ 203.164522][T12927] ax25_connect(): syz.1.1962 uses autobind, please contact jreuter@yaina.de [ 203.176182][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.194167][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.204522][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.213623][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.221461][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.229124][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.262204][T12937] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1964'. [ 203.397649][T12926] ip6gre0: left allmulticast mode [ 203.456073][T12931] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 203.558771][T12928] wg1 speed is unknown, defaulting to 1000 [ 203.633192][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1968'. [ 203.650146][T12952] netlink: 'syz.4.1970': attribute type 4 has an invalid length. [ 203.757466][T12928] lo speed is unknown, defaulting to 1000 [ 204.570344][ T9914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.679828][T12928] chnl_net:caif_netlink_parms(): no params data found [ 204.771040][ T9914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.844169][T13028] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 204.967016][ T9914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.987247][T13035] __nla_validate_parse: 2 callbacks suppressed [ 204.987263][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 205.114317][ T8] IPVS: starting estimator thread 0... [ 205.140064][ T9914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.144511][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 205.166076][T13045] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1987'. [ 205.200636][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1988'. [ 205.215364][T13042] IPVS: using max 20 ests per chain, 48000 per kthread [ 205.299368][T13056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1990'. [ 205.314877][ T5849] Bluetooth: hci1: command tx timeout [ 205.371592][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1990'. [ 205.465531][T12928] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.476551][T12928] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.483885][T12928] bridge_slave_0: entered allmulticast mode [ 205.516198][T12928] bridge_slave_0: entered promiscuous mode [ 205.538476][T12928] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.573769][T12928] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.592875][T12928] bridge_slave_1: entered allmulticast mode [ 205.600583][T12928] bridge_slave_1: entered promiscuous mode [ 205.606846][T13069] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1991'. [ 205.636613][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'. [ 205.649409][T13073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1993'. [ 205.764137][T12928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.778826][T12928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.861363][T13079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1997'. [ 206.012435][ T9914] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 206.022007][ T9914] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - da:33:f7:10:f0:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 206.186500][ T9914] dvmrp0 (unregistering): left allmulticast mode [ 206.377146][ T9914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.388364][ T9914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.401103][ T9914] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 206.420511][ T9914] bond0 (unregistering): Released all slaves [ 206.548783][ T9914] bond1 (unregistering): Released all slaves [ 206.561904][ T9914] bond2 (unregistering): (slave veth7): Releasing backup interface [ 206.571526][ T9914] bond2 (unregistering): Released all slaves [ 206.582396][ T9914] bond3 (unregistering): Released all slaves [ 206.799654][T12928] team0: Port device team_slave_0 added [ 206.825816][ T9914] : left promiscuous mode [ 206.901765][T13093] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.911033][T13093] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.919933][T13093] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.928862][T13093] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.993590][T12928] team0: Port device team_slave_1 added [ 207.181666][T12928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.195463][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.228761][T12928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.298387][T12928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.334862][T12928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.398864][ T5849] Bluetooth: hci1: command tx timeout [ 207.414769][T12928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.642105][T12928] hsr_slave_0: entered promiscuous mode [ 207.672996][T12928] hsr_slave_1: entered promiscuous mode [ 207.682920][T12928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.692184][T12928] Cannot create hsr debugfs directory [ 208.102974][T13172] sctp: [Deprecated]: syz.3.2018 (pid 13172) Use of int in max_burst socket option. [ 208.102974][T13172] Use struct sctp_assoc_value instead [ 208.398975][T13181] tipc: Enabling of bearer rejected, failed to enable media [ 208.621805][T13189] x_tables: ip_tables: osf match: only valid for protocol 6 [ 208.658244][T13192] xt_CT: No such helper "pptp" [ 208.757070][ T9914] hsr_slave_0: left promiscuous mode [ 208.773586][ T9914] hsr_slave_1: left promiscuous mode [ 208.804065][ T9914] veth1_macvtap: left promiscuous mode [ 209.163174][ T9914] pim6reg527 (unregistering): left allmulticast mode [ 209.432783][ T9914] team0 (unregistering): Port device team_slave_1 removed [ 209.473610][ T9914] team0 (unregistering): Port device team_slave_0 removed [ 209.476075][ T5849] Bluetooth: hci1: command tx timeout [ 209.828156][ T9914] lo (unregistering): left allmulticast mode [ 210.331635][T13244] __nla_validate_parse: 6 callbacks suppressed [ 210.331651][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 210.580385][T12928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.684040][T12928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.717667][ T9914] IPVS: stop unused estimator thread 0... [ 210.760946][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2037'. [ 210.798845][T12928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.834508][T13271] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2037'. [ 210.859011][T13265] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.884522][T12928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.170708][T13289] wg1 speed is unknown, defaulting to 1000 [ 211.191479][T12928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.250397][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.282001][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.289166][ T9909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.376380][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.383525][ T9909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.548973][T13289] lo speed is unknown, defaulting to 1000 [ 211.555299][ T5849] Bluetooth: hci1: command tx timeout [ 212.114579][T12928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.336729][T12928] veth0_vlan: entered promiscuous mode [ 212.474160][T12928] veth1_vlan: entered promiscuous mode [ 212.688044][T12928] veth0_macvtap: entered promiscuous mode [ 212.730051][T12928] veth1_macvtap: entered promiscuous mode [ 212.790448][T12928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.836530][T12928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.907215][T12928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.956932][T12928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.970153][T12928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.999741][T12928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.348627][ T9907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.385663][ T9907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.438915][T13410] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2068'. [ 213.450519][ T9907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.482871][ T9907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.833214][T13436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2074'. [ 213.873581][T13436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2074'. [ 213.896065][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 213.959990][T13436] veth0: entered promiscuous mode [ 213.966429][T13435] veth0: left promiscuous mode [ 214.054431][T13444] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2077'. [ 214.096359][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2079'. [ 214.183631][ T52] IPVS: starting estimator thread 0... [ 214.189826][T13454] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.210340][ T9913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.286260][T13456] IPVS: using max 21 ests per chain, 50400 per kthread [ 214.340375][ T9913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.414266][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'. [ 214.650189][ T9913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.756335][T13478] ipt_ECN: cannot use operation on non-tcp rule [ 214.775580][T13481] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 214.798268][T13481] netlink: 'syz.3.2086': attribute type 2 has an invalid length. [ 214.914144][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.933606][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.951372][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.960590][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.971400][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.974236][ T9913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.990346][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.089572][T13483] wg1 speed is unknown, defaulting to 1000 [ 215.377852][T13499] __nla_validate_parse: 2 callbacks suppressed [ 215.377868][T13499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2092'. [ 215.407585][ T9913] bridge_slave_1: left allmulticast mode [ 215.425367][ T9913] bridge_slave_1: left promiscuous mode [ 215.458015][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.490649][T13500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2092'. [ 215.509525][ T9913] bridge_slave_0: left allmulticast mode [ 215.518084][T13503] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 215.529979][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.539435][ T9913] bridge_slave_0: left promiscuous mode [ 215.546393][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.656229][T13509] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 215.668160][T13509] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.2098'. [ 215.952018][ T9913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.963334][ T9913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.975157][ T9913] bond0 (unregistering): Released all slaves [ 215.998954][T13483] lo speed is unknown, defaulting to 1000 [ 216.697518][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 216.698694][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 216.715777][T13483] chnl_net:caif_netlink_parms(): no params data found [ 216.836163][ T9913] hsr_slave_0: left promiscuous mode [ 216.851186][ T9913] hsr_slave_1: left promiscuous mode [ 216.865577][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.889303][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.918378][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.930627][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.980908][ T9913] veth1_macvtap: left promiscuous mode [ 216.991658][ T9913] veth0_macvtap: left promiscuous mode [ 216.998715][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.008848][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.019943][ T9913] veth1_vlan: left promiscuous mode [ 217.025900][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.026150][ T9913] veth0_vlan: left promiscuous mode [ 217.043953][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.052027][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.063435][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.075205][ T5849] Bluetooth: hci1: command tx timeout [ 217.483535][ T9913] team0 (unregistering): Port device team_slave_1 removed [ 217.526605][ T9913] team0 (unregistering): Port device team_slave_0 removed [ 217.922116][T13548] bond0: (slave bond1): Releasing backup interface [ 217.947759][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.961798][T13548] team0: Port device bridge2 removed [ 217.971697][T13543] ip6erspan0: entered promiscuous mode [ 217.984279][T13549] team0: Mode "ø?õ)balance" not found [ 218.100737][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 218.158910][T13563] netlink: 'syz.1.2107': attribute type 11 has an invalid length. [ 218.309043][T13578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.421520][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.422340][T13555] wg1 speed is unknown, defaulting to 1000 [ 218.430552][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.488200][T13483] bridge_slave_0: entered allmulticast mode [ 218.509374][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2114'. [ 218.519260][T13483] bridge_slave_0: entered promiscuous mode [ 218.546697][T13588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2114'. [ 218.580950][T13580] netlink: 'syz.1.2113': attribute type 2 has an invalid length. [ 218.666222][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.673359][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.703092][T13483] bridge_slave_1: entered allmulticast mode [ 218.725322][T13483] bridge_slave_1: entered promiscuous mode [ 218.758872][T13555] lo speed is unknown, defaulting to 1000 [ 218.766233][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.822710][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.891163][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 218.936223][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.009381][T13483] team0: Port device team_slave_0 added [ 219.043543][T13483] team0: Port device team_slave_1 added [ 219.155066][ T5146] Bluetooth: hci1: command tx timeout [ 219.155502][ T5849] Bluetooth: hci0: command tx timeout [ 219.185545][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.192526][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.272935][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.372296][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.389137][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.422480][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.636619][T13483] hsr_slave_0: entered promiscuous mode [ 219.643104][T13483] hsr_slave_1: entered promiscuous mode [ 219.652042][T13483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.699820][T13483] Cannot create hsr debugfs directory [ 219.776408][T13636] x_tables: duplicate underflow at hook 3 [ 219.803409][ T9914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.022057][ T9914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.199641][ T9914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.377551][ T9914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.433648][ T940] wg1 speed is unknown, defaulting to 1000 [ 220.514625][T13555] chnl_net:caif_netlink_parms(): no params data found [ 220.659232][ T8] wg1 speed is unknown, defaulting to 1000 [ 221.070113][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.104949][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.112177][T13555] bridge_slave_0: entered allmulticast mode [ 221.156638][T13555] bridge_slave_0: entered promiscuous mode [ 221.235303][ T5146] Bluetooth: hci0: command tx timeout [ 221.241588][ T5849] Bluetooth: hci1: command tx timeout [ 221.353165][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.381446][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.399661][T13555] bridge_slave_1: entered allmulticast mode [ 221.419590][T13555] bridge_slave_1: entered promiscuous mode [ 221.513182][T13555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.599274][T13555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.772130][ T9914] tipc: Resetting bearer [ 221.779873][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 221.793676][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 222.013928][ T9914] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 222.315892][ T9914] tipc: Disabling bearer [ 222.446131][T13615] Set syz1 is full, maxelem 65536 reached [ 222.447359][ T9914] team0: Port device bridge2 removed [ 222.650320][ T9914] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 222.661768][ T9914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.673193][ T9914] bond0 (unregistering): Released all slaves [ 222.692290][ T9914] bond1 (unregistering): Released all slaves [ 222.706796][ T9914] bond2 (unregistering): Released all slaves [ 222.868787][ T9914] bond3 (unregistering): Released all slaves [ 222.998224][ T9914] bond4 (unregistering): Released all slaves [ 223.110527][ T9914] bond5 (unregistering): Released all slaves [ 223.127332][T13555] team0: Port device team_slave_0 added [ 223.153442][T13555] team0: Port device team_slave_1 added [ 223.325281][ T5849] Bluetooth: hci1: command tx timeout [ 223.330731][ T5849] Bluetooth: hci0: command tx timeout [ 223.363534][ T9914] tipc: Left network mode [ 223.369544][T13555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.376832][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.403319][T13555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.423358][T13555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.432232][T13555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.459778][T13555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.550503][T13483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.661591][T13483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.686296][T13483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.702952][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 223.720349][T13555] hsr_slave_0: entered promiscuous mode [ 223.732372][T13555] hsr_slave_1: entered promiscuous mode [ 223.739916][T13555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.747869][T13555] Cannot create hsr debugfs directory [ 223.782744][T13726] bridge0: port 1(macvlan2) entered disabled state [ 223.857230][T13483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.893094][T13734] net veth1_virt_wifi : renamed from virt_wifi0 [ 223.927344][T13726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.669183][T13776] Bluetooth: MGMT ver 1.23 [ 224.823213][ T9914] hsr_slave_0: left promiscuous mode [ 224.829490][ T9914] hsr_slave_1: left promiscuous mode [ 224.858074][ T9914] veth1_macvtap: left promiscuous mode [ 224.863656][ T9914] veth0_macvtap: left promiscuous mode [ 224.869882][ T9914] veth1_vlan: left promiscuous mode [ 224.878110][ T9914] veth0_vlan: left promiscuous mode [ 225.013944][ T9914] pimreg3 (unregistering): left allmulticast mode [ 225.050374][ T9914] pimreg (unregistering): left allmulticast mode [ 225.359987][ T9914] team0 (unregistering): Port device team_slave_1 removed [ 225.395669][ T5849] Bluetooth: hci0: command tx timeout [ 225.406521][ T9914] team0 (unregistering): Port device team_slave_0 removed [ 225.570643][ T9907] smc: removing ib device syz0 [ 225.664600][ T9914] vxcan1 (unregistering): left allmulticast mode [ 225.878654][T13793] netlink: 'syz.3.2156': attribute type 3 has an invalid length. [ 226.280023][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2160'. [ 226.369633][T13483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.549482][T13483] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.606477][T13815] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 226.677617][T13815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.712587][T13819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2163'. [ 226.718466][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.728697][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.793225][T13817] bond3: (slave gretap1): making interface the new active one [ 226.803870][T13817] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 226.852873][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.860056][ T9907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.024885][T13824] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 227.060281][T13825] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2164'. [ 227.134623][ T9914] IPVS: stop unused estimator thread 0... [ 227.320426][T13835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.413107][T13555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.462892][T13555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.497208][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.509814][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2167'. [ 227.515868][T13555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.551435][T13847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2167'. [ 227.560342][T13555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.648969][T13483] veth0_vlan: entered promiscuous mode [ 227.697831][T13483] veth1_vlan: entered promiscuous mode [ 227.828165][T13483] veth0_macvtap: entered promiscuous mode [ 227.863770][T13483] veth1_macvtap: entered promiscuous mode [ 227.909179][T13555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.934308][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.963564][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.974101][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.002195][T13483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.013541][T13483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.040773][T13483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.054115][T13483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.071175][T13866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2171'. [ 228.178699][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.185900][ T9913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.256405][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.263538][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.622039][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.678369][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.763634][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.796857][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.008239][T13555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.520905][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2187'. [ 229.603968][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.749840][T13555] veth0_vlan: entered promiscuous mode [ 229.816794][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.900233][T13555] veth1_vlan: entered promiscuous mode [ 229.998281][T13555] veth0_macvtap: entered promiscuous mode [ 230.101497][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.159362][T13972] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 230.173034][T13555] veth1_macvtap: entered promiscuous mode [ 230.184516][T13972] team0: Cannot enslave team device to itself [ 230.269784][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.329457][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 230.420237][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.456208][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.473495][T13555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.538415][T13555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.581152][T13555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.599753][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.608324][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.618441][T13555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.628175][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.638590][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.654384][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.663343][T13555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.672971][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.681364][T13555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.690680][T13555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.700505][T13555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.840380][T14004] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 230.850339][T14004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.882611][ T12] bridge_slave_1: left allmulticast mode [ 230.892642][ T12] bridge_slave_1: left promiscuous mode [ 230.913489][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.942622][ T12] bridge_slave_0: left allmulticast mode [ 230.953843][ T12] bridge_slave_0: left promiscuous mode [ 230.993764][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.076040][T14011] ieee802154 phy0 wpan0: encryption failed: -90 [ 231.360028][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.370573][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.381014][ T12] bond0 (unregistering): Released all slaves [ 231.443924][T13996] lo speed is unknown, defaulting to 1000 [ 231.593543][ T9909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.607865][ T9909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.668751][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.680453][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.803603][T14028] netlink: 'syz.3.2199': attribute type 3 has an invalid length. [ 231.939616][ T12] hsr_slave_0: left promiscuous mode [ 231.978476][ T12] hsr_slave_1: left promiscuous mode [ 231.984372][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.019938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.040049][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.050138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.084249][ T12] veth1_macvtap: left promiscuous mode [ 232.090918][ T12] veth0_macvtap: left promiscuous mode [ 232.099534][ T12] veth1_vlan: left promiscuous mode [ 232.105214][ T12] veth0_vlan: left promiscuous mode [ 232.759242][ T5849] Bluetooth: hci1: command tx timeout [ 232.794158][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.838846][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.489544][T13996] chnl_net:caif_netlink_parms(): no params data found [ 233.763317][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.781043][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.794445][T13996] bridge_slave_0: entered allmulticast mode [ 233.802351][T13996] bridge_slave_0: entered promiscuous mode [ 233.814844][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.822030][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.829841][T13996] bridge_slave_1: entered allmulticast mode [ 233.837586][T13996] bridge_slave_1: entered promiscuous mode [ 233.907326][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.968169][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.981847][T14084] IPVS: length: 8 != 1152 [ 234.173101][T13996] team0: Port device team_slave_0 added [ 234.232834][T13996] team0: Port device team_slave_1 added [ 234.352421][T14101] block nbd1: NBD_DISCONNECT [ 234.506756][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.526100][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.538810][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.547356][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.556766][ T5146] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.559756][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2214'. [ 234.579462][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.686834][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.709664][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.754518][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.850361][ T5146] Bluetooth: hci1: command tx timeout [ 234.899755][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.953777][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.960967][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.053210][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.135881][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.178480][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 235.209844][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 235.248718][T14143] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2222'. [ 235.269505][T14143] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 235.373292][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.467418][T13996] hsr_slave_0: entered promiscuous mode [ 235.485777][T13996] hsr_slave_1: entered promiscuous mode [ 235.493165][T13996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.506687][T13996] Cannot create hsr debugfs directory [ 235.512536][T14115] lo speed is unknown, defaulting to 1000 [ 235.569771][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.758775][T14176] bond0: Removing last ns target with arp_interval on [ 235.873166][T14182] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.913001][T14171] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2226'. [ 235.966399][ T12] bridge_slave_1: left allmulticast mode [ 235.972084][ T12] bridge_slave_1: left promiscuous mode [ 235.999656][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.039705][ T12] bridge_slave_0: left allmulticast mode [ 236.066521][ T12] bridge_slave_0: left promiscuous mode [ 236.088361][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.506331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.521980][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.534014][ T12] bond0 (unregistering): Released all slaves [ 236.676898][ T5146] Bluetooth: hci0: command tx timeout [ 236.709404][T14115] chnl_net:caif_netlink_parms(): no params data found [ 236.915532][ T5146] Bluetooth: hci1: command tx timeout [ 236.977238][T14224] openvswitch: netlink: Message has 1 unknown bytes. [ 237.280057][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 237.306369][T14239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.358922][T14251] Bluetooth: MGMT ver 1.23 [ 237.442452][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.478766][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.501824][T14115] bridge_slave_0: entered allmulticast mode [ 237.519691][T14115] bridge_slave_0: entered promiscuous mode [ 237.540861][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.553006][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.560409][T14115] bridge_slave_1: entered allmulticast mode [ 237.575845][T14115] bridge_slave_1: entered promiscuous mode [ 237.596356][ T12] hsr_slave_0: left promiscuous mode [ 237.603141][ T12] hsr_slave_1: left promiscuous mode [ 237.615073][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.622519][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.640143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.647996][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.690937][ T12] veth1_macvtap: left promiscuous mode [ 237.696910][ T12] veth0_macvtap: left promiscuous mode [ 237.703187][ T12] veth1_vlan: left promiscuous mode [ 237.708995][ T12] veth0_vlan: left promiscuous mode [ 237.781879][T14272] openvswitch: netlink: IP tunnel dst address not specified [ 238.189994][ T12] team0 (unregistering): Port device team_slave_1 removed [ 238.238752][ T12] team0 (unregistering): Port device team_slave_0 removed [ 238.753235][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.765118][ T5146] Bluetooth: hci0: command tx timeout [ 238.773543][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.794584][T14280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2244'. [ 239.064140][ T5146] Bluetooth: hci1: command tx timeout [ 239.157633][T14289] macvlan1: entered promiscuous mode [ 239.202223][T14115] team0: Port device team_slave_0 added [ 239.221059][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 239.234039][T14288] macvlan1: left promiscuous mode [ 239.251956][T14115] team0: Port device team_slave_1 added [ 239.437589][T13996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.456335][T13996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.470647][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.488026][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.527514][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.560242][T13996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.571227][T13996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.582211][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.590109][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.621768][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.789279][T14115] hsr_slave_0: entered promiscuous mode [ 239.797439][T14115] hsr_slave_1: entered promiscuous mode [ 239.803890][T14115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.812406][T14115] Cannot create hsr debugfs directory [ 239.828356][T14315] xfrm3: entered allmulticast mode [ 239.979035][T14323] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2253'. [ 240.192054][T14330] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2254'. [ 240.226300][T14330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.243802][T13996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.282600][T13996] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.317462][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.324694][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.344330][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.351495][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.423541][T13996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.580855][T14115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.601498][T14115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.616207][T14115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.637876][T14115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.763236][T13996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.827876][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.835156][ T5146] Bluetooth: hci0: command tx timeout [ 240.869616][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 240.879199][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2256'. [ 240.901582][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.931591][T13996] veth0_vlan: entered promiscuous mode [ 240.950110][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.957288][ T9907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.990498][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.997663][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.017859][T13996] veth1_vlan: entered promiscuous mode [ 241.085539][T14366] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 241.103010][T13996] veth0_macvtap: entered promiscuous mode [ 241.111102][T14366] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2258'. [ 241.129835][T13996] veth1_macvtap: entered promiscuous mode [ 241.198425][T13996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.223814][T14366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2258'. [ 241.227145][T13996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.303291][T13996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.320757][T13996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.333139][T13996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.343798][T13996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.434013][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.585361][ T9907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.593224][ T9907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.684191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.702247][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.722616][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 241.738025][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 242.066645][T14115] veth0_vlan: entered promiscuous mode [ 242.103990][T14115] veth1_vlan: entered promiscuous mode [ 242.180159][T14115] veth0_macvtap: entered promiscuous mode [ 242.210150][T14115] veth1_macvtap: entered promiscuous mode [ 242.262799][T14115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.285279][T14115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.302766][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.313364][T14115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.332126][T14115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.347788][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.364591][T14115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.379335][T14115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.400632][T14115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.419338][T14115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.561377][T14431] nbd: must specify at least one socket [ 242.698977][ T9913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.869501][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.880428][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.913054][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.921943][ T5146] Bluetooth: hci0: command tx timeout [ 242.933664][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.020233][ T9913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.357005][T14466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2269'. [ 243.590691][ T9913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.774271][ T9913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.829190][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 243.956769][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.966877][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.999845][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.007857][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.025181][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.026293][T14503] netlink: 'syz.2.2276': attribute type 11 has an invalid length. [ 244.042071][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.182994][T14495] lo speed is unknown, defaulting to 1000 [ 244.324880][ T9913] bridge_slave_1: left allmulticast mode [ 244.330642][ T9913] bridge_slave_1: left promiscuous mode [ 244.341083][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.360838][ T9913] bridge_slave_0: left allmulticast mode [ 244.370101][ T9913] bridge_slave_0: left promiscuous mode [ 244.378131][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.501408][T14515] nftables ruleset with unbound chain [ 244.686477][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.701561][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.710149][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.719383][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.736315][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.745772][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.880989][T14529] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 245.000320][ T9913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.012095][ T9913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.022529][ T9913] bond0 (unregistering): Released all slaves [ 245.037947][T14512] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 245.038590][T14516] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 245.112065][T14522] lo speed is unknown, defaulting to 1000 [ 245.355622][T14543] __nla_validate_parse: 5 callbacks suppressed [ 245.355640][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 245.414403][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 245.439621][T14495] chnl_net:caif_netlink_parms(): no params data found [ 245.468334][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2286'. [ 245.510366][ T9913] hsr_slave_0: left promiscuous mode [ 245.527396][ T9913] hsr_slave_1: left promiscuous mode [ 245.549597][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.573802][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.651393][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.685992][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.733214][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2288'. [ 245.766976][ T9913] veth1_macvtap: left promiscuous mode [ 245.786234][ T9913] veth0_macvtap: left promiscuous mode [ 245.795801][ T9913] veth1_vlan: left promiscuous mode [ 245.802766][ T9913] veth0_vlan: left promiscuous mode [ 245.885513][T14575] netlink: 'syz.1.2291': attribute type 1 has an invalid length. [ 245.893288][T14575] netlink: 'syz.1.2291': attribute type 2 has an invalid length. [ 245.929929][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 246.125092][ T5849] Bluetooth: hci0: command tx timeout [ 246.147414][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 246.546153][ T9913] team0 (unregistering): Port device team_slave_1 removed [ 246.584136][ T9913] team0 (unregistering): Port device team_slave_0 removed [ 246.839391][ T5849] Bluetooth: hci1: command tx timeout [ 247.018532][T14599] batadv_slave_1: entered promiscuous mode [ 247.128056][T14605] x_tables: duplicate underflow at hook 1 [ 247.212276][T14614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.259109][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 247.348296][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.359263][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.367990][T14495] bridge_slave_0: entered allmulticast mode [ 247.379716][T14495] bridge_slave_0: entered promiscuous mode [ 247.431452][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.451182][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.479121][T14495] bridge_slave_1: entered allmulticast mode [ 247.488369][T14495] bridge_slave_1: entered promiscuous mode [ 247.618895][T14522] chnl_net:caif_netlink_parms(): no params data found [ 247.672020][T14495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.700766][T14495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.901416][T14495] team0: Port device team_slave_0 added [ 247.956769][T14495] team0: Port device team_slave_1 added [ 248.085170][T14495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.092237][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.120634][T14495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.185492][T14495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.193589][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.220164][T14495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.221393][ T5849] Bluetooth: hci0: command tx timeout [ 248.236505][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2311'. [ 248.255502][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.275016][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.282304][T14522] bridge_slave_0: entered allmulticast mode [ 248.291947][T14522] bridge_slave_0: entered promiscuous mode [ 248.400826][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 248.497900][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 248.517647][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.526343][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.533599][T14522] bridge_slave_1: entered allmulticast mode [ 248.541008][T14522] bridge_slave_1: entered promiscuous mode [ 248.606753][ T9913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.650863][T14670] : entered promiscuous mode [ 248.736661][ T9913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.799567][T14674] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.810442][T14674] tipc: Enabled bearer , priority 10 [ 248.874118][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.916686][ T5849] Bluetooth: hci1: command tx timeout [ 248.934913][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.961952][ T9913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.999047][T14495] hsr_slave_0: entered promiscuous mode [ 249.015880][T14495] hsr_slave_1: entered promiscuous mode [ 249.038273][T14495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.066105][T14495] Cannot create hsr debugfs directory [ 249.074149][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.075128][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.131836][ T9913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.214955][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.255071][T14704] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 249.276306][T14704] IPVS: set_ctl: invalid protocol: 105 224.0.0.2:20000 [ 249.295963][T14706] openvswitch: netlink: Flow key attribute not present in set flow. [ 249.318637][T14522] team0: Port device team_slave_0 added [ 249.325759][T14708] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 249.354856][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.494854][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.517392][T14522] team0: Port device team_slave_1 added [ 249.634905][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.644145][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.668675][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.702301][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.723248][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.741443][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.768087][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.778784][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.914843][ T975] tipc: Node number set to 3634549440 [ 249.996638][T14522] hsr_slave_0: entered promiscuous mode [ 250.010712][T14522] hsr_slave_1: entered promiscuous mode [ 250.020649][T14522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.038891][T14522] Cannot create hsr debugfs directory [ 250.072518][ T9913] bridge_slave_1: left allmulticast mode [ 250.081532][ T9913] bridge_slave_1: left promiscuous mode [ 250.094473][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.104413][ T9913] bridge_slave_0: left allmulticast mode [ 250.116626][ T9913] bridge_slave_0: left promiscuous mode [ 250.122363][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.285080][ T5146] Bluetooth: hci0: command tx timeout [ 250.461133][ T9913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.472620][ T9913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.483299][ T9913] bond0 (unregistering): Released all slaves [ 250.683914][T14755] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 250.764583][T14762] netlink: 'syz.2.2330': attribute type 4 has an invalid length. [ 250.962967][ T975] lo speed is unknown, defaulting to 1000 [ 250.969812][ T5888] lo speed is unknown, defaulting to 1000 [ 250.970132][T14773] __nla_validate_parse: 4 callbacks suppressed [ 250.970147][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 251.003605][ T5146] Bluetooth: hci1: command tx timeout [ 251.121152][T14782] netlink: 'syz.3.2334': attribute type 8 has an invalid length. [ 251.303838][T14790] netlink: 'syz.2.2336': attribute type 4 has an invalid length. [ 251.429930][ T9913] hsr_slave_0: left promiscuous mode [ 251.439987][ T9913] hsr_slave_1: left promiscuous mode [ 251.449498][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.460542][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 251.464371][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.487905][ T9913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.501599][ T9913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.524432][ T9913] veth1_macvtap: left promiscuous mode [ 251.530172][ T9913] veth0_macvtap: left promiscuous mode [ 251.535932][ T9913] veth1_vlan: left promiscuous mode [ 251.541326][ T9913] veth0_vlan: left promiscuous mode [ 251.960895][ T9913] team0 (unregistering): Port device team_slave_1 removed [ 252.000500][ T9913] team0 (unregistering): Port device team_slave_0 removed [ 252.365310][ T5146] Bluetooth: hci0: command tx timeout [ 252.441154][T14799] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2337'. [ 252.802347][T14813] macvlan4: entered promiscuous mode [ 252.815514][T14813] macvlan4: entered allmulticast mode [ 252.827423][T14495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.884349][T14495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.901013][T14495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.948665][T14495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.986731][T14828] bond0: option mode: unable to set because the bond device has slaves [ 253.075072][ T5146] Bluetooth: hci1: command tx timeout [ 253.329732][T14840] tap0: tun_chr_ioctl cmd 1074025678 [ 253.336407][T14840] tap0: group set to 0 [ 253.359156][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.453118][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.523587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.530761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.550720][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.557902][ T9907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.573832][T14850] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 253.583238][T14850] netlink: 'syz.2.2351': attribute type 2 has an invalid length. [ 253.593440][T14522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.609824][T14522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.628350][T14522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.643781][T14522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.700862][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 253.732414][T14495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.751873][T14853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2350'. [ 253.837832][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.878873][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.907185][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.914368][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.931454][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.938986][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.954857][ C1] net_ratelimit: 11 callbacks suppressed [ 253.954873][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.087834][T14495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.201080][T14495] veth0_vlan: entered promiscuous mode [ 254.237977][T14495] veth1_vlan: entered promiscuous mode [ 254.322654][T14495] veth0_macvtap: entered promiscuous mode [ 254.376009][T14495] veth1_macvtap: entered promiscuous mode [ 254.412849][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.458319][T14495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.467654][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2355'. [ 254.507231][T14495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.534249][T14495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.544280][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2357'. [ 254.569063][T14495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.599296][T14495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.611762][T14495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.696091][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2357'. [ 254.878753][ T9910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.904083][ T9910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.994811][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.023274][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.047422][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.051458][T14522] veth0_vlan: entered promiscuous mode [ 255.103816][T14522] veth1_vlan: entered promiscuous mode [ 255.167526][T14522] veth0_macvtap: entered promiscuous mode [ 255.190832][T14522] veth1_macvtap: entered promiscuous mode [ 255.232028][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 255.253582][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.276696][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.308358][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.357279][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.369386][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.380841][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.426108][T14927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 255.437490][T14927] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 255.466453][T14522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.484738][T14522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.495323][T14522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.511007][T14522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.693135][ T9907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.710895][ T9907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.759116][ T9907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.799473][ T9907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.957282][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.034775][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.243486][ T9914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.027333][ T9914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.074804][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.273811][ T9914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.352218][ T9914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.367830][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.379425][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.388859][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.398496][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.411490][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.420960][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.502627][T15004] lo speed is unknown, defaulting to 1000 [ 257.532271][ T9914] bridge_slave_1: left allmulticast mode [ 257.541867][ T9914] bridge_slave_1: left promiscuous mode [ 257.548550][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.562420][ T9914] bridge_slave_0: left allmulticast mode [ 257.569606][ T9914] bridge_slave_0: left promiscuous mode [ 257.580204][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.840695][T15020] __nla_validate_parse: 3 callbacks suppressed [ 257.840715][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'. [ 257.855664][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 258.114913][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.205413][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.225816][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.242537][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.259372][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.267467][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.277532][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.296840][T15031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.303857][ T9914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.318299][ T9914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.330657][ T9914] bond0 (unregistering): Released all slaves [ 258.378747][T15020] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2379'. [ 258.394985][T15020] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 258.642241][T15004] chnl_net:caif_netlink_parms(): no params data found [ 258.701958][ T9914] hsr_slave_0: left promiscuous mode [ 258.708602][ T9914] hsr_slave_1: left promiscuous mode [ 258.714281][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.721875][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.731596][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.739900][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.764080][ T9914] veth1_macvtap: left promiscuous mode [ 258.769666][ T9914] veth0_macvtap: left promiscuous mode [ 258.775247][ T9914] veth1_vlan: left promiscuous mode [ 258.780492][ T9914] veth0_vlan: left promiscuous mode [ 259.154815][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.187634][ T9914] team0 (unregistering): Port device team_slave_1 removed [ 259.218530][T15045] IPVS: length: 221 != 8 [ 259.343415][ T9914] team0 (unregistering): Port device team_slave_0 removed [ 259.402298][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 259.476804][ T5849] Bluetooth: hci0: command tx timeout [ 259.646081][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.654908][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.674105][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.694361][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.711023][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.730183][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.994599][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 260.027595][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 260.063013][T15004] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.076011][T15004] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.093465][T15004] bridge_slave_0: entered allmulticast mode [ 260.105848][T15004] bridge_slave_0: entered promiscuous mode [ 260.135720][T15004] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.142945][T15004] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.154062][T15004] bridge_slave_1: entered allmulticast mode [ 260.171372][T15004] bridge_slave_1: entered promiscuous mode [ 260.194770][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.239790][T15004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.281816][T15061] lo speed is unknown, defaulting to 1000 [ 260.296298][T15004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.383736][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 260.440304][T15077] netlink: 'syz.1.2391': attribute type 4 has an invalid length. [ 260.461339][T15004] team0: Port device team_slave_0 added [ 260.467592][T15076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2392'. [ 260.481104][T15079] netlink: 'syz.1.2391': attribute type 4 has an invalid length. [ 260.505175][T15076] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 260.569682][T15004] team0: Port device team_slave_1 added [ 260.614076][T15081] syz_tun: entered allmulticast mode [ 260.701947][T15004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.716759][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.745286][T15004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.822271][T15004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.829575][T15004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.858317][T15004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.910356][T15094] ªªªªªª: renamed from vlan0 (while UP) [ 260.964257][ T9910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.234816][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.260471][ T9910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.337206][T15004] hsr_slave_0: entered promiscuous mode [ 261.343542][T15004] hsr_slave_1: entered promiscuous mode [ 261.362291][T15004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.376147][T15004] Cannot create hsr debugfs directory [ 261.493747][ T9910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.536702][T15128] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 261.554929][ T5146] Bluetooth: hci0: command tx timeout [ 261.561245][T15128] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2405'. [ 261.611744][T15061] chnl_net:caif_netlink_parms(): no params data found [ 261.777639][ T9910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.796891][ T5146] Bluetooth: hci1: command tx timeout [ 261.855426][T15134] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 261.994841][T15118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.021751][T15061] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.030289][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.037653][T15061] bridge_slave_0: entered allmulticast mode [ 262.044970][T15061] bridge_slave_0: entered promiscuous mode [ 262.080757][T15061] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.088284][T15144] xt_CT: No such helper "syz1" [ 262.093862][T15061] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.101194][T15061] bridge_slave_1: entered allmulticast mode [ 262.111191][T15061] bridge_slave_1: entered promiscuous mode [ 262.139201][T15146] xt_CT: No such helper "syz1" [ 262.196050][T15061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.247727][T15061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.274774][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.349345][ T9910] bridge_slave_1: left allmulticast mode [ 262.356400][ T9910] bridge_slave_1: left promiscuous mode [ 262.362434][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.371839][ T9910] bridge_slave_0: left allmulticast mode [ 262.377808][ T9910] bridge_slave_0: left promiscuous mode [ 262.385150][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.796248][ T9910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.807308][ T9910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.821339][ T9910] bond0 (unregistering): Released all slaves [ 262.840893][T15061] team0: Port device team_slave_0 added [ 262.915725][T15061] team0: Port device team_slave_1 added [ 263.043938][T15168] sch_fq: defrate 0 ignored. [ 263.050735][T15061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.058637][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.132723][T15061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.215577][T15061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.224333][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.250973][T15061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.314843][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.352561][T15182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2419'. [ 263.489793][T15061] hsr_slave_0: entered promiscuous mode [ 263.516715][T15061] hsr_slave_1: entered promiscuous mode [ 263.522913][T15061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.540204][T15061] Cannot create hsr debugfs directory [ 263.541815][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 263.582674][ T9910] hsr_slave_0: left promiscuous mode [ 263.593711][ T9910] hsr_slave_1: left promiscuous mode [ 263.600479][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.609301][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.617550][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.625169][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.644969][ T5146] Bluetooth: hci0: command tx timeout [ 263.653689][ T9910] veth1_macvtap: left promiscuous mode [ 263.660525][ T9910] veth0_macvtap: left promiscuous mode [ 263.667616][ T9910] veth1_vlan: left promiscuous mode [ 263.672873][ T9910] veth0_vlan: left promiscuous mode [ 263.774124][T15203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2423'. [ 263.802526][T15203] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 263.814111][T15203] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 263.884861][ T5146] Bluetooth: hci1: command tx timeout [ 264.140202][ T9910] team0 (unregistering): Port device team_slave_1 removed [ 264.186975][ T9910] team0 (unregistering): Port device team_slave_0 removed [ 264.357889][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.621665][T15190] syzkaller0: entered promiscuous mode [ 264.628156][T15190] syzkaller0: entered allmulticast mode [ 264.706511][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 265.399022][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.724923][ T5146] Bluetooth: hci0: command tx timeout [ 265.960747][ T5146] Bluetooth: hci1: command tx timeout [ 266.406764][T15004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.434774][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.469615][T15004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.479429][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'. [ 266.492218][T15214] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.499244][T15215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.527488][T15004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.537683][T15004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.608734][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 266.738522][T15221] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 266.760830][T15221] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 266.815850][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'. [ 266.963045][T15004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.022321][T15004] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.049665][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.056879][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.170490][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.177672][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.237407][T15061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.260839][T15061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.291425][T15061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.309329][T15061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.400342][T15244] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2436'. [ 267.474791][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.529131][T15061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.569164][T15061] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.597926][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.605106][ T9907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.688160][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.695325][ T9910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.729797][T15004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.736418][T15258] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2439'. [ 267.846629][T15004] veth0_vlan: entered promiscuous mode [ 267.872139][T15004] veth1_vlan: entered promiscuous mode [ 267.931342][T15004] veth0_macvtap: entered promiscuous mode [ 267.959003][T15004] veth1_macvtap: entered promiscuous mode [ 267.989206][T15004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.005238][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 268.038570][ T5146] Bluetooth: hci1: command tx timeout [ 268.055690][T15277] bridge0: port 1(gretap0) entered blocking state [ 268.088108][T15277] bridge0: port 1(gretap0) entered disabled state [ 268.117653][T15277] gretap0: entered allmulticast mode [ 268.145864][T15277] gretap0: entered promiscuous mode [ 268.188433][T15004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.207399][T15004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.218274][T15004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.227591][T15004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.241958][T15004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.254182][T15280] lo speed is unknown, defaulting to 1000 [ 268.268957][T15061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.514932][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.574323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.626333][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.719427][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.744799][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.901637][T15061] veth0_vlan: entered promiscuous mode [ 268.945847][T15061] veth1_vlan: entered promiscuous mode [ 268.958259][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 269.077025][T15318] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 269.320486][T15316] netlink: 'syz.1.2456': attribute type 4 has an invalid length. [ 269.373755][T15061] veth0_macvtap: entered promiscuous mode [ 269.384580][T15316] netlink: 'syz.1.2456': attribute type 4 has an invalid length. [ 269.419068][T15061] veth1_macvtap: entered promiscuous mode [ 269.467687][T15061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.478600][T15061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.491271][T15061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.522838][T15061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.538689][T15061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.552361][T15061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.559767][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 269.599304][T15061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.624091][T15061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.633073][T15061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.642979][T15061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.760291][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.774965][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.819124][T15340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2462'. [ 269.870850][ T9907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.905319][ T9907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.073974][ T9914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.133425][T15354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2465'. [ 270.166686][T15162] ------------[ cut here ]------------ [ 270.172459][T15162] refcount_t: underflow; use-after-free. [ 270.178359][T15162] WARNING: CPU: 0 PID: 15162 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 270.187841][T15162] Modules linked in: [ 270.191735][T15162] CPU: 0 UID: 0 PID: 15162 Comm: kbnepd bnep0 Not tainted 6.14.0-rc2-syzkaller-00167-gf7b5279b67e7 #0 [ 270.202683][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 270.212739][T15162] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 270.219571][T15162] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 24 d6 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 fe d5 31 0b 01 90 [ 270.239510][T15162] RSP: 0018:ffffc90003c2f720 EFLAGS: 00010246 [ 270.245723][T15162] RAX: aebe77439fc29a00 RBX: ffff88807d8f5878 RCX: ffff88805bf05a00 [ 270.253682][T15162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.261751][T15162] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 270.269723][T15162] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88807d8f5860 [ 270.278170][T15162] R13: 1ffff1100fb1eb0c R14: ffff88807d8f5860 R15: ffffffff86384ef0 [ 270.286197][T15162] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 270.295160][T15162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.301728][T15162] CR2: 00007f5ad7979178 CR3: 00000000608ac000 CR4: 00000000003526f0 [ 270.309705][T15162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.317675][T15162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.326114][T15162] Call Trace: [ 270.329384][T15162] [ 270.332302][T15162] ? __warn+0x165/0x4d0 [ 270.336703][T15162] ? refcount_warn_saturate+0x15a/0x1d0 [ 270.342240][T15162] ? report_bug+0x2b3/0x500 [ 270.346777][T15162] ? refcount_warn_saturate+0x15a/0x1d0 [ 270.352311][T15162] ? handle_bug+0x60/0x90 [ 270.356643][T15162] ? exc_invalid_op+0x1a/0x50 [ 270.361304][T15162] ? asm_exc_invalid_op+0x1a/0x20 [ 270.366349][T15162] ? __pfx_klist_children_put+0x10/0x10 [ 270.371879][T15162] ? __warn_printk+0x292/0x360 [ 270.376881][T15162] ? refcount_warn_saturate+0x15a/0x1d0 [ 270.382417][T15162] klist_dec_and_del+0x3ec/0x3f0 [ 270.387360][T15162] ? __pfx_klist_children_put+0x10/0x10 [ 270.392918][T15162] klist_del+0xa7/0x110 [ 270.397077][T15162] device_del+0x2c9/0x9b0 [ 270.401395][T15162] ? __pfx_device_del+0x10/0x10 [ 270.406283][T15162] ? netdev_unregister_kobject+0x178/0x250 [ 270.412077][T15162] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 270.418501][T15162] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.425691][T15162] ? rcu_is_watching+0x15/0xb0 [ 270.430533][T15162] ? trace_contention_end+0x3c/0x120 [ 270.436050][T15162] ? __mutex_lock+0x397/0x1010 [ 270.440809][T15162] ? unregister_netdev+0x17/0x30 [ 270.445772][T15162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.452091][T15162] unregister_netdevice_queue+0x303/0x370 [ 270.457821][T15162] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 270.464044][T15162] ? down_write+0x18c/0x220 [ 270.468569][T15162] ? __pfx_down_write+0x10/0x10 [ 270.473412][T15162] unregister_netdev+0x21/0x30 [ 270.478478][T15162] bnep_session+0x2e4e/0x3040 [ 270.483165][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.488282][T15162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 270.494214][T15162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.500684][T15162] ? __pfx_woken_wake_function+0x10/0x10 [ 270.506337][T15162] ? __kthread_parkme+0x169/0x1d0 [ 270.511355][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.516540][T15162] kthread+0x7a9/0x920 [ 270.520631][T15162] ? __pfx_kthread+0x10/0x10 [ 270.525888][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.530940][T15162] ? __pfx_kthread+0x10/0x10 [ 270.535827][T15162] ? __pfx_kthread+0x10/0x10 [ 270.540415][T15162] ? __pfx_kthread+0x10/0x10 [ 270.545023][T15162] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.550206][T15162] ? lockdep_hardirqs_on+0x99/0x150 [ 270.555448][T15162] ? __pfx_kthread+0x10/0x10 [ 270.560053][T15162] ret_from_fork+0x4b/0x80 [ 270.564471][T15162] ? __pfx_kthread+0x10/0x10 [ 270.569118][T15162] ret_from_fork_asm+0x1a/0x30 [ 270.573883][T15162] [ 270.577132][T15162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.584427][T15162] CPU: 0 UID: 0 PID: 15162 Comm: kbnepd bnep0 Not tainted 6.14.0-rc2-syzkaller-00167-gf7b5279b67e7 #0 [ 270.595350][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 270.605410][T15162] Call Trace: [ 270.608674][T15162] [ 270.611589][T15162] dump_stack_lvl+0x241/0x360 [ 270.616255][T15162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.621438][T15162] ? __pfx__printk+0x10/0x10 [ 270.626006][T15162] ? _printk+0xd5/0x120 [ 270.630144][T15162] ? __init_begin+0x41000/0x41000 [ 270.635154][T15162] ? vscnprintf+0x5d/0x90 [ 270.639471][T15162] panic+0x349/0x880 [ 270.643352][T15162] ? __warn+0x174/0x4d0 [ 270.647494][T15162] ? __pfx_panic+0x10/0x10 [ 270.651900][T15162] ? ret_from_fork_asm+0x1a/0x30 [ 270.656822][T15162] __warn+0x344/0x4d0 [ 270.660786][T15162] ? refcount_warn_saturate+0x15a/0x1d0 [ 270.666323][T15162] report_bug+0x2b3/0x500 [ 270.670633][T15162] ? refcount_warn_saturate+0x15a/0x1d0 [ 270.676167][T15162] handle_bug+0x60/0x90 [ 270.680311][T15162] exc_invalid_op+0x1a/0x50 [ 270.684798][T15162] asm_exc_invalid_op+0x1a/0x20 [ 270.689629][T15162] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 270.695764][T15162] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 24 d6 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 fe d5 31 0b 01 90 [ 270.715367][T15162] RSP: 0018:ffffc90003c2f720 EFLAGS: 00010246 [ 270.721415][T15162] RAX: aebe77439fc29a00 RBX: ffff88807d8f5878 RCX: ffff88805bf05a00 [ 270.729367][T15162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.737319][T15162] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 270.745309][T15162] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88807d8f5860 [ 270.753286][T15162] R13: 1ffff1100fb1eb0c R14: ffff88807d8f5860 R15: ffffffff86384ef0 [ 270.761256][T15162] ? __pfx_klist_children_put+0x10/0x10 [ 270.766796][T15162] ? __warn_printk+0x292/0x360 [ 270.771812][T15162] klist_dec_and_del+0x3ec/0x3f0 [ 270.776892][T15162] ? __pfx_klist_children_put+0x10/0x10 [ 270.782869][T15162] klist_del+0xa7/0x110 [ 270.787094][T15162] device_del+0x2c9/0x9b0 [ 270.791422][T15162] ? __pfx_device_del+0x10/0x10 [ 270.796260][T15162] ? netdev_unregister_kobject+0x178/0x250 [ 270.802051][T15162] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 270.808459][T15162] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.815207][T15162] ? rcu_is_watching+0x15/0xb0 [ 270.819952][T15162] ? trace_contention_end+0x3c/0x120 [ 270.825216][T15162] ? __mutex_lock+0x397/0x1010 [ 270.829985][T15162] ? unregister_netdev+0x17/0x30 [ 270.834917][T15162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.841249][T15162] unregister_netdevice_queue+0x303/0x370 [ 270.846965][T15162] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 270.853203][T15162] ? down_write+0x18c/0x220 [ 270.857702][T15162] ? __pfx_down_write+0x10/0x10 [ 270.862544][T15162] unregister_netdev+0x21/0x30 [ 270.867294][T15162] bnep_session+0x2e4e/0x3040 [ 270.871976][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.876985][T15162] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 270.882875][T15162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.889195][T15162] ? __pfx_woken_wake_function+0x10/0x10 [ 270.894815][T15162] ? __kthread_parkme+0x169/0x1d0 [ 270.899822][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.904826][T15162] kthread+0x7a9/0x920 [ 270.908875][T15162] ? __pfx_kthread+0x10/0x10 [ 270.913452][T15162] ? __pfx_bnep_session+0x10/0x10 [ 270.918454][T15162] ? __pfx_kthread+0x10/0x10 [ 270.923023][T15162] ? __pfx_kthread+0x10/0x10 [ 270.927594][T15162] ? __pfx_kthread+0x10/0x10 [ 270.932162][T15162] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.937344][T15162] ? lockdep_hardirqs_on+0x99/0x150 [ 270.942522][T15162] ? __pfx_kthread+0x10/0x10 [ 270.947094][T15162] ret_from_fork+0x4b/0x80 [ 270.951500][T15162] ? __pfx_kthread+0x10/0x10 [ 270.956084][T15162] ret_from_fork_asm+0x1a/0x30 [ 270.960856][T15162] [ 272.034176][T15162] Shutting down cpus with NMI [ 272.039043][T15162] Kernel Offset: disabled [ 272.043495][T15162] Rebooting in 86400 seconds..