last executing test programs: 1m30.012145081s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m23.972700039s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 1m13.744618731s ago: executing program 3 (id=1259): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 1m13.439804224s ago: executing program 3 (id=1261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000080)={0x2, @short}, 0x14) sendfile(r8, r4, 0x0, 0x21) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e00326bd2caa8de0764be5f80ceb539d79ca1d11cf060ead7cc762eaca7051ce9ff5da0f114a78ed0243325e5aa80ea8e1cb769bc126cd18b48f59641c052052f9ac4a9105068139aafa6e56826872be2154759ec2429ef58e3235c10c752617861c7848824d7919d78b4f68e7775be794c6fcac2fab9befe1b9b03506dab08b3d237f1d86b19a4b94332dec809e1b6ff82c583d89761063137f13e8cff4b816458bf7b8af29f2041390ce"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000026000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m12.961555514s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.834068968s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 59.268921684s ago: executing program 3 (id=1261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000080)={0x2, @short}, 0x14) sendfile(r8, r4, 0x0, 0x21) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e00326bd2caa8de0764be5f80ceb539d79ca1d11cf060ead7cc762eaca7051ce9ff5da0f114a78ed0243325e5aa80ea8e1cb769bc126cd18b48f59641c052052f9ac4a9105068139aafa6e56826872be2154759ec2429ef58e3235c10c752617861c7848824d7919d78b4f68e7775be794c6fcac2fab9befe1b9b03506dab08b3d237f1d86b19a4b94332dec809e1b6ff82c583d89761063137f13e8cff4b816458bf7b8af29f2041390ce"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000026000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 57.32442145s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.820597978s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 41.439219763s ago: executing program 3 (id=1261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000080)={0x2, @short}, 0x14) sendfile(r8, r4, 0x0, 0x21) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e00326bd2caa8de0764be5f80ceb539d79ca1d11cf060ead7cc762eaca7051ce9ff5da0f114a78ed0243325e5aa80ea8e1cb769bc126cd18b48f59641c052052f9ac4a9105068139aafa6e56826872be2154759ec2429ef58e3235c10c752617861c7848824d7919d78b4f68e7775be794c6fcac2fab9befe1b9b03506dab08b3d237f1d86b19a4b94332dec809e1b6ff82c583d89761063137f13e8cff4b816458bf7b8af29f2041390ce"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000026000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 40.123733004s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.602882713s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 24.780794601s ago: executing program 3 (id=1261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000080)={0x2, @short}, 0x14) sendfile(r8, r4, 0x0, 0x21) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e00326bd2caa8de0764be5f80ceb539d79ca1d11cf060ead7cc762eaca7051ce9ff5da0f114a78ed0243325e5aa80ea8e1cb769bc126cd18b48f59641c052052f9ac4a9105068139aafa6e56826872be2154759ec2429ef58e3235c10c752617861c7848824d7919d78b4f68e7775be794c6fcac2fab9befe1b9b03506dab08b3d237f1d86b19a4b94332dec809e1b6ff82c583d89761063137f13e8cff4b816458bf7b8af29f2041390ce"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000026000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 22.975481968s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.522289277s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 9.571934239s ago: executing program 3 (id=1261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000080)={0x2, @short}, 0x14) sendfile(r8, r4, 0x0, 0x21) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e00326bd2caa8de0764be5f80ceb539d79ca1d11cf060ead7cc762eaca7051ce9ff5da0f114a78ed0243325e5aa80ea8e1cb769bc126cd18b48f59641c052052f9ac4a9105068139aafa6e56826872be2154759ec2429ef58e3235c10c752617861c7848824d7919d78b4f68e7775be794c6fcac2fab9befe1b9b03506dab08b3d237f1d86b19a4b94332dec809e1b6ff82c583d89761063137f13e8cff4b816458bf7b8af29f2041390ce"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000026000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 8.564257771s ago: executing program 1 (id=651): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xe, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @loopback}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x44}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.003450037s ago: executing program 4 (id=945): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d80", @ANYRES32=r3, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 1.446628883s ago: executing program 0 (id=1598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f706f72745f73746174730000000000000000000000000000f7ffffff00050003329410b27a0e00"], 0x60}, 0x1, 0xf000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) 1.311992658s ago: executing program 0 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0xfffffffc, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x80000}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r6, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 1.116119536s ago: executing program 0 (id=1602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\x00', 0x1}], 0x1}}], 0x2, 0x4008040) 956.31248ms ago: executing program 0 (id=1604): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) getsockopt$bt_hci(r0, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a80"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 800.86986ms ago: executing program 0 (id=1606): socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {}, {0x3, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xf}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x4041043) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 728.177842ms ago: executing program 2 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xa4, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="327a524f7af4e0a56b14b2513f78fbdb179017a45ec574495f3a62e7fde426caa3e51969eb1456d5b799d22ac07fe2f325c567161542d3d9f7d7702f7df8714f687234db055862387d32b9f7bb04919ba2a368c9858ff14a2616a10dd599b344728461d9cfb34e6e32d8ac98c2391f32546508", @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xa4}], 0x1}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) socketpair(0x26, 0x3, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r1, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "92b9130a37"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e27252251a2e805d1b628154bd"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 701.569669ms ago: executing program 0 (id=1608): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x54}}}}}, 0x20}}, 0x20000044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc044}, 0x20000844) 599.364578ms ago: executing program 2 (id=1609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7090000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000040)={@rand_addr=' \x01\x00', r3}, 0x14) 460.298335ms ago: executing program 2 (id=1610): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 424.098472ms ago: executing program 2 (id=1611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1d3200000001000000001000000014000f0dfe8000000000000000000000000000bb080001"], 0x30}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x18) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x106) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000440)={'rose0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 138.615903ms ago: executing program 2 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000006aaa115b0000000900010073797a3000000000bc010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900410073797a30000000000800054000000021800111800b0001007461726765740000700102806b0101004155444954000000140000001000010000000000000000000000000a"], 0x204}}, 0x0) 0s ago: executing program 2 (id=1613): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xff, 0x30}, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300020e0000000000000000009b0005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000200100000000000000000000000000010000000000000000"], 0x70}, 0x1, 0x7}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x41b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x10000}}, 0x1ff, 0x7fff, 0x8, 0x4, 0xc2, 0x10001, 0x2}, 0x9c) sendto$inet(r1, &(0x7f0000000400)="001d71d52a3879c9c7649475728f8a25a071a59c20c131e0364e8828e50cfb69d0561b1bf87522000e42847c81695082fb23c905f5713aa8cadb181f50020730a3af1cb5a2ec28f6a78f19956ad27fa369f8adf71664f8eaff", 0x59, 0x4044000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0xffffffff) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) sendto$inet6(r10, &(0x7f0000000480)="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", 0x1000, 0x400c0, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) kernel console output (not intermixed with test programs): HW filter on device team0 [ 221.368145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.375383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.413748][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.416826][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.421013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.465696][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.102901][ T6670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.223917][ T6670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.258156][T10626] syzkaller1: entered promiscuous mode [ 222.267642][T10626] syzkaller1: entered allmulticast mode [ 222.294532][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.417715][ T6670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.489607][ T6670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.741401][ T6670] bridge_slave_1: left allmulticast mode [ 222.747138][ T6670] bridge_slave_1: left promiscuous mode [ 222.756283][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.767398][ T6670] bridge_slave_0: left allmulticast mode [ 222.774415][ T6670] bridge_slave_0: left promiscuous mode [ 222.781213][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.098654][ T55] Bluetooth: hci2: command tx timeout [ 223.606266][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.626812][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.641823][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.653309][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.663113][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.794694][ T6670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.810652][ T6670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.842934][ T6670] bond0 (unregistering): Released all slaves [ 223.890074][T10663] syzkaller0: entered promiscuous mode [ 223.895651][T10663] syzkaller0: entered allmulticast mode [ 224.132685][T10689] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1148'. [ 224.274152][T10412] veth0_vlan: entered promiscuous mode [ 224.530002][T10412] veth1_vlan: entered promiscuous mode [ 224.777907][ T6670] hsr_slave_0: left promiscuous mode [ 224.810263][ T6670] hsr_slave_1: left promiscuous mode [ 224.817494][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.850168][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.891337][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.912318][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.995944][ T6670] veth1_macvtap: left promiscuous mode [ 225.014747][ T6670] veth0_macvtap: left promiscuous mode [ 225.029305][ T6670] veth1_vlan: left promiscuous mode [ 225.036732][ T6670] veth0_vlan: left promiscuous mode [ 225.047210][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1156'. [ 225.176123][T10735] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1158'. [ 225.186207][ T55] Bluetooth: hci2: command tx timeout [ 225.739156][ T55] Bluetooth: hci1: command tx timeout [ 225.822801][ T6670] team0 (unregistering): Port device team_slave_1 removed [ 225.862944][ T6670] team0 (unregistering): Port device team_slave_0 removed [ 226.524737][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 226.551209][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 226.589934][T10412] veth0_macvtap: entered promiscuous mode [ 226.611804][T10412] veth1_macvtap: entered promiscuous mode [ 226.653325][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.771361][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.787812][T10412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.796821][T10412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.805995][T10412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.815062][T10412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.045173][T10678] chnl_net:caif_netlink_parms(): no params data found [ 227.069103][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 227.107904][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.137753][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.438842][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.492968][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.516034][T10799] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 227.539217][T10799] netlink: 'syz.0.1171': attribute type 20 has an invalid length. [ 227.547117][T10799] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.614216][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.657375][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.686984][T10678] bridge_slave_0: entered allmulticast mode [ 227.704501][T10678] bridge_slave_0: entered promiscuous mode [ 227.728860][T10802] netlink: 'syz.2.1172': attribute type 29 has an invalid length. [ 227.800969][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.818559][ T55] Bluetooth: hci1: command tx timeout [ 227.818853][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.846726][T10678] bridge_slave_1: entered allmulticast mode [ 227.870539][T10678] bridge_slave_1: entered promiscuous mode [ 228.021920][T10818] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 228.257939][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.286721][T10828] netlink: 'syz.2.1176': attribute type 4 has an invalid length. [ 228.311452][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.386920][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.625125][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.772665][T10678] team0: Port device team_slave_0 added [ 228.811659][T10678] team0: Port device team_slave_1 added [ 228.897717][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.956931][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 229.134746][T10864] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 229.146973][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 229.194529][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.249989][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.277475][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.346056][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.368749][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.375806][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.386809][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.416139][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.427793][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.435719][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.437084][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.460873][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.466055][T10879] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1183'. [ 229.721993][T10678] hsr_slave_0: entered promiscuous mode [ 229.732290][T10678] hsr_slave_1: entered promiscuous mode [ 229.898897][ T55] Bluetooth: hci1: command tx timeout [ 229.942156][ T30] audit: type=1804 audit(1747125626.822:3): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1187" name="/newroot/258/cgroup.controllers" dev="tmpfs" ino=1329 res=1 errno=0 [ 230.008997][ T30] audit: type=1800 audit(1747125626.822:4): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1187" name="cgroup.controllers" dev="tmpfs" ino=1329 res=0 errno=0 [ 230.322773][T10913] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1190'. [ 230.325480][T10911] pimreg: entered allmulticast mode [ 230.401581][ T36] bridge_slave_1: left allmulticast mode [ 230.423266][ T36] bridge_slave_1: left promiscuous mode [ 230.438665][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.489828][ T36] bridge_slave_0: left allmulticast mode [ 230.500314][ T36] bridge_slave_0: left promiscuous mode [ 230.526147][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.160090][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.175149][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.186602][ T36] bond0 (unregistering): Released all slaves [ 231.244292][T10935] tipc: Enabling of bearer rejected, failed to enable media [ 231.578841][ T55] Bluetooth: hci2: command tx timeout [ 231.722515][T10971] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 231.771960][T10974] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1202'. [ 231.839514][T10971] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 231.917275][ T36] hsr_slave_0: left promiscuous mode [ 231.958986][ T36] hsr_slave_1: left promiscuous mode [ 231.972252][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.980080][ T55] Bluetooth: hci1: command tx timeout [ 231.998880][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.007974][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.019090][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.046410][ T36] veth1_macvtap: left promiscuous mode [ 232.052367][ T36] veth0_macvtap: left promiscuous mode [ 232.058458][ T36] veth1_vlan: left promiscuous mode [ 232.064067][ T36] veth0_vlan: left promiscuous mode [ 232.633351][ T36] team0 (unregistering): Port device team_slave_1 removed [ 232.675340][ T36] team0 (unregistering): Port device team_slave_0 removed [ 233.077031][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 233.108320][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 233.180046][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 233.192150][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 233.229322][T10881] chnl_net:caif_netlink_parms(): no params data found [ 233.302444][T11002] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1205'. [ 233.417313][T11008] gre2: entered promiscuous mode [ 233.442286][T11008] gre2: entered allmulticast mode [ 233.668627][ T55] Bluetooth: hci2: command tx timeout [ 234.035439][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.043351][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.051525][T10881] bridge_slave_0: entered allmulticast mode [ 234.061320][T10881] bridge_slave_0: entered promiscuous mode [ 234.070587][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.077866][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.085196][T10881] bridge_slave_1: entered allmulticast mode [ 234.094342][T10881] bridge_slave_1: entered promiscuous mode [ 234.230171][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.273617][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.303535][T10678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.335381][T10678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.394728][T10678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.422844][T10881] team0: Port device team_slave_0 added [ 234.451379][T10881] team0: Port device team_slave_1 added [ 234.457911][T10678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.561827][T10881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.568612][T11045] nbd: must specify a size in bytes for the device [ 234.574975][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.662941][T10881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.684937][T10881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.693263][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.726241][T10881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.844411][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 234.906315][T11060] dvmrp0: entered allmulticast mode [ 234.914770][T11067] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1220'. [ 234.931555][T10881] hsr_slave_0: entered promiscuous mode [ 234.941018][T10881] hsr_slave_1: entered promiscuous mode [ 234.952287][T10881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.968569][T10881] Cannot create hsr debugfs directory [ 235.120265][T11075] netlink: 'syz.0.1224': attribute type 10 has an invalid length. [ 235.131862][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1223'. [ 235.392908][T11086] xt_hashlimit: invalid interval [ 235.475097][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.589526][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.613792][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.621092][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.686115][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.693405][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.740703][ T55] Bluetooth: hci2: command tx timeout [ 236.004924][T11105] Cannot find del_set index 3 as target [ 236.230352][T10881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.262168][T10881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.309833][T10881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.332542][T10881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.534325][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.557937][T11125] netlink: 'syz.2.1241': attribute type 7 has an invalid length. [ 236.581661][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.626903][T10881] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.677872][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.685144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.774399][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.781713][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.817315][T10678] veth0_vlan: entered promiscuous mode [ 236.858021][T11137] bridge0: port 3(batadv1) entered blocking state [ 236.871669][T11137] bridge0: port 3(batadv1) entered disabled state [ 236.878655][T11137] batadv1: entered allmulticast mode [ 236.886305][T11137] batadv1: entered promiscuous mode [ 236.914876][T10678] veth1_vlan: entered promiscuous mode [ 237.047689][T11148] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 237.216627][T10678] veth0_macvtap: entered promiscuous mode [ 237.266593][T10678] veth1_macvtap: entered promiscuous mode [ 237.361456][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.391620][ T1164] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 237.401687][ T1164] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 237.434717][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.481720][T10678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.543961][T10678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.578186][T10678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.587427][T10678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.818475][ T55] Bluetooth: hci2: command tx timeout [ 237.924329][T10881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.927212][T11178] xt_l2tp: v2 sid > 0xffff: 262144 [ 237.957442][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 237.983927][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.994558][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.103605][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.133526][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.543003][T11204] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 238.622913][T11204] team0: Device veth0_macvtap failed to register rx_handler [ 238.805109][ T6669] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.932695][ T6669] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.004112][T10881] veth0_vlan: entered promiscuous mode [ 239.053645][T10881] veth1_vlan: entered promiscuous mode [ 239.164311][ T6669] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.197219][T10881] veth0_macvtap: entered promiscuous mode [ 239.219526][T10881] veth1_macvtap: entered promiscuous mode [ 239.247758][T10881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.301906][ T6669] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.333550][T10881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.351876][T10881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.364660][T10881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.384063][T10881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.392897][T10881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.423259][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.434098][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.446298][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.456092][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.473124][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.578991][ T6669] bridge_slave_1: left allmulticast mode [ 239.584712][ T6669] bridge_slave_1: left promiscuous mode [ 239.590524][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.602864][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.610081][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.623516][ T6669] bridge_slave_0: left allmulticast mode [ 239.629385][ T6669] bridge_slave_0: left promiscuous mode [ 239.635156][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.896262][T11228] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1266'. [ 240.255055][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.270370][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.294441][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.316928][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.332845][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.344707][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.367414][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.378407][ T6669] bond0 (unregistering): Released all slaves [ 240.550749][T11246] netlink: 'syz.2.1270': attribute type 6 has an invalid length. [ 240.593354][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.617975][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'. [ 240.627112][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.936714][T11260] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 240.954118][ T6669] hsr_slave_0: left promiscuous mode [ 240.961705][ T6669] hsr_slave_1: left promiscuous mode [ 240.967827][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.975605][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.984102][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.991849][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.014857][ T6669] veth1_macvtap: left promiscuous mode [ 241.020813][ T6669] veth0_macvtap: left promiscuous mode [ 241.026491][ T6669] veth1_vlan: left promiscuous mode [ 241.033331][ T6669] veth0_vlan: left promiscuous mode [ 241.477233][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 241.502737][ T5843] Bluetooth: hci1: command tx timeout [ 241.531072][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 242.149074][T11266] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1048576) [ 242.220667][T11217] chnl_net:caif_netlink_parms(): no params data found [ 242.379821][ T5843] Bluetooth: hci3: command tx timeout [ 242.534689][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.545664][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.554392][T11217] bridge_slave_0: entered allmulticast mode [ 242.563369][T11217] bridge_slave_0: entered promiscuous mode [ 242.571942][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.579288][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.586523][T11217] bridge_slave_1: entered allmulticast mode [ 242.594567][T11217] bridge_slave_1: entered promiscuous mode [ 242.602065][T11243] chnl_net:caif_netlink_parms(): no params data found [ 242.632945][ T6669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.683354][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.712313][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.763704][ T6669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.809014][T11217] team0: Port device team_slave_0 added [ 242.824079][T11217] team0: Port device team_slave_1 added [ 242.857529][ T6669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.907410][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.915790][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.942350][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.002244][T11243] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.044334][T11243] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.063103][T11243] bridge_slave_0: entered allmulticast mode [ 243.076211][T11243] bridge_slave_0: entered promiscuous mode [ 243.167521][ T6669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.201033][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.218486][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.262257][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.287358][T11243] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.308925][T11243] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.318016][T11243] bridge_slave_1: entered allmulticast mode [ 243.327131][T11243] bridge_slave_1: entered promiscuous mode [ 243.448192][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.458905][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.467411][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.477823][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.485937][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.531975][T11243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.569724][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 243.589282][ T55] Bluetooth: hci1: command tx timeout [ 243.591240][T11243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.632715][T11217] hsr_slave_0: entered promiscuous mode [ 243.642285][T11217] hsr_slave_1: entered promiscuous mode [ 243.697293][T11243] team0: Port device team_slave_0 added [ 243.719600][T11243] team0: Port device team_slave_1 added [ 243.860139][T11243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.867164][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.894123][T11243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.940874][ T6669] bridge_slave_1: left allmulticast mode [ 243.946588][ T6669] bridge_slave_1: left promiscuous mode [ 243.953412][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.969686][ T6669] bridge_slave_0: left allmulticast mode [ 243.970777][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'. [ 243.975399][ T6669] bridge_slave_0: left promiscuous mode [ 243.975723][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.993056][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1283'. [ 244.009117][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'. [ 244.011733][T11301] netlink: 'syz.2.1283': attribute type 7 has an invalid length. [ 244.027656][T11301] netlink: 'syz.2.1283': attribute type 8 has an invalid length. [ 244.040400][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 244.173000][T11304] netlink: 'syz.2.1283': attribute type 4 has an invalid length. [ 244.227637][T11305] netlink: 'syz.2.1283': attribute type 4 has an invalid length. [ 244.384883][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.396817][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.407444][ T6669] bond0 (unregistering): Released all slaves [ 244.422313][T11243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.429650][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.457154][T11243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.469861][ T55] Bluetooth: hci3: command tx timeout [ 244.522873][T11299] gretap0: entered promiscuous mode [ 244.531976][T11299] gretap0: left promiscuous mode [ 244.633974][T11308] openvswitch: netlink: IPv6 tunnel dst address is zero [ 244.783575][T11243] hsr_slave_0: entered promiscuous mode [ 244.793916][T11243] hsr_slave_1: entered promiscuous mode [ 244.802274][T11243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.813400][T11243] Cannot create hsr debugfs directory [ 244.821115][T11312] netlink: 'syz.2.1286': attribute type 30 has an invalid length. [ 245.075936][T11312] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.084757][T11312] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.093053][T11312] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.101456][T11312] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.169619][T11312] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.178135][T11312] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.186998][T11312] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.195509][T11312] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.358697][ T6669] hsr_slave_0: left promiscuous mode [ 245.392702][ T6669] hsr_slave_1: left promiscuous mode [ 245.403639][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.438504][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.476124][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.500138][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.551340][ T6669] veth1_macvtap: left promiscuous mode [ 245.557094][ T6669] veth0_macvtap: left promiscuous mode [ 245.569692][T11336] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 245.580120][ T55] Bluetooth: hci2: command tx timeout [ 245.586742][T11336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1287'. [ 245.605715][ T6669] veth1_vlan: left promiscuous mode [ 245.611646][ T6669] veth0_vlan: left promiscuous mode [ 245.662718][ T55] Bluetooth: hci1: command tx timeout [ 246.184814][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 246.227916][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 246.545513][ T55] Bluetooth: hci3: command tx timeout [ 246.709017][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 246.851443][T11217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.088042][T11217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.207093][T11217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.264639][T11291] chnl_net:caif_netlink_parms(): no params data found [ 247.362646][T11217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.647398][T11375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.660816][ T55] Bluetooth: hci2: command tx timeout [ 247.703484][T11375] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.734841][T11382] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1296'. [ 247.744773][ T55] Bluetooth: hci1: command tx timeout [ 247.766059][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 247.818807][T11291] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.827993][T11291] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.835486][T11291] bridge_slave_0: entered allmulticast mode [ 247.843493][T11291] bridge_slave_0: entered promiscuous mode [ 247.866662][T11291] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.883018][T11291] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.890572][T11291] bridge_slave_1: entered allmulticast mode [ 247.898876][T11291] bridge_slave_1: entered promiscuous mode [ 248.006998][T11291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.071100][T11291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.083268][T11217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.227653][T11291] team0: Port device team_slave_0 added [ 248.251465][T11217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.275669][T11217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.324106][T11291] team0: Port device team_slave_1 added [ 248.391343][T11217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.491106][T11291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.498141][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.568315][T11291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.619248][ T55] Bluetooth: hci3: command tx timeout [ 248.630469][T11291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.638035][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.665741][T11291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.895690][T11217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.056471][T11291] hsr_slave_0: entered promiscuous mode [ 249.104269][T11291] hsr_slave_1: entered promiscuous mode [ 249.110890][T11291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.133050][T11291] Cannot create hsr debugfs directory [ 249.256045][T11438] netlink: 'syz.2.1305': attribute type 10 has an invalid length. [ 249.268891][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 249.283972][T11435] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 249.313638][T11438] dummy0: left promiscuous mode [ 249.354194][T11438] dummy0: entered allmulticast mode [ 249.367500][T11438] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.400671][T11439] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 249.411188][T11439] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 249.424457][T11439] bond3: (slave vcan0): making interface the new active one [ 249.433182][T11439] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 249.445216][T11217] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.497455][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.504693][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.525115][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.532392][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.621486][T11243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.637323][T11243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.682279][T11243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.721940][T11243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.740197][ T55] Bluetooth: hci2: command tx timeout [ 249.800577][T11454] netlink: 'syz.2.1308': attribute type 10 has an invalid length. [ 249.893512][T11459] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 250.394476][T11243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.439631][T11243] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.514585][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.521838][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.592295][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.632728][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.640050][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.732516][T11291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.756619][T11291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.788448][T11291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.809471][T11291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.878634][T11492] bond4: entered promiscuous mode [ 250.883911][T11492] bond4: entered allmulticast mode [ 250.890207][T11492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.985384][T11217] veth0_vlan: entered promiscuous mode [ 251.073281][T11217] veth1_vlan: entered promiscuous mode [ 251.249616][T11217] veth0_macvtap: entered promiscuous mode [ 251.309826][T11217] veth1_macvtap: entered promiscuous mode [ 251.373538][T11291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.446079][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.511958][T11291] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.579176][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.603000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.610268][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.679584][T11217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.692637][T11217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.705660][T11217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.715023][T11217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.737185][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.744479][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.794855][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'. [ 251.807715][T11243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.809165][T11526] netlink: 'syz.2.1325': attribute type 7 has an invalid length. [ 251.829248][ T55] Bluetooth: hci2: command tx timeout [ 251.877388][T11526] netlink: 'syz.2.1325': attribute type 8 has an invalid length. [ 251.887661][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 251.905363][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 251.946325][T11528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1325'. [ 251.974005][T11291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.129014][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.136910][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.144444][T11533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.170131][T11532] netlink: 'syz.0.1327': attribute type 27 has an invalid length. [ 252.193828][T11243] veth0_vlan: entered promiscuous mode [ 252.231741][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 252.247538][T11243] veth1_vlan: entered promiscuous mode [ 252.282132][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.303483][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.324146][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 252.386228][T11536] geneve2: entered promiscuous mode [ 252.409452][T11536] geneve2: entered allmulticast mode [ 252.451567][T11243] veth0_macvtap: entered promiscuous mode [ 252.488755][T11243] veth1_macvtap: entered promiscuous mode [ 252.595122][T11243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.607781][T11243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.642482][T11243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.652305][T11243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.662071][T11243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.670948][T11243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.697627][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.821793][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.015744][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.124247][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.232111][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.348670][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.367902][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.507108][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.558071][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.623417][T11566] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 253.660591][T11566] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1333'. [ 253.721389][ T53] bridge_slave_1: left allmulticast mode [ 253.727129][ T53] bridge_slave_1: left promiscuous mode [ 253.748640][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.798020][ T53] bridge_slave_0: left allmulticast mode [ 253.813139][ T53] bridge_slave_0: left promiscuous mode [ 253.839607][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.920069][T11574] x_tables: duplicate underflow at hook 2 [ 253.990229][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.999538][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.008138][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.017741][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.025621][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.043593][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1336'. [ 254.149146][T11585] netlink: 'syz.2.1338': attribute type 11 has an invalid length. [ 254.157143][T11585] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1338'. [ 254.183834][T11586] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 254.449697][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.464573][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.475493][ T53] bond0 (unregistering): Released all slaves [ 254.593323][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 254.904946][T11291] veth0_vlan: entered promiscuous mode [ 254.946641][ T53] hsr_slave_0: left promiscuous mode [ 254.956070][ T53] hsr_slave_1: left promiscuous mode [ 254.966957][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.974710][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.987064][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.994663][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.016860][ T53] veth1_macvtap: left promiscuous mode [ 255.024732][ T53] veth0_macvtap: left promiscuous mode [ 255.030603][ T53] veth1_vlan: left promiscuous mode [ 255.036012][ T53] veth0_vlan: left promiscuous mode [ 255.472573][ T53] team0 (unregistering): Port device team_slave_1 removed [ 255.517690][ T53] team0 (unregistering): Port device team_slave_0 removed [ 255.777975][T11598] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 255.786638][T11598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.826214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.063892][ T5843] Bluetooth: hci1: command tx timeout [ 256.315968][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.333332][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.350127][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.355432][T11623] Cannot find add_set index 4 as target [ 256.364977][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.374615][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.467906][T11291] veth1_vlan: entered promiscuous mode [ 256.692198][T11291] veth0_macvtap: entered promiscuous mode [ 256.766698][T11291] veth1_macvtap: entered promiscuous mode [ 256.804904][T11640] __nla_validate_parse: 2 callbacks suppressed [ 256.804924][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 256.936765][T11640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.135003][T11643] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 257.156207][T11291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.212319][T11291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.221234][ T7250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.278035][T11577] chnl_net:caif_netlink_parms(): no params data found [ 257.310153][ T6669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.324980][T11291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.335639][T11291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.351337][T11291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.361639][T11291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.469777][T11664] netlink: 'syz.2.1353': attribute type 5 has an invalid length. [ 257.477578][T11664] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1353'. [ 257.760769][ T7250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.138402][ T55] Bluetooth: hci1: command tx timeout [ 258.182456][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.458655][ T55] Bluetooth: hci3: command tx timeout [ 258.599221][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.688192][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.695937][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.724717][T11577] bridge_slave_0: entered allmulticast mode [ 258.733193][T11577] bridge_slave_0: entered promiscuous mode [ 258.802863][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.827630][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.835368][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.843469][T11577] bridge_slave_1: entered allmulticast mode [ 258.856094][T11577] bridge_slave_1: entered promiscuous mode [ 258.950501][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.041720][T11620] chnl_net:caif_netlink_parms(): no params data found [ 259.086388][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.105433][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.148792][T11698] netlink: 'syz.0.1362': attribute type 34 has an invalid length. [ 259.271380][T11577] team0: Port device team_slave_0 added [ 259.377013][T11577] team0: Port device team_slave_1 added [ 259.403615][ T1164] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.410179][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1365'. [ 259.416718][ T1164] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.488505][ T7242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.526357][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.538034][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.581829][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.599025][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.663894][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.686494][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.694297][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.720587][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.764962][T11732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1370'. [ 259.843873][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.858904][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.866363][T11620] bridge_slave_0: entered allmulticast mode [ 259.874584][T11620] bridge_slave_0: entered promiscuous mode [ 259.884893][T11620] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.892340][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.901173][T11620] bridge_slave_1: entered allmulticast mode [ 259.909383][T11620] bridge_slave_1: entered promiscuous mode [ 259.993675][T11577] hsr_slave_0: entered promiscuous mode [ 260.020705][T11577] hsr_slave_1: entered promiscuous mode [ 260.083140][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.098507][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.154863][ T53] bridge_slave_1: left allmulticast mode [ 260.161211][ T53] bridge_slave_1: left promiscuous mode [ 260.167192][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.184924][ T53] bridge_slave_0: left allmulticast mode [ 260.191774][ T53] bridge_slave_0: left promiscuous mode [ 260.197692][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.219216][ T55] Bluetooth: hci1: command tx timeout [ 260.548442][ T55] Bluetooth: hci3: command tx timeout [ 260.593500][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.604822][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.616428][ T53] bond0 (unregistering): Released all slaves [ 260.667215][T11620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.693804][T11746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1374'. [ 260.766144][T11620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.028156][T11620] team0: Port device team_slave_0 added [ 261.102248][T11620] team0: Port device team_slave_1 added [ 261.124771][T11767] netlink: 'syz.2.1380': attribute type 8 has an invalid length. [ 261.134192][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 261.143250][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 261.263731][ T53] hsr_slave_0: left promiscuous mode [ 261.292904][ T53] hsr_slave_1: left promiscuous mode [ 261.299177][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.306636][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.338078][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.346032][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.405523][ T53] veth1_macvtap: left promiscuous mode [ 261.416729][ T53] veth0_macvtap: left promiscuous mode [ 261.424678][ T53] veth1_vlan: left promiscuous mode [ 261.435651][ T53] veth0_vlan: left promiscuous mode [ 261.958683][ T53] team0 (unregistering): Port device team_slave_1 removed [ 262.004402][ T53] team0 (unregistering): Port device team_slave_0 removed [ 262.298393][ T55] Bluetooth: hci1: command tx timeout [ 262.432763][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.442533][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.453149][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.481157][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.495964][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.618844][ T55] Bluetooth: hci3: command tx timeout [ 262.683956][T11620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.699657][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.743903][T11620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.777137][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 262.830116][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 262.835151][T11620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.839387][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'. [ 262.852970][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.889351][T11620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.955085][T11787] geneve3: entered promiscuous mode [ 262.960544][T11787] geneve3: entered allmulticast mode [ 263.106362][T11620] hsr_slave_0: entered promiscuous mode [ 263.113320][T11620] hsr_slave_1: entered promiscuous mode [ 263.124723][T11620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.138060][T11620] Cannot create hsr debugfs directory [ 263.328087][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 263.498623][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.555514][T11801] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 263.601483][ T6669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.742926][ T6669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.855195][ T6669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.895223][T11781] chnl_net:caif_netlink_parms(): no params data found [ 263.928580][T11577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.950940][T11577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.990619][ T6669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.027760][T11577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.056102][T11577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.068734][T11817] C: renamed from ªªªªªª†³?ÂHº (while UP) [ 264.218611][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.227549][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.235041][T11781] bridge_slave_0: entered allmulticast mode [ 264.243236][T11781] bridge_slave_0: entered promiscuous mode [ 264.252450][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.259784][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.267026][T11781] bridge_slave_1: entered allmulticast mode [ 264.274963][T11781] bridge_slave_1: entered promiscuous mode [ 264.359435][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.373542][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.405754][ T6669] bridge_slave_1: left allmulticast mode [ 264.418337][ T6669] bridge_slave_1: left promiscuous mode [ 264.424190][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.441451][ T6669] bridge_slave_0: left allmulticast mode [ 264.447266][ T6669] bridge_slave_0: left promiscuous mode [ 264.454663][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.539567][ T55] Bluetooth: hci2: command tx timeout [ 264.706027][ T55] Bluetooth: hci3: command tx timeout [ 264.915668][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.935401][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.949205][ T6669] bond0 (unregistering): Released all slaves [ 265.075634][T11781] team0: Port device team_slave_0 added [ 265.177425][T11781] team0: Port device team_slave_1 added [ 265.305298][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.315146][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.342911][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.492059][T11858] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.506290][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.515438][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.542211][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.558908][T11859] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 265.619232][T11861] team0: Device vti1 is of different type [ 265.655820][ T6669] hsr_slave_0: left promiscuous mode [ 265.663319][ T6669] hsr_slave_1: left promiscuous mode [ 265.671134][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.679480][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.687441][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.697701][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.731697][ T6669] veth1_macvtap: left promiscuous mode [ 265.738187][ T6669] veth0_macvtap: left promiscuous mode [ 265.746565][ T6669] veth1_vlan: left promiscuous mode [ 265.754870][ T6669] veth0_vlan: left promiscuous mode [ 266.222813][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 266.271365][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 266.618759][ T55] Bluetooth: hci2: command tx timeout [ 266.701669][T11858] bond4: (slave gretap2): making interface the new active one [ 266.712423][T11858] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 266.803309][T11620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.854012][T11870] bond0: (slave dummy0): Releasing backup interface [ 266.873111][T11870] dummy0: left allmulticast mode [ 266.904806][T11870] bond0: (slave bond_slave_0): Releasing backup interface [ 266.913394][T11870] bond_slave_0: left allmulticast mode [ 266.927557][T11870] bond0: (slave bond_slave_1): Releasing backup interface [ 266.944774][T11870] bond_slave_1: left allmulticast mode [ 266.979720][T11870] team0: Port device team_slave_0 removed [ 267.001937][T11870] team0: Port device team_slave_1 removed [ 267.024158][T11870] bond1: (slave gretap1): Releasing active interface [ 267.050482][T11870] bond2: (slave ip6erspan0): Releasing active interface [ 267.079038][T11870] bond3: (slave ip6gretap1): Releasing backup interface [ 267.116617][T11870] bond4: (slave gretap2): Releasing active interface [ 267.155995][T11781] hsr_slave_0: entered promiscuous mode [ 267.168907][T11781] hsr_slave_1: entered promiscuous mode [ 267.177317][T11781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.186955][T11781] Cannot create hsr debugfs directory [ 267.195049][T11620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.301379][T11620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.319191][T11620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.400130][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 267.471396][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.637544][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.727111][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.734377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.770644][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.777855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.004552][T11912] netlink: 'syz.2.1412': attribute type 2 has an invalid length. [ 268.102300][T11620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.187708][T11620] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.224395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.231618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.292587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.299869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.535728][T11781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.552877][T11781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.591164][T11781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.620873][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.639875][T11781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.699083][ T55] Bluetooth: hci2: command tx timeout [ 268.884546][T11577] veth0_vlan: entered promiscuous mode [ 268.944495][T11577] veth1_vlan: entered promiscuous mode [ 269.035773][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.038955][T11947] netlink: 'syz.0.1421': attribute type 11 has an invalid length. [ 269.064020][T11947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.070763][T11577] veth0_macvtap: entered promiscuous mode [ 269.079665][T11951] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 269.111794][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.114790][T11951] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1422'. [ 269.124340][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.133803][T11577] veth1_macvtap: entered promiscuous mode [ 269.152975][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.168383][T11951] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 269.176184][T11951] netlink: 'syz.2.1422': attribute type 2 has an invalid length. [ 269.200046][T11951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1422'. [ 269.201673][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.216291][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.267623][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.274978][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.294973][T11620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.305866][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.328143][T11947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.344935][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 269.349667][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.403786][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.450495][T11947] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 269.493228][T11577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.503706][T11577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.514665][T11577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.524104][T11577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.700058][T11620] veth0_vlan: entered promiscuous mode [ 269.767880][T11967] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1425'. [ 269.783771][T11620] veth1_vlan: entered promiscuous mode [ 269.814306][T11970] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1426'. [ 269.835350][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.858538][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.969629][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.989405][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.006139][T11620] veth0_macvtap: entered promiscuous mode [ 270.072301][T11620] veth1_macvtap: entered promiscuous mode [ 270.135045][T11620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.162165][T11988] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 270.277952][T11620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.322876][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.339995][T11620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.349374][T11620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.358835][T11620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.367651][T11620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.616341][T11999] netlink: 'syz.0.1433': attribute type 8 has an invalid length. [ 270.646804][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.691350][T11999] bridge0: entered allmulticast mode [ 270.779281][ T55] Bluetooth: hci2: command tx timeout [ 270.876946][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.909097][ T7435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.917053][ T7435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.979114][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.039357][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.047259][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.121651][T12007] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 271.266901][T12007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.412192][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.530464][T12010] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 271.660637][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.670876][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.679796][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.688594][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.696424][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.141759][T11781] veth0_vlan: entered promiscuous mode [ 272.217953][ T13] bridge_slave_1: left allmulticast mode [ 272.235607][ T13] bridge_slave_1: left promiscuous mode [ 272.243037][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.257590][ T13] bridge_slave_0: left allmulticast mode [ 272.264166][ T13] bridge_slave_0: left promiscuous mode [ 272.270509][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.627605][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.639114][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.650361][ T13] bond0 (unregistering): Released all slaves [ 272.663455][T11781] veth1_vlan: entered promiscuous mode [ 272.835364][T11781] veth0_macvtap: entered promiscuous mode [ 272.890987][T11781] veth1_macvtap: entered promiscuous mode [ 272.897874][T12016] chnl_net:caif_netlink_parms(): no params data found [ 272.982896][ T13] hsr_slave_0: left promiscuous mode [ 272.992889][ T13] hsr_slave_1: left promiscuous mode [ 272.999189][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.007437][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.019322][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.026761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.047706][ T13] veth1_macvtap: left promiscuous mode [ 273.053604][ T13] veth0_macvtap: left promiscuous mode [ 273.059532][ T13] veth1_vlan: left promiscuous mode [ 273.064905][ T13] veth0_vlan: left promiscuous mode [ 273.117607][T12033] openvswitch: netlink: Message has 4 unknown bytes. [ 273.444972][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.454149][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.470502][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.481272][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.489745][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.818712][ T5843] Bluetooth: hci1: command tx timeout [ 274.684144][ T13] team0 (unregistering): Port device team_slave_1 removed [ 274.726850][ T13] team0 (unregistering): Port device team_slave_0 removed [ 275.261290][T12033] hsr_slave_1 (unregistering): left promiscuous mode [ 275.326263][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.332867][T12051] __nla_validate_parse: 3 callbacks suppressed [ 275.332891][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 275.364241][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.472465][T11781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.482216][T11781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.491446][T11781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.500540][T11781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.543907][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.555199][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.564956][T12016] bridge_slave_0: entered allmulticast mode [ 275.573883][T12016] bridge_slave_0: entered promiscuous mode [ 275.588661][ T5843] Bluetooth: hci3: command tx timeout [ 275.598804][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.606005][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.613592][T12016] bridge_slave_1: entered allmulticast mode [ 275.622195][T12016] bridge_slave_1: entered promiscuous mode [ 275.630482][T12055] syzkaller0: entered allmulticast mode [ 275.636339][T12051] syzkaller0: entered promiscuous mode [ 275.644157][T12051] syzkaller0: entered allmulticast mode [ 275.685745][T12058] syzkaller0 (unregistering): left allmulticast mode [ 275.729346][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1446'. [ 275.806598][T12016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.900124][ T5843] Bluetooth: hci1: command tx timeout [ 275.919882][T12016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.052847][T12016] team0: Port device team_slave_0 added [ 276.072983][T12016] team0: Port device team_slave_1 added [ 276.254764][T12016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.262015][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.294343][T12016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.347088][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.368455][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 276.377470][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 276.388080][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 276.398520][T12016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.405602][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.432995][T12016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.462334][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.472330][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 276.483318][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.531954][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.650902][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.731491][T12016] hsr_slave_0: entered promiscuous mode [ 276.742359][T12016] hsr_slave_1: entered promiscuous mode [ 276.767405][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.851036][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.865761][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.006553][T12040] chnl_net:caif_netlink_parms(): no params data found [ 277.136406][T12096] netlink: 'syz.2.1457': attribute type 30 has an invalid length. [ 277.195059][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 277.226760][T12096] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 277.258010][T12096] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 277.530500][ T13] bridge_slave_1: left allmulticast mode [ 277.536218][ T13] bridge_slave_1: left promiscuous mode [ 277.542438][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.553628][ T13] bridge_slave_0: left allmulticast mode [ 277.559937][ T13] bridge_slave_0: left promiscuous mode [ 277.567007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.668305][ T5843] Bluetooth: hci3: command tx timeout [ 277.959969][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.974625][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.983341][ T5843] Bluetooth: hci1: command tx timeout [ 277.990918][ T13] bond0 (unregistering): Released all slaves [ 278.035541][T12040] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.042878][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.050328][T12040] bridge_slave_0: entered allmulticast mode [ 278.058152][T12040] bridge_slave_0: entered promiscuous mode [ 278.087336][T12040] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.094678][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.102134][T12040] bridge_slave_1: entered allmulticast mode [ 278.110461][T12040] bridge_slave_1: entered promiscuous mode [ 278.186547][T12040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.203104][T12040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.262661][T12040] team0: Port device team_slave_0 added [ 278.319826][T12040] team0: Port device team_slave_1 added [ 278.565460][ T13] hsr_slave_0: left promiscuous mode [ 278.619810][ T13] hsr_slave_1: left promiscuous mode [ 278.638794][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.646498][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.655614][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.674066][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.735678][ T13] veth1_macvtap: left promiscuous mode [ 278.752999][ T13] veth0_macvtap: left promiscuous mode [ 278.759017][ T13] veth1_vlan: left promiscuous mode [ 278.780837][ T13] veth0_vlan: left promiscuous mode [ 278.950524][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.963368][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.972642][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.996333][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.012667][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.423464][ T13] team0 (unregistering): Port device team_slave_1 removed [ 279.470285][ T13] team0 (unregistering): Port device team_slave_0 removed [ 279.748416][ T5843] Bluetooth: hci3: command tx timeout [ 279.945225][T12040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.952804][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.980359][T12040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.994397][T12040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.001587][T12040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.027750][T12040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.068531][ T5843] Bluetooth: hci1: command tx timeout [ 280.104097][T12136] bridge0: left allmulticast mode [ 280.114254][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.144825][T12136] bridge0: port 3(dummy0) entered blocking state [ 280.151565][T12136] bridge0: port 3(dummy0) entered listening state [ 280.171937][T12136] bridge0: port 3(dummy0) entered disabled state [ 280.186648][T12136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.376298][T12147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1468'. [ 280.417689][T12040] hsr_slave_0: entered promiscuous mode [ 280.441899][T12040] hsr_slave_1: entered promiscuous mode [ 280.448475][T12040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.456089][T12040] Cannot create hsr debugfs directory [ 280.488468][T12149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.562468][T12151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.764588][T12016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.781585][T12016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.827783][T12016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.846431][T12016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.877281][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 280.928898][T12157] xt_hashlimit: size too large, truncated to 1048576 [ 281.000269][T12160] xt_hashlimit: size too large, truncated to 1048576 [ 281.027550][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.098427][ T5843] Bluetooth: hci2: command tx timeout [ 281.206510][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 281.264520][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.323297][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 281.433198][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.515109][T12137] chnl_net:caif_netlink_parms(): no params data found [ 281.549685][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.818581][ T5843] Bluetooth: hci3: command tx timeout [ 282.074197][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.086070][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.096561][T12137] bridge_slave_0: entered allmulticast mode [ 282.107679][T12137] bridge_slave_0: entered promiscuous mode [ 282.115637][ T13] bridge_slave_1: left allmulticast mode [ 282.122370][ T13] bridge_slave_1: left promiscuous mode [ 282.128240][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.155369][ T13] bridge_slave_0: left allmulticast mode [ 282.164062][ T13] bridge_slave_0: left promiscuous mode [ 282.172215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.317456][T12195] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 282.332142][T12195] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 282.340002][T12195] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 282.347865][T12195] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 282.357323][T12195] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 282.365321][T12195] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 282.648836][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.663940][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.674327][ T13] bond0 (unregistering): Released all slaves [ 282.704361][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.712278][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.719901][T12137] bridge_slave_1: entered allmulticast mode [ 282.727341][T12137] bridge_slave_1: entered promiscuous mode [ 282.827934][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.899801][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.969420][T12040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.996230][T12040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.012822][T12040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.052631][T12137] team0: Port device team_slave_0 added [ 283.114715][T12137] team0: Port device team_slave_1 added [ 283.135663][T12040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.177053][T12016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.187333][ T5843] Bluetooth: hci2: command tx timeout [ 283.263214][ T13] hsr_slave_0: left promiscuous mode [ 283.270515][ T13] hsr_slave_1: left promiscuous mode [ 283.276544][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.284117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.294523][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.302053][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.324864][ T13] veth1_macvtap: left promiscuous mode [ 283.325571][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 283.330866][ T13] veth0_macvtap: left promiscuous mode [ 283.346708][ T13] veth1_vlan: left promiscuous mode [ 283.352311][ T13] veth0_vlan: left promiscuous mode [ 283.824138][ T13] team0 (unregistering): Port device team_slave_1 removed [ 283.867206][ T13] team0 (unregistering): Port device team_slave_0 removed [ 284.293837][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.304124][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.331418][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.344644][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.351674][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.382451][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.574427][T12137] hsr_slave_0: entered promiscuous mode [ 284.590805][T12137] hsr_slave_1: entered promiscuous mode [ 284.597441][T12137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.605370][T12137] Cannot create hsr debugfs directory [ 284.629681][T12016] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.745308][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.752586][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.784817][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.792090][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.986203][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1490'. [ 285.157012][T12040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.246933][T12040] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.258856][ T5843] Bluetooth: hci2: command tx timeout [ 285.337642][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.344956][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.403551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.410852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.542379][T12040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.652412][T12016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.796654][T12137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.844032][T12137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.874692][T12016] veth0_vlan: entered promiscuous mode [ 285.904371][T12137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.923229][T12016] veth1_vlan: entered promiscuous mode [ 285.941404][T12137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.948977][T12258] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 285.956790][T12258] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 286.103002][T12040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.136358][T12016] veth0_macvtap: entered promiscuous mode [ 286.205998][T12016] veth1_macvtap: entered promiscuous mode [ 286.270505][T12016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.282096][T12040] veth0_vlan: entered promiscuous mode [ 286.307229][T12016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.334138][T12016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.344898][T12016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.355404][T12016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.366204][T12016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.419083][T12040] veth1_vlan: entered promiscuous mode [ 286.452872][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.570159][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.610408][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.627688][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.643961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.651221][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.692800][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.700004][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.721663][T12274] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 286.722812][T12040] veth0_macvtap: entered promiscuous mode [ 286.753903][T12040] veth1_macvtap: entered promiscuous mode [ 286.770183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.781269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.844674][T12040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.896636][T12040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.074188][T12040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.097789][T12040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.112601][T12040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.121923][T12040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.207159][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 287.306291][ T1164] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.344200][ T5843] Bluetooth: hci2: command tx timeout [ 287.355480][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 287.380654][T12288] netlink: 'syz.2.1506': attribute type 4 has an invalid length. [ 287.514779][ T1164] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.652034][ T1164] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.725408][ T1164] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.751761][ T7435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.766432][ T7435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.774107][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.854598][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.878706][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.972665][ T1164] bridge_slave_1: left allmulticast mode [ 287.992540][ T1164] bridge_slave_1: left promiscuous mode [ 288.008723][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.030699][ T1164] bridge_slave_0: left allmulticast mode [ 288.036523][ T1164] bridge_slave_0: left promiscuous mode [ 288.042833][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.612410][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.622312][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.630864][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.641218][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.656433][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.665582][T12302] netlink: 'syz.0.1507': attribute type 4 has an invalid length. [ 288.779593][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.792405][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.803002][ T1164] bond0 (unregistering): Released all slaves [ 289.353292][T12137] veth0_vlan: entered promiscuous mode [ 289.367229][ T1164] hsr_slave_0: left promiscuous mode [ 289.375144][ T1164] hsr_slave_1: left promiscuous mode [ 289.381446][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.391405][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.399858][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.407335][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.429660][ T1164] veth1_macvtap: left promiscuous mode [ 289.435300][ T1164] veth0_macvtap: left promiscuous mode [ 289.441428][ T1164] veth1_vlan: left promiscuous mode [ 289.447731][ T1164] veth0_vlan: left promiscuous mode [ 289.925259][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 289.968601][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 290.584002][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.594409][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.602861][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.612048][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.621067][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.629142][T12316] tap0: tun_chr_ioctl cmd 1074025678 [ 290.649849][T12316] tap0: group set to 0 [ 290.678702][T12137] veth1_vlan: entered promiscuous mode [ 290.705843][ T5843] Bluetooth: hci1: command tx timeout [ 290.846899][T12137] veth0_macvtap: entered promiscuous mode [ 290.995790][T12305] chnl_net:caif_netlink_parms(): no params data found [ 291.052689][T12137] veth1_macvtap: entered promiscuous mode [ 291.189600][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.240954][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.287664][T12305] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.295931][T12305] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.303977][T12305] bridge_slave_0: entered allmulticast mode [ 291.311489][T12305] bridge_slave_0: entered promiscuous mode [ 291.327723][T12137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.339241][T12137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.348589][T12137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.353217][T12339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1514'. [ 291.357489][T12137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.383566][T12305] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.390915][T12305] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.398129][T12305] bridge_slave_1: entered allmulticast mode [ 291.406031][T12305] bridge_slave_1: entered promiscuous mode [ 291.518893][T12305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.575994][T12305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.702958][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.757180][T12305] team0: Port device team_slave_0 added [ 291.782526][T12321] chnl_net:caif_netlink_parms(): no params data found [ 291.822866][T12305] team0: Port device team_slave_1 added [ 291.854541][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.950529][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.027410][T12305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.064221][T12305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.097937][T12305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.198963][T12305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.216080][T12305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.261979][T12305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.326547][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.485048][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.503712][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.518975][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.531877][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.565904][T12321] bridge_slave_0: entered allmulticast mode [ 292.576028][T12321] bridge_slave_0: entered promiscuous mode [ 292.646736][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.660549][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.673932][T12321] bridge_slave_1: entered allmulticast mode [ 292.685008][T12321] bridge_slave_1: entered promiscuous mode [ 292.698850][ T5843] Bluetooth: hci3: command tx timeout [ 292.738798][T12305] hsr_slave_0: entered promiscuous mode [ 292.745417][T12305] hsr_slave_1: entered promiscuous mode [ 292.766652][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.779712][ T5843] Bluetooth: hci1: command tx timeout [ 292.825594][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.831203][ T7435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.852223][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.950060][T12321] team0: Port device team_slave_0 added [ 293.066231][T12321] team0: Port device team_slave_1 added [ 293.207353][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.214737][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.241144][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.286822][ T1164] bridge_slave_1: left allmulticast mode [ 293.293038][ T1164] bridge_slave_1: left promiscuous mode [ 293.299751][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.311788][ T1164] bridge_slave_0: left allmulticast mode [ 293.317508][ T1164] bridge_slave_0: left promiscuous mode [ 293.324006][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.832819][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.845327][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.855685][ T1164] bond0 (unregistering): Released all slaves [ 293.871156][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.878170][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.905760][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.116926][T12321] hsr_slave_0: entered promiscuous mode [ 294.124162][T12321] hsr_slave_1: entered promiscuous mode [ 294.131839][T12321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.139495][T12321] Cannot create hsr debugfs directory [ 294.243769][ T1164] hsr_slave_0: left promiscuous mode [ 294.249845][ T1164] hsr_slave_1: left promiscuous mode [ 294.255735][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.266630][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.275535][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.283106][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.305534][ T1164] veth1_macvtap: left promiscuous mode [ 294.314800][ T1164] veth0_macvtap: left promiscuous mode [ 294.320491][ T1164] veth1_vlan: left promiscuous mode [ 294.325777][ T1164] veth0_vlan: left promiscuous mode [ 294.457542][T12397] netlink: 'syz.2.1530': attribute type 39 has an invalid length. [ 294.545953][T12401] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 294.780014][ T5843] Bluetooth: hci3: command tx timeout [ 294.850220][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.858519][ T5839] Bluetooth: hci1: command tx timeout [ 294.866715][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.886394][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.906793][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.918983][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.024257][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 295.072380][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 295.794472][T12407] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 295.803713][T12407] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 296.094208][ T1164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.149320][T12305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.160311][T12305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.299616][ T1164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.324028][T12305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.349570][T12305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.405482][ T1164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.425966][T12404] chnl_net:caif_netlink_parms(): no params data found [ 296.513118][ T1164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.528511][T12428] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 296.536328][T12428] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 296.550839][T12428] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 296.559747][T12428] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.1536'. [ 296.611089][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 296.833322][T12404] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.857704][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.866336][ T5843] Bluetooth: hci3: command tx timeout [ 296.875766][T12404] bridge_slave_0: entered allmulticast mode [ 296.884147][T12404] bridge_slave_0: entered promiscuous mode [ 296.939995][ T5843] Bluetooth: hci1: command tx timeout [ 296.945476][ T55] Bluetooth: hci2: command tx timeout [ 296.958540][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.966641][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.989473][T12404] bridge_slave_1: entered allmulticast mode [ 296.997351][T12404] bridge_slave_1: entered promiscuous mode [ 297.059945][T12305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.115686][T12404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.146736][ T1164] bridge_slave_1: left allmulticast mode [ 297.153043][ T1164] bridge_slave_1: left promiscuous mode [ 297.159664][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.175981][ T1164] bridge_slave_0: left allmulticast mode [ 297.186347][ T1164] bridge_slave_0: left promiscuous mode [ 297.197170][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.570221][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.587523][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.598629][ T1164] bond0 (unregistering): Released all slaves [ 297.616158][T12404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.643511][T12457] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 297.755983][T12305] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.835354][T12404] team0: Port device team_slave_0 added [ 297.866128][T12404] team0: Port device team_slave_1 added [ 297.888226][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.895448][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.951479][T12321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.992922][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.000485][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.064906][T12321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.095386][T12469] xt_CT: No such helper "snmp" [ 298.114248][T12321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.126833][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 298.145156][T12477] nbd: nbd0 already in use [ 298.182079][T12404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.192042][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.219468][T12404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.252931][T12404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.260456][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.289686][T12404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.304812][T12321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.343844][ T1164] hsr_slave_0: left promiscuous mode [ 298.355578][ T1164] hsr_slave_1: left promiscuous mode [ 298.366320][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.374421][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.386053][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.394344][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.409462][T12488] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 298.421383][T12488] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1551'. [ 298.423626][ T1164] veth1_macvtap: left promiscuous mode [ 298.436634][ T1164] veth0_macvtap: left promiscuous mode [ 298.442700][ T1164] veth1_vlan: left promiscuous mode [ 298.448357][ T1164] veth0_vlan: left promiscuous mode [ 298.944025][ T55] Bluetooth: hci3: command tx timeout [ 298.964333][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 299.016002][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 299.028546][ T55] Bluetooth: hci2: command tx timeout [ 299.550133][T12404] hsr_slave_0: entered promiscuous mode [ 299.564154][T12404] hsr_slave_1: entered promiscuous mode [ 299.574303][T12404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.582612][T12404] Cannot create hsr debugfs directory [ 300.144455][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.232894][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.264203][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.271432][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.367886][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.375148][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.376368][T12516] netlink: 'syz.0.1561': attribute type 4 has an invalid length. [ 300.396815][T12516] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1561'. [ 300.451284][T12305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.487622][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 300.715843][T12305] veth0_vlan: entered promiscuous mode [ 300.746341][T12305] veth1_vlan: entered promiscuous mode [ 300.760647][T12404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.774832][T12404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.832254][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 300.849437][T12404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.873135][T12404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.996279][T12305] veth0_macvtap: entered promiscuous mode [ 301.021621][ T55] Bluetooth: hci3: command tx timeout [ 301.026525][T12305] veth1_macvtap: entered promiscuous mode [ 301.109058][ T55] Bluetooth: hci2: command tx timeout [ 301.145656][T12305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.170590][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.211604][T12305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.281013][T12305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.309288][T12305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.318306][T12305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.327046][T12305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.424040][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 301.472824][T12404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.599258][T12404] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.608766][ T7435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.626842][T12321] veth0_vlan: entered promiscuous mode [ 301.629125][T12555] delete_channel: no stack [ 301.637118][ T7435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.655938][T12321] veth1_vlan: entered promiscuous mode [ 301.695566][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.702801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.753738][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.761004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.820853][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.863785][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.919702][T12557] netlink: 'syz.2.1569': attribute type 5 has an invalid length. [ 301.933908][T12321] veth0_macvtap: entered promiscuous mode [ 301.944286][T12559] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 301.985274][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1569'. [ 301.995689][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 302.013890][T12321] veth1_macvtap: entered promiscuous mode [ 302.067721][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.207064][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.240612][T12321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.258929][T12321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.281480][T12321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.308436][T12321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.487361][ T7435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.595706][ T7435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.652293][T12404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.767119][ T7435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.829949][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.837844][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.909882][ T7435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.936771][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.962407][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.172466][ T7435] bridge_slave_1: left allmulticast mode [ 303.178712][ T7435] bridge_slave_1: left promiscuous mode [ 303.179232][ T55] Bluetooth: hci2: command tx timeout [ 303.184532][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.202555][ T7435] bridge_slave_0: left allmulticast mode [ 303.209114][ T7435] bridge_slave_0: left promiscuous mode [ 303.215927][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.812378][ T7435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.816399][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.833405][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.843501][ T7435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.844067][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.860793][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.871197][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.871826][ T7435] bond0 (unregistering): Released all slaves [ 303.919780][T12404] veth0_vlan: entered promiscuous mode [ 304.011547][T12404] veth1_vlan: entered promiscuous mode [ 304.154928][T12404] veth0_macvtap: entered promiscuous mode [ 304.173180][T12404] veth1_macvtap: entered promiscuous mode [ 304.205998][ T7435] hsr_slave_0: left promiscuous mode [ 304.214379][ T7435] hsr_slave_1: left promiscuous mode [ 304.222756][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.230903][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.239647][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.247209][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.268453][ T7435] veth1_macvtap: left promiscuous mode [ 304.274038][ T7435] veth0_macvtap: left promiscuous mode [ 304.280117][ T7435] veth1_vlan: left promiscuous mode [ 304.285434][ T7435] veth0_vlan: left promiscuous mode [ 304.734539][T12593] xt_TCPMSS: Only works on TCP SYN packets [ 304.944471][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'. [ 305.029158][ T7435] team0 (unregistering): Port device team_slave_1 removed [ 305.093818][ T7435] team0 (unregistering): Port device team_slave_0 removed [ 305.130033][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.144827][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.161581][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.179778][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.189993][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.795276][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 305.852089][T12404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.898681][ T55] Bluetooth: hci1: command tx timeout [ 305.928855][T12404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.956555][T12586] chnl_net:caif_netlink_parms(): no params data found [ 306.002282][T12404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.011587][T12404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.028342][T12404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.048075][T12404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.389896][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.391217][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.397849][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.405898][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.516009][T12633] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 306.536338][T12633] netlink: 'syz.2.1586': attribute type 2 has an invalid length. [ 306.537006][T12631] xt_CT: No such helper "snmp" [ 306.581993][ T7435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.626600][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.635259][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.646930][T12586] bridge_slave_0: entered allmulticast mode [ 306.657513][T12586] bridge_slave_0: entered promiscuous mode [ 306.815861][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.830343][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.837746][T12586] bridge_slave_1: entered allmulticast mode [ 306.847628][T12586] bridge_slave_1: entered promiscuous mode [ 306.912577][ T7435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.042119][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 307.051414][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.063694][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 307.075656][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 307.127208][ T7435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.150766][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.221343][T12600] chnl_net:caif_netlink_parms(): no params data found [ 307.262996][ T55] Bluetooth: hci3: command tx timeout [ 307.277745][ T7435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.305604][T12586] team0: Port device team_slave_0 added [ 307.363026][T12586] team0: Port device team_slave_1 added [ 307.450927][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.457920][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.484343][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.517340][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.524902][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.551386][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.596270][T12600] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.605027][T12600] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.612635][T12600] bridge_slave_0: entered allmulticast mode [ 307.622238][T12600] bridge_slave_0: entered promiscuous mode [ 307.631619][T12600] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.639428][T12600] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.646698][T12600] bridge_slave_1: entered allmulticast mode [ 307.654503][T12600] bridge_slave_1: entered promiscuous mode [ 307.760290][T12600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.771551][ T7435] bridge_slave_1: left allmulticast mode [ 307.777259][ T7435] bridge_slave_1: left promiscuous mode [ 307.792421][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.804603][ T7435] bridge_slave_0: left allmulticast mode [ 307.811055][ T7435] bridge_slave_0: left promiscuous mode [ 307.816986][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.979606][ T55] Bluetooth: hci1: command tx timeout [ 308.279065][ T7435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.310597][ T7435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.338935][ T7435] bond0 (unregistering): Released all slaves [ 308.374338][T12586] hsr_slave_0: entered promiscuous mode [ 308.392300][T12586] hsr_slave_1: entered promiscuous mode [ 308.403710][T12600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.756470][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.781740][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.790726][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.800634][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.814263][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.834695][T12600] team0: Port device team_slave_0 added [ 308.884171][T12600] team0: Port device team_slave_1 added [ 309.093664][T12600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.119698][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.158488][T12600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.171927][T12600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.179110][T12600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.208081][T12600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.255429][ T7435] hsr_slave_0: left promiscuous mode [ 309.267309][ T7435] hsr_slave_1: left promiscuous mode [ 309.274814][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.288327][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.302818][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.312048][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.347545][ T7435] veth1_macvtap: left promiscuous mode [ 309.348499][ T55] Bluetooth: hci3: command tx timeout [ 309.353391][ T7435] veth0_macvtap: left promiscuous mode [ 309.365173][ T7435] veth1_vlan: left promiscuous mode [ 309.370846][ T7435] veth0_vlan: left promiscuous mode [ 309.861667][ T7435] team0 (unregistering): Port device team_slave_1 removed [ 309.916260][ T7435] team0 (unregistering): Port device team_slave_0 removed [ 310.068535][ T55] Bluetooth: hci1: command tx timeout [ 310.557806][T12600] hsr_slave_0: entered promiscuous mode [ 310.569768][T12600] hsr_slave_1: entered promiscuous mode [ 310.576248][T12600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.585116][T12600] Cannot create hsr debugfs directory [ 310.795346][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 310.848083][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 310.864578][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 310.895661][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1601'. [ 310.938487][ T55] Bluetooth: hci2: command tx timeout [ 311.004649][ T7435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.067959][T12720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.114709][T12722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.180634][ T7435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.369801][ T7435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.418785][ T55] Bluetooth: hci3: command tx timeout [ 311.474855][ T7435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.558567][T12677] chnl_net:caif_netlink_parms(): no params data found [ 311.573809][T12586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.589745][T12586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.642727][T12586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.694138][T12586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.876123][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.884108][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.891688][T12677] bridge_slave_0: entered allmulticast mode [ 311.900898][T12677] bridge_slave_0: entered promiscuous mode [ 311.909911][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.917847][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.929686][T12677] bridge_slave_1: entered allmulticast mode [ 311.937592][T12677] bridge_slave_1: entered promiscuous mode [ 311.990045][ T7435] bridge_slave_1: left allmulticast mode [ 311.995777][ T7435] bridge_slave_1: left promiscuous mode [ 312.005845][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.017595][ T7435] bridge_slave_0: left allmulticast mode [ 312.024454][ T7435] bridge_slave_0: left promiscuous mode [ 312.032178][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.138539][ C0] ================================================================== [ 312.146683][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 312.154633][ C0] Read of size 2 at addr ffff88807e2a002a by task kworker/u8:11/7435 [ 312.162721][ C0] [ 312.165077][ C0] CPU: 0 UID: 0 PID: 7435 Comm: kworker/u8:11 Not tainted 6.15.0-rc5-syzkaller-00139-g498625a8ab2c #0 PREEMPT(full) [ 312.165100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.165112][ C0] Workqueue: netns cleanup_net [ 312.165148][ C0] Call Trace: [ 312.165163][ C0] [ 312.165171][ C0] dump_stack_lvl+0x189/0x250 [ 312.165198][ C0] ? __virt_addr_valid+0x18c/0x540 [ 312.165219][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.165244][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.165267][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.165290][ C0] ? lock_release+0x4b/0x3e0 [ 312.165315][ C0] ? __virt_addr_valid+0x18c/0x540 [ 312.165335][ C0] ? __virt_addr_valid+0x469/0x540 [ 312.165357][ C0] print_report+0xb4/0x290 [ 312.165376][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 312.165400][ C0] kasan_report+0x118/0x150 [ 312.165423][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 312.165451][ C0] rose_timer_expiry+0x471/0x4b0 [ 312.165476][ C0] call_timer_fn+0x17b/0x5f0 [ 312.165496][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.165519][ C0] ? call_timer_fn+0xbe/0x5f0 [ 312.165540][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.165565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.165581][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.165599][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.165624][ C0] __run_timer_base+0x61a/0x860 [ 312.165642][ C0] ? ktime_get+0x3e/0x1f0 [ 312.165663][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.165681][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 312.165706][ C0] run_timer_softirq+0xb7/0x180 [ 312.165726][ C0] handle_softirqs+0x283/0x870 [ 312.165753][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 312.165770][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 312.165797][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 312.165818][ C0] __irq_exit_rcu+0xca/0x1f0 [ 312.165832][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 312.165850][ C0] irq_exit_rcu+0x9/0x30 [ 312.165862][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.165880][ C0] [ 312.165885][ C0] [ 312.165891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.165909][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 312.165931][ C0] Code: 00 d2 c1 8b 48 c7 c6 40 d2 c1 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 4e 0e 1f 07 48 89 44 24 08 [ 312.165946][ C0] RSP: 0018:ffffc900033174c8 EFLAGS: 00000283 [ 312.165959][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 312.165969][ C0] RDX: 0000000000000000 RSI: ffffffff8bc1d240 RDI: ffffffff8bc1d200 [ 312.165980][ C0] RBP: ffffffff825b0d1c R08: 0000000000000000 R09: 0000000000000000 [ 312.165990][ C0] R10: dffffc0000000000 R11: ffffed10035dee2f R12: 0000000000000002 [ 312.166001][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000000 [ 312.166013][ C0] ? kernfs_root+0x1c/0x230 [ 312.166041][ C0] ? kernfs_root+0x1c/0x230 [ 312.166060][ C0] rcu_is_watching+0x15/0xb0 [ 312.166084][ C0] lock_acquire+0x5f/0x360 [ 312.166110][ C0] ? kernfs_root+0x1c/0x230 [ 312.166131][ C0] kernfs_root+0x38/0x230 [ 312.166151][ C0] ? kernfs_root+0x1c/0x230 [ 312.166178][ C0] __kernfs_remove+0x38e/0x570 [ 312.166194][ C0] kernfs_remove_by_name_ns+0xaf/0x130 [ 312.166210][ C0] sysfs_remove_group+0xfc/0x2c0 [ 312.166235][ C0] sysfs_remove_groups+0x54/0xb0 [ 312.166258][ C0] device_remove_attrs+0x208/0x260 [ 312.166278][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 312.166296][ C0] ? up_write+0x1c4/0x420 [ 312.166315][ C0] device_del+0x509/0x8e0 [ 312.166337][ C0] ? __pfx_device_del+0x10/0x10 [ 312.166355][ C0] ? netdev_unregister_kobject+0x344/0x450 [ 312.166381][ C0] unregister_netdevice_many_notify+0x1d5d/0x2330 [ 312.166415][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 312.166443][ C0] ? unregister_netdevice_queue+0x1b3/0x380 [ 312.166467][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 312.166489][ C0] ? net_generic+0x1e/0x240 [ 312.166519][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 312.166541][ C0] cleanup_net+0x6a3/0xbd0 [ 312.166560][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 312.166580][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.166596][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 312.166621][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 312.166646][ C0] process_scheduled_works+0xadb/0x17a0 [ 312.166684][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.166716][ C0] worker_thread+0x8a0/0xda0 [ 312.166743][ C0] kthread+0x70e/0x8a0 [ 312.166763][ C0] ? __pfx_worker_thread+0x10/0x10 [ 312.166777][ C0] ? __pfx_kthread+0x10/0x10 [ 312.166795][ C0] ? __pfx_kthread+0x10/0x10 [ 312.166812][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.166828][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.166846][ C0] ? __pfx_kthread+0x10/0x10 [ 312.166863][ C0] ret_from_fork+0x4b/0x80 [ 312.166879][ C0] ? __pfx_kthread+0x10/0x10 [ 312.166897][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.166919][ C0] [ 312.166925][ C0] [ 312.660590][ C0] Allocated by task 12305: [ 312.665011][ C0] kasan_save_track+0x3e/0x80 [ 312.669700][ C0] __kasan_kmalloc+0x93/0xb0 [ 312.674298][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 312.679189][ C0] __alloc_workqueue+0x103/0x1b70 [ 312.684226][ C0] alloc_workqueue+0xd4/0x210 [ 312.688913][ C0] wg_newlink+0x29e/0x640 [ 312.693253][ C0] rtnl_newlink_create+0x305/0xaf0 [ 312.698384][ C0] rtnl_newlink+0x16d6/0x1c70 [ 312.703082][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 312.708036][ C0] netlink_rcv_skb+0x219/0x490 [ 312.712839][ C0] netlink_unicast+0x758/0x8d0 [ 312.717610][ C0] netlink_sendmsg+0x805/0xb30 [ 312.722391][ C0] __sock_sendmsg+0x219/0x270 [ 312.727077][ C0] __sys_sendto+0x3bd/0x520 [ 312.731602][ C0] __x64_sys_sendto+0xde/0x100 [ 312.736379][ C0] do_syscall_64+0xf6/0x210 [ 312.740905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.746842][ C0] [ 312.749176][ C0] Freed by task 23: [ 312.752994][ C0] kasan_save_track+0x3e/0x80 [ 312.757688][ C0] kasan_save_free_info+0x46/0x50 [ 312.762728][ C0] __kasan_slab_free+0x62/0x70 [ 312.767503][ C0] kfree+0x193/0x440 [ 312.771423][ C0] rcu_core+0xca5/0x1710 [ 312.775698][ C0] handle_softirqs+0x283/0x870 [ 312.780523][ C0] run_ksoftirqd+0x9b/0x100 [ 312.785051][ C0] smpboot_thread_fn+0x53f/0xa60 [ 312.790113][ C0] kthread+0x70e/0x8a0 [ 312.794231][ C0] ret_from_fork+0x4b/0x80 [ 312.798659][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.803430][ C0] [ 312.805762][ C0] Last potentially related work creation: [ 312.811514][ C0] kasan_save_stack+0x3e/0x60 [ 312.816230][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 312.821468][ C0] call_rcu+0x142/0x990 [ 312.825631][ C0] kthread_worker_fn+0x504/0xb60 [ 312.830583][ C0] kthread+0x70e/0x8a0 [ 312.834664][ C0] ret_from_fork+0x4b/0x80 [ 312.839183][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.843966][ C0] [ 312.846297][ C0] The buggy address belongs to the object at ffff88807e2a0000 [ 312.846297][ C0] which belongs to the cache kmalloc-512 of size 512 [ 312.860455][ C0] The buggy address is located 42 bytes inside of [ 312.860455][ C0] freed 512-byte region [ffff88807e2a0000, ffff88807e2a0200) [ 312.874176][ C0] [ 312.876508][ C0] The buggy address belongs to the physical page: [ 312.883006][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e2a0c00 pfn:0x7e2a0 [ 312.893151][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 312.901655][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 312.910179][ C0] page_type: f5(slab) [ 312.914202][ C0] raw: 00fff00000000240 ffff88801a041c80 ffffea0001860810 ffffea0001febe10 [ 312.922796][ C0] raw: ffff88807e2a0c00 000000000010000f 00000000f5000000 0000000000000000 [ 312.931391][ C0] head: 00fff00000000240 ffff88801a041c80 ffffea0001860810 ffffea0001febe10 [ 312.940086][ C0] head: ffff88807e2a0c00 000000000010000f 00000000f5000000 0000000000000000 [ 312.948773][ C0] head: 00fff00000000002 ffffea0001f8a801 00000000ffffffff 00000000ffffffff [ 312.957495][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 312.966179][ C0] page dumped because: kasan: bad access detected [ 312.972613][ C0] page_owner tracks the page as allocated [ 312.978766][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 93955777685, free_ts 93810239757 [ 313.000241][ C0] post_alloc_hook+0x1d8/0x230 [ 313.005151][ C0] get_page_from_freelist+0x21ce/0x22b0 [ 313.010799][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 313.016828][ C0] alloc_pages_mpol+0x232/0x4a0 [ 313.021726][ C0] allocate_slab+0x8a/0x3b0 [ 313.026272][ C0] ___slab_alloc+0xbfc/0x1480 [ 313.030975][ C0] __kmalloc_noprof+0x305/0x4f0 [ 313.035897][ C0] fib6_info_alloc+0x30/0xf0 [ 313.040515][ C0] ip6_route_info_create+0x4b3/0x1360 [ 313.045947][ C0] ip6_route_add+0x28/0x160 [ 313.050487][ C0] addrconf_add_dev+0x24f/0x340 [ 313.055377][ C0] inet6_addr_add+0x1a1/0xc00 [ 313.060096][ C0] inet6_rtm_newaddr+0x93d/0xd20 [ 313.065061][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 313.070036][ C0] netlink_rcv_skb+0x219/0x490 [ 313.074838][ C0] netlink_unicast+0x758/0x8d0 [ 313.079890][ C0] page last free pid 5832 tgid 5832 stack trace: [ 313.086244][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 313.091428][ C0] __slab_free+0x326/0x400 [ 313.095856][ C0] qlist_free_all+0x9a/0x140 [ 313.100561][ C0] kasan_quarantine_reduce+0x148/0x160 [ 313.106407][ C0] __kasan_slab_alloc+0x22/0x80 [ 313.111308][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 313.116720][ C0] ref_tracker_alloc+0x133/0x460 [ 313.121694][ C0] netdev_queue_update_kobjects+0x1d1/0x6c0 [ 313.127636][ C0] netdev_register_kobject+0x236/0x2f0 [ 313.133130][ C0] register_netdevice+0x126c/0x1af0 [ 313.138371][ C0] nsim_create+0xb19/0xef0 [ 313.142825][ C0] __nsim_dev_port_add+0x70a/0xb20 [ 313.147975][ C0] nsim_dev_port_add_all+0x35/0xe0 [ 313.153135][ C0] nsim_drv_probe+0x883/0xb70 [ 313.157874][ C0] really_probe+0x26a/0x9a0 [ 313.162412][ C0] __driver_probe_device+0x18c/0x2f0 [ 313.167721][ C0] [ 313.170059][ C0] Memory state around the buggy address: [ 313.175697][ C0] ffff88807e29ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.183767][ C0] ffff88807e29ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.191842][ C0] >ffff88807e2a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.199911][ C0] ^ [ 313.205287][ C0] ffff88807e2a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.213358][ C0] ffff88807e2a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.221430][ C0] ================================================================== [ 313.229687][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 313.236919][ C0] CPU: 0 UID: 0 PID: 7435 Comm: kworker/u8:11 Not tainted 6.15.0-rc5-syzkaller-00139-g498625a8ab2c #0 PREEMPT(full) [ 313.249193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.259268][ C0] Workqueue: netns cleanup_net [ 313.264063][ C0] Call Trace: [ 313.267352][ C0] [ 313.270209][ C0] dump_stack_lvl+0x99/0x250 [ 313.274819][ C0] ? __asan_memcpy+0x40/0x70 [ 313.279419][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.284630][ C0] ? __pfx__printk+0x10/0x10 [ 313.289252][ C0] panic+0x2db/0x790 [ 313.293318][ C0] ? __pfx_panic+0x10/0x10 [ 313.297775][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 313.303723][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 313.309653][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.315999][ C0] ? print_memory_metadata+0x314/0x400 [ 313.321476][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 313.326612][ C0] check_panic_on_warn+0x89/0xb0 [ 313.331568][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 313.336933][ C0] end_report+0x78/0x160 [ 313.341242][ C0] kasan_report+0x129/0x150 [ 313.345784][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 313.350934][ C0] rose_timer_expiry+0x471/0x4b0 [ 313.355899][ C0] call_timer_fn+0x17b/0x5f0 [ 313.360591][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 313.366094][ C0] ? call_timer_fn+0xbe/0x5f0 [ 313.370815][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 313.375952][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.381220][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.386462][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 313.391953][ C0] __run_timer_base+0x61a/0x860 [ 313.396852][ C0] ? ktime_get+0x3e/0x1f0 [ 313.401218][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 313.406607][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 313.412919][ C0] run_timer_softirq+0xb7/0x180 [ 313.417808][ C0] handle_softirqs+0x283/0x870 [ 313.422603][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 313.427406][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 313.432727][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 313.437950][ C0] __irq_exit_rcu+0xca/0x1f0 [ 313.442554][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 313.447763][ C0] irq_exit_rcu+0x9/0x30 [ 313.452016][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 313.457701][ C0] [ 313.460641][ C0] [ 313.463580][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.469568][ C0] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 313.475849][ C0] Code: 00 d2 c1 8b 48 c7 c6 40 d2 c1 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 4e 0e 1f 07 48 89 44 24 08 [ 313.495501][ C0] RSP: 0018:ffffc900033174c8 EFLAGS: 00000283 [ 313.501603][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 313.509630][ C0] RDX: 0000000000000000 RSI: ffffffff8bc1d240 RDI: ffffffff8bc1d200 [ 313.517613][ C0] RBP: ffffffff825b0d1c R08: 0000000000000000 R09: 0000000000000000 [ 313.525590][ C0] R10: dffffc0000000000 R11: ffffed10035dee2f R12: 0000000000000002 [ 313.533843][ C0] R13: ffffffff8df3b860 R14: 0000000000000000 R15: 0000000000000000 [ 313.541869][ C0] ? kernfs_root+0x1c/0x230 [ 313.546427][ C0] ? kernfs_root+0x1c/0x230 [ 313.550984][ C0] rcu_is_watching+0x15/0xb0 [ 313.555608][ C0] lock_acquire+0x5f/0x360 [ 313.560081][ C0] ? kernfs_root+0x1c/0x230 [ 313.564619][ C0] kernfs_root+0x38/0x230 [ 313.568985][ C0] ? kernfs_root+0x1c/0x230 [ 313.573539][ C0] __kernfs_remove+0x38e/0x570 [ 313.578315][ C0] kernfs_remove_by_name_ns+0xaf/0x130 [ 313.583785][ C0] sysfs_remove_group+0xfc/0x2c0 [ 313.588759][ C0] sysfs_remove_groups+0x54/0xb0 [ 313.593833][ C0] device_remove_attrs+0x208/0x260 [ 313.598982][ C0] ? __pfx_device_remove_attrs+0x10/0x10 [ 313.604659][ C0] ? up_write+0x1c4/0x420 [ 313.609556][ C0] device_del+0x509/0x8e0 [ 313.613914][ C0] ? __pfx_device_del+0x10/0x10 [ 313.618779][ C0] ? netdev_unregister_kobject+0x344/0x450 [ 313.624604][ C0] unregister_netdevice_many_notify+0x1d5d/0x2330 [ 313.631047][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 313.637842][ C0] ? unregister_netdevice_queue+0x1b3/0x380 [ 313.643752][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 313.650009][ C0] ? net_generic+0x1e/0x240 [ 313.654533][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 313.660532][ C0] cleanup_net+0x6a3/0xbd0 [ 313.664964][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 313.669915][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.675144][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 313.680917][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 313.686667][ C0] process_scheduled_works+0xadb/0x17a0 [ 313.692245][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.698252][ C0] worker_thread+0x8a0/0xda0 [ 313.702887][ C0] kthread+0x70e/0x8a0 [ 313.706998][ C0] ? __pfx_worker_thread+0x10/0x10 [ 313.712127][ C0] ? __pfx_kthread+0x10/0x10 [ 313.716748][ C0] ? __pfx_kthread+0x10/0x10 [ 313.721383][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.726605][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.731823][ C0] ? __pfx_kthread+0x10/0x10 [ 313.736450][ C0] ret_from_fork+0x4b/0x80 [ 313.740905][ C0] ? __pfx_kthread+0x10/0x10 [ 313.745533][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.750329][ C0] [ 313.753625][ C0] Kernel Offset: disabled [ 313.757964][ C0] Rebooting in 86400 seconds..