last executing test programs: 1m53.878816444s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 1m50.403836399s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 1m28.347154162s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 1m27.383395466s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 1m10.862634702s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 1m10.288160599s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 1m2.67572702s ago: executing program 0 (id=1398): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x49) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x3f}}}}}, 0x20}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="02"], 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1m2.376141923s ago: executing program 0 (id=1401): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x75537c67b29f09e9, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fa89a20b2bcdd0c9e2280253513e2ff5"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_SSID={0x24, 0x34, @random="f953df72e5ad7ade7c53cfad53dea1ba62f3f2afe8deaa32dd72196efd373b29"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a0c71a9e3d2cd9323fb5aa1677c9ddba"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="dfba11f1c27713ec3c7b98ee39ebb8bfe00cae96d66d322507f9ad4e7eec"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004185}, 0x80) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffff00, 0xffff00, 0xff000000, 0xff], [0xff, 0x0, 0x0, 0xff], 'batadv_slave_1\x00', 'vlan0\x00', {}, {}, 0x1d, 0x2, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xffffff00, 0xff], [0xffffffff, 0xff], 'bridge_slave_0\x00', 'bond0\x00', {}, {0xff}, 0x3c, 0x7, 0x4, 0x40}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'macvlan1\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x9, 0x2, 0x1e}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0x1, 0x6, 0x6}, {0x2, 0x2, 0x1}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000680)={0x5, 0x30, [0x800, 0x0, 0x1, 0xe], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000006c0)=0x2, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000700)={'pim6reg\x00', 0x9}) r5 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)=0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000007c0)=0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@RTM_NEWNSID={0x4c, 0x58, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c4800) connect$inet(r3, &(0x7f0000000900)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000940)={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000980)="8b9d1fd0415a1bdd5837649ae547e16557ebf1f97a8f4409741d94438b2b3d916a8ce4d641007c947c3aed7c2cbd2f8760865ef271c7a83caaf48ba46fcf46e5471eb020d1231fa519d159f794c6a8dbc44bff1c5fa24ce1ac25bb99d441da53c2c073b5ec40e3e8530905e70d4e439a526500243fbea5fd6f13cc7638ce308c2bc61e1e2774089769c7f31d07dd0f0e35d2863519b9b7bc03407e3df1005cd95f5ca2bdd31da90fb0f9f1b23f921bbb68591547af16583f603ce7123f89d5c30efc0e25f6d8cd5c88a38516505660940afbbf0abd84edb6118b084ade9009fdfefc073d8ec165", 0xe7}, {&(0x7f0000000a80)="671cdbe31de75d28158aecb6f6666e49f4872bb4022efbb01d606ce93a84a61645571870a2752db095ceea5b3678d58548f014ead6e170d077c4d2", 0x3b}], 0x2, &(0x7f0000000b00)=[@tclass={{0x14, 0x29, 0x43, 0xffffff01}}], 0x18}}], 0x1, 0x41) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000b80)={0x0, 0xfffb, 0x3, [0x2, 0x9, 0x6]}, 0xe) r8 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r9, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x8010) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001e40)={'lo\x00', &(0x7f0000000e00)=@ethtool_dump={0x3e, 0x0, 0x9, 0x1000, "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"}}) r10 = accept$inet6(r2, &(0x7f0000001e80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001ec0)=0x1c) sendto$inet6(r10, &(0x7f0000001f00)="8902e62a121633671982d21b75b6eba205514137defa55f05bf6d7759f51d70df33159e171ea92719771706782097c8b6ae08a92627b30df94be7e1086b23417445a87bf475208718121167d130b93b6873d38314949710a2ae884e9bb29de0e87ecfbe4304219693433d121d41585046d64dea0831c23818f75ac4170c44ee47bd8e276fbb0ec30587005d8dd5f0b607fd08c57520c9b4688cbab0f3a927030b8ad40799fc671b42d19ffa8041268aa13c9bd10a15665803bdd922c95eb4c0c47dfaa2f82427f83d55c6bcb36d42c718a6ebb9adeacfb878e46", 0xda, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000002000)) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wpan0\x00', 0x0}) r13 = syz_open_procfs$namespace(r7, &(0x7f0000002140)='ns/mnt\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x64, r11, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 1m2.199215918s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) r5 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a913d4d25f88896733ec923e6a2f5209c7c3a1a852a82ebc83c630f3be37e0d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "003ea051e4ec8c67a81b383175f8d230dd5dde2fa5a1b8f2ab2af4380eeb40fc"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5c}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47375970e6303af45e3c03d6046638e3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "44348207247f7994609e2840c2b3bee6"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b02c5fd701e2551cf355619c0a0ce7d6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1df, 0x5, {{0x2c, 0x4, 0x1, 0x6, 0xb0, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x44, 0xb1, 0x3, 0x4, [{@rand_addr=0x64010101, 0x1000}, {@broadcast, 0x1ff}, {@local, 0x1}, {@loopback, 0x5f93856d}, {@private=0xa010101, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8}]}, @noop, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@multicast1, 0x3}, {@local, 0x9}, {@multicast1, 0x2f6}, {@remote, 0x804d}, {@loopback, 0x9}]}, @timestamp={0x44, 0x14, 0x2e, 0x0, 0x9, [0x8, 0x6c, 0x7, 0x40]}]}}}}}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x17, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @generic={0x80, 0xc, 0xe, 0x2, 0x6}, @func, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000ac0)='GPL\x00', 0x1ff, 0x8b, &(0x7f0000000b00)=""/139, 0x41000, 0x44, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xc, 0x229, 0x40f}, 0x10, 0xffffffffffffffff, r12, 0xa, &(0x7f0000000e80)=[0xffffffffffffffff, r13], &(0x7f0000000ec0)=[{0x4, 0x5, 0xb, 0x7}, {0x3, 0x3, 0xf, 0x5}, {0x4, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x9, 0x5}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x3, 0xe, 0xd4543423c9b04314}, {0x1, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x5}, {0x1, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x4, 0x6}], 0x10, 0x163}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, r14, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cf8fb691b1ee"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a50b6829e11c5eab5fde08ec5f0745c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd43}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3fa0c473d096"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="8b2d58fb2de7f1a040740121f6057e32f872e4ec4adb3129c28de1fc86f0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c418ff4dcd28a8d843ab14a4b4a26e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r5) sendmsg$GTP_CMD_GETPDP(r15, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r16, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r17, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 53.2781318s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 52.264721973s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 46.240083974s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) r5 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a913d4d25f88896733ec923e6a2f5209c7c3a1a852a82ebc83c630f3be37e0d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "003ea051e4ec8c67a81b383175f8d230dd5dde2fa5a1b8f2ab2af4380eeb40fc"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5c}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47375970e6303af45e3c03d6046638e3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "44348207247f7994609e2840c2b3bee6"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b02c5fd701e2551cf355619c0a0ce7d6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1df, 0x5, {{0x2c, 0x4, 0x1, 0x6, 0xb0, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x44, 0xb1, 0x3, 0x4, [{@rand_addr=0x64010101, 0x1000}, {@broadcast, 0x1ff}, {@local, 0x1}, {@loopback, 0x5f93856d}, {@private=0xa010101, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8}]}, @noop, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@multicast1, 0x3}, {@local, 0x9}, {@multicast1, 0x2f6}, {@remote, 0x804d}, {@loopback, 0x9}]}, @timestamp={0x44, 0x14, 0x2e, 0x0, 0x9, [0x8, 0x6c, 0x7, 0x40]}]}}}}}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x17, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @generic={0x80, 0xc, 0xe, 0x2, 0x6}, @func, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000ac0)='GPL\x00', 0x1ff, 0x8b, &(0x7f0000000b00)=""/139, 0x41000, 0x44, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xc, 0x229, 0x40f}, 0x10, 0xffffffffffffffff, r12, 0xa, &(0x7f0000000e80)=[0xffffffffffffffff, r13], &(0x7f0000000ec0)=[{0x4, 0x5, 0xb, 0x7}, {0x3, 0x3, 0xf, 0x5}, {0x4, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x9, 0x5}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x3, 0xe, 0xd4543423c9b04314}, {0x1, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x5}, {0x1, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x4, 0x6}], 0x10, 0x163}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, r14, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cf8fb691b1ee"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a50b6829e11c5eab5fde08ec5f0745c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd43}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3fa0c473d096"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="8b2d58fb2de7f1a040740121f6057e32f872e4ec4adb3129c28de1fc86f0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c418ff4dcd28a8d843ab14a4b4a26e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r5) sendmsg$GTP_CMD_GETPDP(r15, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r16, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r17, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 29.548950744s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 28.980039302s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 27.530060141s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) r5 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a913d4d25f88896733ec923e6a2f5209c7c3a1a852a82ebc83c630f3be37e0d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "003ea051e4ec8c67a81b383175f8d230dd5dde2fa5a1b8f2ab2af4380eeb40fc"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5c}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47375970e6303af45e3c03d6046638e3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "44348207247f7994609e2840c2b3bee6"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b02c5fd701e2551cf355619c0a0ce7d6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1df, 0x5, {{0x2c, 0x4, 0x1, 0x6, 0xb0, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x44, 0xb1, 0x3, 0x4, [{@rand_addr=0x64010101, 0x1000}, {@broadcast, 0x1ff}, {@local, 0x1}, {@loopback, 0x5f93856d}, {@private=0xa010101, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8}]}, @noop, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@multicast1, 0x3}, {@local, 0x9}, {@multicast1, 0x2f6}, {@remote, 0x804d}, {@loopback, 0x9}]}, @timestamp={0x44, 0x14, 0x2e, 0x0, 0x9, [0x8, 0x6c, 0x7, 0x40]}]}}}}}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x17, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @generic={0x80, 0xc, 0xe, 0x2, 0x6}, @func, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000ac0)='GPL\x00', 0x1ff, 0x8b, &(0x7f0000000b00)=""/139, 0x41000, 0x44, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xc, 0x229, 0x40f}, 0x10, 0xffffffffffffffff, r12, 0xa, &(0x7f0000000e80)=[0xffffffffffffffff, r13], &(0x7f0000000ec0)=[{0x4, 0x5, 0xb, 0x7}, {0x3, 0x3, 0xf, 0x5}, {0x4, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x9, 0x5}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x3, 0xe, 0xd4543423c9b04314}, {0x1, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x5}, {0x1, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x4, 0x6}], 0x10, 0x163}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, r14, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cf8fb691b1ee"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a50b6829e11c5eab5fde08ec5f0745c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd43}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3fa0c473d096"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="8b2d58fb2de7f1a040740121f6057e32f872e4ec4adb3129c28de1fc86f0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c418ff4dcd28a8d843ab14a4b4a26e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r5) sendmsg$GTP_CMD_GETPDP(r15, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r16, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r17, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 7.902240953s ago: executing program 1 (id=717): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f00000033c0)="a9cb556f204608fcb173e8745e08525dc85378dd55c2050ab269b0ffbef8ec5430911ba8fc17a8fa627ca83f968c703a8757ea372fb413fcc24716864d021a6b0521c749961e929e655a4332645479395b32dffd4b2385b1d8b7fbd826a111e75c35c8680343eede1649133467b55a1e8a8a1a4ba48ccc8fc6ba402a3434e2c86ed4cac0eba972a9003d9617f877df5f8265e16f43d4ba2060f988ba1ce6fd9089f86aa55d7bb01fc8c6ebbcee917911e02483c33afb02a6d927ef1bc3b245b6", 0xc0}, {&(0x7f0000000600)="a0036bdda36a6e5056eb6d67b6582a0f0d7fd98b93c6fa74a5682f92d7", 0x1d}, {&(0x7f0000003480)="b1c3b065d7bcad84edc40be9a908536eea588104dbd575e977fae02de26cba59d8f4a4a3d119c5e6565076262e1ff4f8dc2c6b05c02d09a03ec622a911aa27c26185b894ea0528f79ade39a6316aa401eef166774831ad5824be36d3f19e586fc1dd36d9dd5b1f267eae6154583d92d508e8e9cd291b16a19c143a07be34c8454bdaf07c3392d7c1d667dc87972b1cda695cf3b399f7b1c772499463201fcbd30563b7cade4257a8c01f0b6f0a6c0284f2d7e1006271a633d8372a6095af2f59fb7275f4a11ca1670d587dcf71334d9adcab10f007a7422e1d2132e1d8311c51", 0xe0}, {&(0x7f0000000800)="6319bf9e02c7da8eb831c81934b63538adb89abc83d05f9df127bbf13221c2df4765b60f8ede96c6514c47931dcf81ad7f6e739414f3d12edd375ea4c1ad3f0f39a9e900db40ffd28ce10440e6f22d8d8e426a8de7986acb20a97977321350f160e3c7a6ece90d064b02bf50d3d1e2015df8fb", 0x73}, {&(0x7f0000003580)="d641c25de2fb171a164352a4f171500047a758d96739a8149ba89953f14ee30b5ff222fe239301f54ff1e67e9d038affa46697d011ada59a0edffa2f9c42d67fce5430b82847c4d78004ee16169ff15efebacfea780a0302", 0x58}], 0x5}, 0xfc) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x6, 0x40, 0x1}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r4, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)="38f3f11ffca6a7", 0x7}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=ANY=[@ANYBLOB="140000001000010000000000000000000100004a280000001e0a03000000000000009740000000040900010073797a300000000028000000000a03000000000012000000010000090900010073797a3000000000080002f46fed80061400000010000100000000009cbc59e568db89ea483f3757370959fbb4e33da5feca06b64bd2628c9145ea5e4b2d86bc4bbeb731582d5551c4a1bf4d5e6fe8a863d1e5fa758deadf7aae4416746fd2496a60a0364adbae977cb14658e1"], 0x78}}, 0x20000080) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000001380)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x4c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @loopback}, @in={0x2, 0x0, @empty}]}, &(0x7f0000000280)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040414}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r4}, 0x18) 6.545102281s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000890) r5 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x16c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a913d4d25f88896733ec923e6a2f5209c7c3a1a852a82ebc83c630f3be37e0d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "003ea051e4ec8c67a81b383175f8d230dd5dde2fa5a1b8f2ab2af4380eeb40fc"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5c}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47375970e6303af45e3c03d6046638e3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "44348207247f7994609e2840c2b3bee6"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b02c5fd701e2551cf355619c0a0ce7d6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x11}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1df, 0x5, {{0x2c, 0x4, 0x1, 0x6, 0xb0, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x44, 0xb1, 0x3, 0x4, [{@rand_addr=0x64010101, 0x1000}, {@broadcast, 0x1ff}, {@local, 0x1}, {@loopback, 0x5f93856d}, {@private=0xa010101, 0x3}, {@remote, 0x6}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x5}]}, @timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8}]}, @noop, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@multicast1, 0x3}, {@local, 0x9}, {@multicast1, 0x2f6}, {@remote, 0x804d}, {@loopback, 0x9}]}, @timestamp={0x44, 0x14, 0x2e, 0x0, 0x9, [0x8, 0x6c, 0x7, 0x40]}]}}}}}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x17, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @generic={0x80, 0xc, 0xe, 0x2, 0x6}, @func, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x8}, @exit, @alu={0x4, 0x1, 0x2, 0x6, 0x7, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000ac0)='GPL\x00', 0x1ff, 0x8b, &(0x7f0000000b00)=""/139, 0x41000, 0x44, '\x00', r11, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xc, 0x229, 0x40f}, 0x10, 0xffffffffffffffff, r12, 0xa, &(0x7f0000000e80)=[0xffffffffffffffff, r13], &(0x7f0000000ec0)=[{0x4, 0x5, 0xb, 0x7}, {0x3, 0x3, 0xf, 0x5}, {0x4, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x9, 0x5}, {0x5, 0x3, 0xf, 0x7}, {0x5, 0x3, 0xe, 0xd4543423c9b04314}, {0x1, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x5}, {0x1, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x4, 0x6}], 0x10, 0x163}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, r14, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cf8fb691b1ee"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}, @NL80211_ATTR_PMKID={0x14, 0x55, "5a50b6829e11c5eab5fde08ec5f0745c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd43}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3fa0c473d096"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="8b2d58fb2de7f1a040740121f6057e32f872e4ec4adb3129c28de1fc86f0"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c418ff4dcd28a8d843ab14a4b4a26e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000085}, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$gtp(&(0x7f0000001240), r5) sendmsg$GTP_CMD_GETPDP(r15, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r16, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r17, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 6.313068235s ago: executing program 3 (id=1109): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f00000001c0)=""/157, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x54e, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) 1.867536805s ago: executing program 4 (id=1676): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) (async) ppoll(&(0x7f0000000280)=[{r0, 0xc0}], 0x1, &(0x7f0000000440), 0x0, 0x0) 1.560868363s ago: executing program 4 (id=1679): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r2, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r2, r4, 0x2f, 0x2030, 0x4, @void, @void, @value=r5}, 0x20) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r4, r4, 0x2c}, 0x20) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.386490934s ago: executing program 2 (id=1680): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x24, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x8045) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="64ea23654360b9dd63cabcd237e53f95d32e47695305371939cef1083e2aa8584d3d7b62276e8a214c4c009224a14d1611cf84682db85505ce754583bcca4b347e98553f7b13ff3c99816efb7df6b1e2a7672760c7069f926028841392656441214d889c4b8d174df3874ad808000000000000006df4380c2a10119b690aec876f108b55ad10994e263cbad788720d361bf564b921b900"/162, @ANYRES16=r3, @ANYBLOB="00022abd7000ffdbdf25020000000800030000000000080002000800000008000200040000000400068008000400070000000400068008000400030000000500050003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x24040000) r6 = socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) unshare(0x26020480) ppoll(&(0x7f00000004c0)=[{r6, 0x41}], 0x1, &(0x7f0000000540), 0x0, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42, 0x3}}}, 0x10) 1.202683656s ago: executing program 2 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01"], 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01"], 0x1c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt(r3, 0x66f9, 0x100, 0x0, 0x0) (async) setsockopt(r3, 0x66f9, 0x100, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r0) 1.112476175s ago: executing program 4 (id=1682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) write(r0, &(0x7f0000000240)="4b756eb6f0ce2d794809ad0ad1f85f9ba689743d877c27a8c4ddc5400273567b802bd6b6738abea329da01469f7f05a0422f4772349295fb95e7a59ed6b3ea6f6d51b1932f61f66eb874b759eba13050f15db8ad2f05aeb57bc7e600a1131e0677172b6132c9b860906ad18eca8a341dce8995ab180ace1ceda04835aecea8d9129426c9c5e4cbda947cf6bd397102ddda3e5fdb135e719a7b883d3bf994d35b0f26ecc4eaa1c035c2921ee3b0501885b0fc815c62fc09d6395677b0bf3b6243cec388d73599f138921b3013d9ea4cb8acd023acbd23e2d298dd58af", 0xdc) 994.412657ms ago: executing program 4 (id=1683): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112270000000000950b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112270000000000950b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) (async) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x20, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x20, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) unshare(0x20400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x80}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x3, &(0x7f0000000180), 0x4) (async) setsockopt$rose(r6, 0x104, 0x3, &(0x7f0000000180), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) r9 = socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) socket(0x1f, 0x2, 0xffffffa3) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0xffe, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001bc0)="ec000900062b3325fe80000000000000dc8b852303848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a3c12", 0x2a}], 0x1}, 0x800) 992.862897ms ago: executing program 2 (id=1684): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0}, 0x40) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4400c800) (async) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 842.232826ms ago: executing program 2 (id=1685): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {0x10, 0x6}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 684.279087ms ago: executing program 2 (id=1686): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r8) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x40800) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) listen(r9, 0x1bbf7062) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x4, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffe03, 0x2, [@TCA_CGROUP_EMATCHES={0x0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xf, 0x7, 0x40}, {{0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x0, 0x2, 0x0, 0x0, {{0xd45d, 0x2, 0x8}, {0x3, 0x0, 0x1, "4ad675231fd9038378"}}}, @TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x10}, {0x7ff, 0x0, 0x1, "3377d0ce3de261"}}}, @TCF_EM_CONTAINER={0x0, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x2}, "ef3bbd6fdb69c92d6b1c946460fd587ebc057873eaa29cd3ebc5e6948dcce3ba2e5baa66984f06f58de59f280370b3bbe2a00a4c62c966191df3876594cf7214f98c63ccc92ceee22f557021415234c2c01dbe61eaba5e2ad15a7e4ee81cfe0123c4d83440c8a229cb0402704682da190d8b7db5c3617995322f8af8af2701e152a4a79e111a8cb1aabcc62b18c393c4dc090bcc47d8da0abd5dec794db5592d0e05f62cbea0121d0ad3a621dfee5a49e9784812c6d84eeca3b873184867f757c6033c7d53b9c14cee6efa4f9d0954ab49d57ca2e73a0089bcb6"}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x7}, {0x4, 0x5, 0x5}}}, @TCF_EM_NBYTE={0x0, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xd}, {0x2, 0x0, 0x1, "82335a489ff5ab"}}}, @TCF_EM_IPT={0x0, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x0, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x0, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x0, 0x4, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "78bac4aa83c215d50a81402a2b28ca0d8a027aed9c7b151faa2d7cede690bc0c693148af7d79d620aad453f888f4ec6518a3c22aaf53c269ee1f4eaf1e083afddd16d26f15a6bec8ddaaf675fad326b02f580549edbe"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "52f8f652e66012987232815a96d869"}, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "5336a24b28d2fd9f7166c21f71881f8e87ed49acc6d444414e9889d1ae091f396151e39b3369d638453d294feee95879391d1618ab05c1e0ff678de295f382c7f84434180a11fcd7af9f11410581a52c20bb68588f41eb817b8417a3fb1addeea3c88327cdf5e0f9b8bb1dcc0314c129f193e9676e98a0d4c763ccb755f88ad6af44d547ad34480511dd1de673d5c04ee7a16b351b2be7565b9f681a4393fb235b75f3052d28ae251177ce10ca50cd7e3ebe5d8ea7c777e8104699e16df651dbdb45413c"}, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0xc}, @TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x80}]}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x0, 0x2, 0x0, 0x0, {{0x1}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="9374228a14", @TCF_META_TYPE_VAR="14571813ab"]}, @TCA_EM_META_LVALUE, @TCA_EM_META_HDR={0x0, 0x1, {{0x9, 0xe, 0x1}, {0x92, 0xe6}}}]}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x8001, 0x1, 0x40}, {0x8, 0x3, 0x8000, 0x6, 0x2, 0x1}}}, @TCF_EM_IPT={0x0, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_REVISION={0x0, 0x3, 0x9}]}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x27, 0x8, 0x200}, {0x3, 0x4, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x0, 0x3, 0x0, 0x0, {{0x400, 0x0, 0x11}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x792a}, {0x0, 0x0, 0x2}}}, @TCF_EM_CMP={0x0, 0x2, 0x0, 0x0, {{0xc38, 0x1, 0x8000}, {0x5d, 0x0, 0x95, 0x0, 0x9, 0x1, 0x1}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x1, 0x4, 0xf930}, [@TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR="bb4f", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0c7697eb09", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="05fe5edb"]}]}}, @TCF_EM_CANID={0x0, 0x2, 0x0, 0x0, {{0xd0, 0x7, 0x5}, {{0x4, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x0, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x3}, {0x1, 0x4, 0x4}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x4819, 0x8, 0xffff}, {0xffffffffffffffff, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x3}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 486.384696ms ago: executing program 4 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) epoll_create(0xfffffff7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/207, 0xcf}, {&(0x7f00000019c0)=""/175, 0xaf}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004ac0)=""/4087, 0xff7}, {&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000001b80)=""/4111, 0x100f}, {&(0x7f0000000240)=""/163, 0xa3}], 0x5}, 0x88a}, {{0x0, 0x0, 0x0}, 0x80000003}], 0x5, 0x40018042, 0x0) 281.773498ms ago: executing program 2 (id=1688): socket(0x14, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r1, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r1, r3, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x870bd31, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5, 0x9}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 0s ago: executing program 4 (id=1689): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01dfffe500000300000007000000089432a2000300", @ANYRES32=r2, @ANYBLOB="08000500010000001400040074756e6c3000000000000000000000001c00e700d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): ous mode [ 235.163460][ T8884] veth0_vlan: left promiscuous mode [ 235.294130][T10668] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 235.309584][T10668] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1182'. [ 235.732145][ T324] smc: removing ib device syz2 [ 236.491253][ T1097] smc: removing ib device syz0 [ 236.611044][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.638973][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.668082][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.685240][ T24] syz2: Port: 1 Link DOWN [ 236.693692][ T5923] lo speed is unknown, defaulting to 1000 [ 236.717941][ T5923] syz0: Port: 1 Link DOWN [ 236.789471][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 236.825799][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.849726][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.879694][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.033725][T10711] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1187'. [ 237.081249][T10711] unsupported nlmsg_type 40 [ 237.277656][T10714] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 237.287410][T10714] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1188'. [ 237.598920][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 237.641588][T10715] erspan0: entered promiscuous mode [ 237.649334][T10715] vlan3: entered promiscuous mode [ 237.820913][T10339] hsr_slave_0: entered promiscuous mode [ 237.844913][T10339] hsr_slave_1: entered promiscuous mode [ 237.875207][T10339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.886852][T10339] Cannot create hsr debugfs directory [ 237.894855][T10721] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 238.455792][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1194'. [ 238.586465][T10237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.953738][T10237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.088307][T10237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.130950][T10761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.162692][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 239.214420][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1198'. [ 239.243323][T10237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.507115][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 240.024600][T10794] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1205'. [ 240.139484][T10799] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 240.484685][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 240.521020][ T8884] IPVS: stop unused estimator thread 0... [ 240.594190][T10812] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 240.630249][T10809] netlink: 'syz.4.1209': attribute type 25 has an invalid length. [ 240.723072][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 240.747326][T10817] netlink: 'syz.4.1209': attribute type 13 has an invalid length. [ 241.026328][T10816] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 241.060262][T10816] bond4: (slave vcan1): Error -95 calling set_mac_address [ 241.215454][T10237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.305727][T10237] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.388489][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.395821][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.455984][T10339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.462009][T10845] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1216'. [ 241.486900][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.494183][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.502224][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 241.525777][T10339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.558608][T10339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.602897][T10339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.927007][T10867] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 242.226467][T10877] tipc: Enabling of bearer rejected, failed to enable media [ 242.274536][T10339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.285376][T10877] netlink: 'syz.0.1221': attribute type 33 has an invalid length. [ 242.298114][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 242.359847][T10339] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.391687][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.398914][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.423078][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.430334][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.459788][T10885] netlink: 'syz.2.1223': attribute type 6 has an invalid length. [ 242.467859][T10885] netlink: 'syz.2.1223': attribute type 5 has an invalid length. [ 242.602113][T10237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.861906][T10237] veth0_vlan: entered promiscuous mode [ 242.919756][T10237] veth1_vlan: entered promiscuous mode [ 243.085262][T10237] veth0_macvtap: entered promiscuous mode [ 243.125822][T10237] veth1_macvtap: entered promiscuous mode [ 243.215019][T10237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.275156][T10237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.358710][T10237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.375496][T10237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.405267][T10237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.426616][T10237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.432895][T10915] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 243.550551][T10339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.749808][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.777504][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.801150][T10924] __nla_validate_parse: 6 callbacks suppressed [ 243.801171][T10924] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1233'. [ 243.831240][T10339] veth0_vlan: entered promiscuous mode [ 243.871923][T10339] veth1_vlan: entered promiscuous mode [ 243.890525][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.908960][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.038663][T10339] veth0_macvtap: entered promiscuous mode [ 244.092017][T10339] veth1_macvtap: entered promiscuous mode [ 244.168766][T10339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.224120][T10339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.306608][T10339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.328038][T10940] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 244.337822][T10339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.339460][T10941] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 244.354716][T10339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.363832][T10339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.385206][T10941] netlink: 'syz.0.1239': attribute type 4 has an invalid length. [ 244.396587][T10941] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1239'. [ 244.543844][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 244.757853][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.873602][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.948662][ T8884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.970685][ T8884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.016814][ T8086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.031415][ T8086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.213687][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.471981][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.913155][ T1097] bridge_slave_1: left allmulticast mode [ 245.918933][ T1097] bridge_slave_1: left promiscuous mode [ 245.929840][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.954332][ T1097] bridge_slave_0: left allmulticast mode [ 245.969647][ T1097] bridge_slave_0: left promiscuous mode [ 245.976721][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.185280][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 246.287842][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.298492][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.315811][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.334135][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.342878][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.531779][T11003] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1248'. [ 246.732634][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.748754][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.760018][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.786594][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.795164][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.987332][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.005952][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.024159][ T1097] bond0 (unregistering): Released all slaves [ 247.387982][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 247.506626][T11029] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1252'. [ 247.716477][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1255'. [ 247.975208][ T1097] hsr_slave_0: left promiscuous mode [ 247.993840][ T1097] hsr_slave_1: left promiscuous mode [ 248.000576][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.012896][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.024611][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.032553][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.065065][ T1097] veth1_macvtap: left promiscuous mode [ 248.093518][ T1097] veth0_macvtap: left promiscuous mode [ 248.105390][ T1097] veth1_vlan: left promiscuous mode [ 248.116597][ T1097] veth0_vlan: left promiscuous mode [ 248.421537][ T5836] Bluetooth: hci0: command tx timeout [ 248.804957][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 248.851925][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 248.904191][ T5836] Bluetooth: hci4: command tx timeout [ 249.974089][T11008] chnl_net:caif_netlink_parms(): no params data found [ 250.178531][T11110] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 250.269682][T10995] chnl_net:caif_netlink_parms(): no params data found [ 250.315884][T11114] Bluetooth: MGMT ver 1.23 [ 250.328027][T11114] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 250.395791][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.413660][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.443180][T11008] bridge_slave_0: entered allmulticast mode [ 250.463359][T11117] netlink: 'syz.4.1270': attribute type 10 has an invalid length. [ 250.468663][T11008] bridge_slave_0: entered promiscuous mode [ 250.499434][ T5836] Bluetooth: hci0: command tx timeout [ 250.563092][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.598617][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.633067][T11008] bridge_slave_1: entered allmulticast mode [ 250.654172][T11008] bridge_slave_1: entered promiscuous mode [ 250.777763][T11127] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1272'. [ 250.917932][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.952917][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.984795][ T5836] Bluetooth: hci4: command tx timeout [ 251.165963][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.237925][T11150] netlink: 'syz.0.1276': attribute type 12 has an invalid length. [ 251.257626][T11150] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 251.275292][T11150] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1276'. [ 251.288362][T11150] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 251.298649][T11150] netlink: 'syz.0.1276': attribute type 3 has an invalid length. [ 251.316073][T11150] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1276'. [ 251.342615][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.359492][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.382424][T10995] bridge_slave_0: entered allmulticast mode [ 251.397028][T10995] bridge_slave_0: entered promiscuous mode [ 251.414417][T11008] team0: Port device team_slave_0 added [ 251.425254][T11008] team0: Port device team_slave_1 added [ 251.472292][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.479369][T11160] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1278'. [ 251.531423][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.538697][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.565061][T10995] bridge_slave_1: entered allmulticast mode [ 251.583984][T10995] bridge_slave_1: entered promiscuous mode [ 251.709404][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 251.720288][T11169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.732906][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.744964][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.780221][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.814317][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.890432][T11172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1283'. [ 251.900792][T11173] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1283'. [ 251.937469][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.949396][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.997399][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.053284][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.071956][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.088986][T11178] syz_tun: entered promiscuous mode [ 252.095983][T11178] batadv_slave_0: entered promiscuous mode [ 252.104227][T11178] hsr2: entered allmulticast mode [ 252.113202][T11178] syz_tun: entered allmulticast mode [ 252.118533][T11178] batadv_slave_0: entered allmulticast mode [ 252.141882][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.482195][T11008] hsr_slave_0: entered promiscuous mode [ 252.513267][T11008] hsr_slave_1: entered promiscuous mode [ 252.535301][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.562250][T11008] Cannot create hsr debugfs directory [ 252.579424][ T5836] Bluetooth: hci0: command tx timeout [ 252.599274][T10995] team0: Port device team_slave_0 added [ 252.667839][T10995] team0: Port device team_slave_1 added [ 252.838248][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.849050][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.908210][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.012316][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.029403][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.060658][ T5836] Bluetooth: hci4: command tx timeout [ 253.067034][T11218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1291'. [ 253.095072][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.201552][ T1097] bridge_slave_1: left allmulticast mode [ 253.207284][ T1097] bridge_slave_1: left promiscuous mode [ 253.230077][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.252298][ T1097] bridge_slave_0: left allmulticast mode [ 253.258114][ T1097] bridge_slave_0: left promiscuous mode [ 253.261485][T11222] netlink: 'syz.0.1292': attribute type 1 has an invalid length. [ 253.272235][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.488413][T11228] netlink: 'syz.0.1292': attribute type 21 has an invalid length. [ 253.513593][T11228] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1292'. [ 253.903809][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.915920][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.932152][ T1097] bond0 (unregistering): Released all slaves [ 254.004568][T11228] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1292'. [ 254.107553][T10995] hsr_slave_0: entered promiscuous mode [ 254.130064][T10995] hsr_slave_1: entered promiscuous mode [ 254.137612][T10995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.146049][T10995] Cannot create hsr debugfs directory [ 254.576290][T11253] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 254.621947][ T1097] hsr_slave_0: left promiscuous mode [ 254.659387][ T5836] Bluetooth: hci0: command tx timeout [ 254.678189][ T1097] hsr_slave_1: left promiscuous mode [ 254.688020][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.697345][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.705862][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.728880][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.784194][ T1097] veth1_macvtap: left promiscuous mode [ 254.787428][T11263] netlink: 'syz.4.1301': attribute type 11 has an invalid length. [ 254.793278][ T1097] veth0_macvtap: left promiscuous mode [ 254.804077][ T1097] veth1_vlan: left promiscuous mode [ 254.810326][ T1097] veth0_vlan: left promiscuous mode [ 255.149460][ T5836] Bluetooth: hci4: command tx timeout [ 255.313682][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 255.360906][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 255.964616][T11270] __nla_validate_parse: 1 callbacks suppressed [ 255.964638][T11270] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1304'. [ 255.979076][T11272] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 256.013271][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 256.066543][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 256.094433][T11272] netlink: 'syz.4.1303': attribute type 11 has an invalid length. [ 256.104049][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1303'. [ 256.246946][T11274] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 256.453147][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1306'. [ 256.764139][T11292] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1307'. [ 256.817190][T11008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.845098][T11008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.870330][T11008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.954138][T11008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.148685][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'. [ 257.164653][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'. [ 257.334712][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 257.576432][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.736514][T10995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.764044][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.768704][T11329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.789421][T10995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.831559][T10995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.905962][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.913231][ T8884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.955743][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.962969][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.982152][T10995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.413830][T10995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.486822][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.532916][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.540195][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.578544][T11371] tipc: Enabled bearer , priority 0 [ 258.600560][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.607959][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.628420][T11372] syzkaller0: entered promiscuous mode [ 258.642009][T11372] syzkaller0: entered allmulticast mode [ 258.748616][T11371] tipc: Resetting bearer [ 258.820625][T11371] tipc: Disabling bearer [ 258.823443][T11382] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 259.018740][T11382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.226939][T11384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.245189][T11384] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 259.294935][T11384] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 259.452420][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.485538][T11382] macvlan3: entered promiscuous mode [ 259.509301][T11382] macvlan3: entered allmulticast mode [ 259.515792][T11382] bond2: entered promiscuous mode [ 259.540447][T11382] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 259.564564][T11382] bond2: left promiscuous mode [ 259.886974][T11008] veth0_vlan: entered promiscuous mode [ 259.953906][T11431] openvswitch: netlink: IP tunnel dst address not specified [ 259.976053][T11008] veth1_vlan: entered promiscuous mode [ 260.009043][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.139124][T11008] veth0_macvtap: entered promiscuous mode [ 260.141567][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 260.201058][T11008] veth1_macvtap: entered promiscuous mode [ 260.263623][T10995] veth0_vlan: entered promiscuous mode [ 260.296829][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.308841][T11438] bpq0: entered promiscuous mode [ 260.317595][T11438] bpq0: entered allmulticast mode [ 260.339847][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.364361][T10995] veth1_vlan: entered promiscuous mode [ 260.392389][T11008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.407808][T11008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.422344][T11008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.433809][T11008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.594688][T10995] veth0_macvtap: entered promiscuous mode [ 260.685497][T10995] veth1_macvtap: entered promiscuous mode [ 260.809652][T11455] IPv6: Can't replace route, no match found [ 260.827699][T10995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.836871][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.858979][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.873884][T10995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.936006][T10995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.961131][T10995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.985870][T10995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.011912][T10995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.088839][ T7229] IPVS: starting estimator thread 0... [ 261.145136][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.185479][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.193716][T11468] IPVS: using max 25 ests per chain, 60000 per kthread [ 261.217288][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.305219][T11473] veth1_macvtap: left promiscuous mode [ 261.314931][T11473] macsec0: entered promiscuous mode [ 261.329500][T11473] macsec0: entered allmulticast mode [ 261.443551][T11476] veth1_macvtap: entered promiscuous mode [ 261.465161][T11476] veth1_macvtap: entered allmulticast mode [ 261.480540][T11476] macsec0: left promiscuous mode [ 261.493495][T11476] macsec0: left allmulticast mode [ 261.498618][T11476] veth1_macvtap: left allmulticast mode [ 261.594713][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.632367][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.639465][T11485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.846590][ T8086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.892233][ T8086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.033115][T11502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1347'. [ 262.074669][T11502] netlink: 'syz.4.1347': attribute type 10 has an invalid length. [ 262.096445][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1347'. [ 262.134176][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.195888][T11502] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.224765][T11502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.233705][T11502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.243879][T11502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.275003][T11502] team0: Port device geneve0 added [ 262.391923][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.503641][ T2967] tipc: Subscription rejected, illegal request [ 262.833287][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.888024][T11520] sit0: entered promiscuous mode [ 262.913076][T11520] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 262.953342][T11520] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1351'. [ 263.081653][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.260941][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.270244][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.279000][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.303416][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.313337][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.397060][ T37] bridge_slave_1: left allmulticast mode [ 263.411637][ T37] bridge_slave_1: left promiscuous mode [ 263.417498][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.428158][ T37] bridge_slave_0: left allmulticast mode [ 263.435641][ T37] bridge_slave_0: left promiscuous mode [ 263.442500][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.919838][T11545] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 263.927663][T11545] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1352'. [ 264.070380][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 264.087383][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.139758][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.170745][ T37] bond0 (unregistering): Released all slaves [ 264.279172][T11551] batadv_slave_1: Device is already in use. [ 264.306514][T11556] pim6reg: entered allmulticast mode [ 264.572458][T11569] netlink: 'syz.2.1359': attribute type 10 has an invalid length. [ 264.613912][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.623662][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.635823][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.649623][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.676524][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.881699][T11584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 264.927709][T11579] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1363'. [ 265.108242][ T37] hsr_slave_0: left promiscuous mode [ 265.190813][ T37] hsr_slave_1: left promiscuous mode [ 265.197212][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.248629][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.260428][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.273512][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.308690][ T37] veth1_macvtap: left promiscuous mode [ 265.317725][ T37] veth0_macvtap: left promiscuous mode [ 265.326617][ T37] veth1_vlan: left promiscuous mode [ 265.335306][ T37] veth0_vlan: left promiscuous mode [ 265.380735][ T5836] Bluetooth: hci0: command tx timeout [ 265.946865][ T37] team0 (unregistering): Port device team_slave_1 removed [ 265.988397][ T37] team0 (unregistering): Port device team_slave_0 removed [ 266.600679][T11613] tipc: Enabled bearer , priority 10 [ 266.616780][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 266.739769][ T5836] Bluetooth: hci4: command tx timeout [ 266.870794][T11631] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1372'. [ 266.900152][T11631] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 266.923229][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1372'. [ 266.984097][ T7229] IPVS: starting estimator thread 0... [ 267.090712][T11639] IPVS: using max 27 ests per chain, 64800 per kthread [ 267.225414][T11529] chnl_net:caif_netlink_parms(): no params data found [ 267.232925][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1372'. [ 267.459551][ T5836] Bluetooth: hci0: command tx timeout [ 267.583315][ T8885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.660243][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 267.724184][ T24] tipc: Node number set to 3672151624 [ 267.745957][ T8885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.784629][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.804295][T11529] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.816250][T11529] bridge_slave_0: entered allmulticast mode [ 267.825371][T11529] bridge_slave_0: entered promiscuous mode [ 267.835900][T11573] chnl_net:caif_netlink_parms(): no params data found [ 267.887559][ T8885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.915444][T11529] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.932755][T11529] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.946718][T11529] bridge_slave_1: entered allmulticast mode [ 267.956936][T11529] bridge_slave_1: entered promiscuous mode [ 268.028130][ T8885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.105098][T11681] netlink: 'syz.0.1381': attribute type 23 has an invalid length. [ 268.138916][T11529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.208195][T11529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.389005][T11529] team0: Port device team_slave_0 added [ 268.401150][T11529] team0: Port device team_slave_1 added [ 268.409985][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.417183][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.426622][T11573] bridge_slave_0: entered allmulticast mode [ 268.442173][T11573] bridge_slave_0: entered promiscuous mode [ 268.486989][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 268.534260][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.541902][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.554766][T11573] bridge_slave_1: entered allmulticast mode [ 268.571561][T11573] bridge_slave_1: entered promiscuous mode [ 268.610398][T11700] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1386'. [ 268.624580][T11529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.642666][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.676297][T11529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.808372][T11529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.819434][ T5836] Bluetooth: hci4: command tx timeout [ 268.824866][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.877137][T11529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.916403][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.930626][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.201224][T11716] tipc: Enabling of bearer rejected, media not registered [ 269.233930][T11573] team0: Port device team_slave_0 added [ 269.244554][ T8885] bridge_slave_1: left allmulticast mode [ 269.253375][ T8885] bridge_slave_1: left promiscuous mode [ 269.260249][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.275333][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 269.306826][ T8885] bridge_slave_0: left allmulticast mode [ 269.328245][ T8885] bridge_slave_0: left promiscuous mode [ 269.335689][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.344274][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 269.353654][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 269.501710][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 269.540148][ T5842] Bluetooth: hci0: command tx timeout [ 269.827432][ T8885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.839322][ T8885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.849900][ T8885] bond0 (unregistering): Released all slaves [ 269.870062][T11529] hsr_slave_0: entered promiscuous mode [ 269.876749][T11529] hsr_slave_1: entered promiscuous mode [ 269.886181][T11529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.894854][T11529] Cannot create hsr debugfs directory [ 269.902162][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 269.938982][T11573] team0: Port device team_slave_1 added [ 270.009781][T11731] vlan3: entered promiscuous mode [ 270.015010][T11731] vlan3: entered allmulticast mode [ 270.025649][T11731] hsr_slave_1: entered allmulticast mode [ 270.199495][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.206569][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.233302][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.246602][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.259016][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.288944][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.338347][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 270.590896][T11573] hsr_slave_0: entered promiscuous mode [ 270.611692][T11573] hsr_slave_1: entered promiscuous mode [ 270.623353][T11573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.632979][T11573] Cannot create hsr debugfs directory [ 270.736639][ T8885] hsr_slave_0: left promiscuous mode [ 270.755502][ T8885] hsr_slave_1: left promiscuous mode [ 270.766268][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.775931][ T8885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.789010][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.796939][ T8885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.835925][ T8885] veth1_macvtap: left promiscuous mode [ 270.842167][ T8885] veth0_macvtap: left promiscuous mode [ 270.882557][ T8885] veth1_vlan: left promiscuous mode [ 270.887976][ T8885] veth0_vlan: left promiscuous mode [ 270.899980][ T5842] Bluetooth: hci4: command tx timeout [ 271.498485][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.508380][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.530483][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.545060][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.560128][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.636632][ T5842] Bluetooth: hci0: command tx timeout [ 271.723889][ T8885] team0 (unregistering): Port device team_slave_1 removed [ 271.775332][ T8885] team0 (unregistering): Port device team_slave_0 removed [ 272.695648][T11784] xt_TCPMSS: Only works on TCP SYN packets [ 272.758551][T11784] __nla_validate_parse: 3 callbacks suppressed [ 272.758571][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 272.864298][T11792] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 272.877117][T11792] netlink: 'syz.2.1412': attribute type 7 has an invalid length. [ 272.979597][ T5842] Bluetooth: hci4: command tx timeout [ 273.126152][T11800] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 273.136662][T11800] netlink: 'syz.2.1414': attribute type 3 has an invalid length. [ 273.145242][T11800] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1414'. [ 273.337949][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 273.546443][T11814] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1418'. [ 273.620405][ T5842] Bluetooth: hci3: command tx timeout [ 273.691574][T11529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.725702][T11768] chnl_net:caif_netlink_parms(): no params data found [ 273.742953][T11529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.755151][T11529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.867991][T11529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.187225][T11768] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.199171][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.206501][T11768] bridge_slave_0: entered allmulticast mode [ 274.216013][T11768] bridge_slave_0: entered promiscuous mode [ 274.228590][T11840] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 274.278689][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.308451][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.317579][T11768] bridge_slave_1: entered allmulticast mode [ 274.327739][T11768] bridge_slave_1: entered promiscuous mode [ 274.441704][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.462351][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.554915][T11768] team0: Port device team_slave_0 added [ 274.565297][T11768] team0: Port device team_slave_1 added [ 274.650159][T11573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.665484][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.672854][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.700449][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.715323][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.722659][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.755592][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.767127][T11573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.791091][T11573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.815514][T11573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.915734][T11768] hsr_slave_0: entered promiscuous mode [ 274.922758][T11768] hsr_slave_1: entered promiscuous mode [ 274.929245][T11768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.937014][T11768] Cannot create hsr debugfs directory [ 275.074155][T11529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.137393][T11860] IPv6: Can't replace route, no match found [ 275.149066][T11861] IPv6: Can't replace route, no match found [ 275.317825][T11529] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.351332][T11869] netlink: 'syz.2.1430': attribute type 2 has an invalid length. [ 275.377787][T11869] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1430'. [ 275.429125][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.436388][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.487419][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.494871][ T8884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.566803][T11768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.642595][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 275.666320][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 275.702668][ T5842] Bluetooth: hci3: command tx timeout [ 275.747679][T11768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.935681][T11768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.014051][T11896] openvswitch: netlink: IPv6 tunnel dst address is zero [ 276.093479][T11768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.156546][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.256281][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.307015][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.314275][ T8884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.374987][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.382284][ T8884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.608827][T11768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.632195][T11768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.666531][T11768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.701176][T11768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.794447][T11529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.945057][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 276.995959][T11928] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1441'. [ 277.015273][T11928] netlink: 'syz.2.1441': attribute type 11 has an invalid length. [ 277.027411][T11928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1441'. [ 277.209050][T11529] veth0_vlan: entered promiscuous mode [ 277.243612][T11768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.272926][T11529] veth1_vlan: entered promiscuous mode [ 277.387608][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.415793][T11768] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.495102][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.502412][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.542285][T11529] veth0_macvtap: entered promiscuous mode [ 277.575263][T11529] veth1_macvtap: entered promiscuous mode [ 277.604360][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.611616][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.727948][T11529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.778836][T11573] veth0_vlan: entered promiscuous mode [ 277.780134][ T5842] Bluetooth: hci3: command tx timeout [ 277.820224][T11954] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 277.827659][T11954] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.854687][T11958] __nla_validate_parse: 1 callbacks suppressed [ 277.854704][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1447'. [ 277.913742][T11529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.952031][T11529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.972175][T11529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.986327][T11529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.995499][T11529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.034209][T11573] veth1_vlan: entered promiscuous mode [ 278.205013][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 278.222572][T11967] bridge: RTM_NEWNEIGH with invalid ether address [ 278.277311][T11573] veth0_macvtap: entered promiscuous mode [ 278.305992][T11970] netlink: 'syz.2.1449': attribute type 10 has an invalid length. [ 278.342226][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1449'. [ 278.460623][T11970] dummy0: entered promiscuous mode [ 278.473271][T11970] bridge0: port 3(dummy0) entered blocking state [ 278.500156][T11970] bridge0: port 3(dummy0) entered disabled state [ 278.506758][T11970] dummy0: entered allmulticast mode [ 278.558640][T11970] bridge0: port 3(dummy0) entered blocking state [ 278.565246][T11970] bridge0: port 3(dummy0) entered forwarding state [ 278.648132][T11573] veth1_macvtap: entered promiscuous mode [ 278.692818][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.720846][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.774465][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.876021][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.916498][T11573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.944193][T11573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.969516][T11573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.978757][T11573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.034969][ T8086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.066591][ T8086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.364379][T11768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.713020][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 279.722443][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 279.736673][ T324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.817573][ T8086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.854888][ T8086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.860688][ T5842] Bluetooth: hci3: command tx timeout [ 280.000965][ T324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.044438][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.058638][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.096342][ T324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.162524][T11768] veth0_vlan: entered promiscuous mode [ 280.217276][ T324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.245962][T11768] veth1_vlan: entered promiscuous mode [ 280.382785][T11768] veth0_macvtap: entered promiscuous mode [ 280.537780][T11768] veth1_macvtap: entered promiscuous mode [ 280.742107][T11768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.779338][ T324] bridge_slave_1: left allmulticast mode [ 280.785083][ T324] bridge_slave_1: left promiscuous mode [ 280.848611][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.917728][ T324] bridge_slave_0: left allmulticast mode [ 280.946791][ T324] bridge_slave_0: left promiscuous mode [ 280.964551][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.413479][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.439577][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.450263][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.463211][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.472176][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.756386][ T324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.773819][ T324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.795720][ T324] bond0 (unregistering): Released all slaves [ 281.838363][T11768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.863615][T11768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.913195][T11768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.953454][T11768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.969728][T11768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.001886][T12062] netlink: 'syz.4.1459': attribute type 9 has an invalid length. [ 282.784669][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.797538][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.805876][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.816376][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.827354][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.231361][ T324] hsr_slave_0: left promiscuous mode [ 283.249366][ T324] hsr_slave_1: left promiscuous mode [ 283.303853][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.330758][ T324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.392757][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.420998][ T324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.488280][T12093] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 283.535800][ T324] veth1_macvtap: left promiscuous mode [ 283.546277][ T5836] Bluetooth: hci0: command tx timeout [ 283.553156][ T324] veth0_macvtap: left promiscuous mode [ 283.561245][ T324] veth1_vlan: left promiscuous mode [ 283.566787][ T324] veth0_vlan: left promiscuous mode [ 283.613659][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 284.327471][ T324] team0 (unregistering): Port device team_slave_1 removed [ 284.392327][ T324] team0 (unregistering): Port device team_slave_0 removed [ 284.900430][ T5836] Bluetooth: hci4: command tx timeout [ 284.959163][T12097] netlink: 768 bytes leftover after parsing attributes in process `syz.4.1463'. [ 284.978960][T12097] netlink: 19300 bytes leftover after parsing attributes in process `syz.4.1463'. [ 285.037745][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.079279][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.235309][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 285.267990][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.277464][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.324170][T12128] syz.2.1468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.341231][T12128] CPU: 1 UID: 0 PID: 12128 Comm: syz.2.1468 Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 285.341263][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.341282][T12128] Call Trace: [ 285.341291][T12128] [ 285.341302][T12128] dump_stack_lvl+0x189/0x250 [ 285.341359][T12128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.341394][T12128] ? __pfx__printk+0x10/0x10 [ 285.341419][T12128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.341443][T12128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.341470][T12128] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 285.341497][T12128] warn_alloc+0x214/0x310 [ 285.341522][T12128] ? stack_depot_save_flags+0x40/0x900 [ 285.341554][T12128] ? __pfx_warn_alloc+0x10/0x10 [ 285.341582][T12128] ? kasan_save_track+0x4f/0x80 [ 285.341640][T12128] ? xskq_create+0x56/0x170 [ 285.341668][T12128] ? xsk_init_queue+0xb0/0x110 [ 285.341693][T12128] ? xsk_setsockopt+0x43f/0x710 [ 285.341718][T12128] ? do_sock_setsockopt+0x257/0x3e0 [ 285.341742][T12128] ? __x64_sys_setsockopt+0x18b/0x220 [ 285.341765][T12128] ? do_syscall_64+0xfa/0x3b0 [ 285.341782][T12128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.341814][T12128] __vmalloc_node_range_noprof+0x125/0x12f0 [ 285.341876][T12128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.341908][T12128] ? __kasan_kmalloc+0x93/0xb0 [ 285.341932][T12128] vmalloc_user_noprof+0xad/0xf0 [ 285.341955][T12128] ? xskq_create+0xbf/0x170 [ 285.341987][T12128] xskq_create+0xbf/0x170 [ 285.342020][T12128] xsk_init_queue+0xb0/0x110 [ 285.342053][T12128] xsk_setsockopt+0x43f/0x710 [ 285.342085][T12128] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.342111][T12128] ? __lock_acquire+0xab9/0xd20 [ 285.342153][T12128] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.342180][T12128] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.342211][T12128] do_sock_setsockopt+0x257/0x3e0 [ 285.342244][T12128] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 285.342275][T12128] ? __fget_files+0x2a/0x420 [ 285.342309][T12128] __x64_sys_setsockopt+0x18b/0x220 [ 285.342342][T12128] do_syscall_64+0xfa/0x3b0 [ 285.342357][T12128] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.342386][T12128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.342407][T12128] ? clear_bhb_loop+0x60/0xb0 [ 285.342435][T12128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.342456][T12128] RIP: 0033:0x7f218f78e929 [ 285.342482][T12128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.342502][T12128] RSP: 002b:00007f219053c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.342524][T12128] RAX: ffffffffffffffda RBX: 00007f218f9b5fa0 RCX: 00007f218f78e929 [ 285.342540][T12128] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 285.342553][T12128] RBP: 00007f218f810b39 R08: 0000000000000004 R09: 0000000000000000 [ 285.342567][T12128] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.342580][T12128] R13: 0000000000000000 R14: 00007f218f9b5fa0 R15: 00007ffc64667d68 [ 285.342622][T12128] [ 285.342712][T12128] Mem-Info: [ 285.657451][ T5836] Bluetooth: hci0: command tx timeout [ 285.709348][T12128] active_anon:5735 inactive_anon:0 isolated_anon:0 [ 285.709348][T12128] active_file:1326 inactive_file:39920 isolated_file:0 [ 285.709348][T12128] unevictable:768 dirty:52 writeback:0 [ 285.709348][T12128] slab_reclaimable:10924 slab_unreclaimable:103929 [ 285.709348][T12128] mapped:29298 shmem:1370 pagetables:1262 [ 285.709348][T12128] sec_pagetables:0 bounce:0 [ 285.709348][T12128] kernel_misc_reclaimable:0 [ 285.709348][T12128] free:1327636 free_pcp:11403 free_cma:0 [ 285.827885][T12128] Node 0 active_anon:22940kB inactive_anon:0kB active_file:5304kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117192kB dirty:204kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13004kB pagetables:4900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.935664][T12128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.986309][T12047] chnl_net:caif_netlink_parms(): no params data found [ 286.028727][T12128] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.080923][T12128] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 286.086812][T12128] Node 0 DMA32 free:1391804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22592kB inactive_anon:0kB active_file:5304kB inactive_file:157668kB unevictable:1536kB writepending:200kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:28260kB local_pcp:15096kB free_cma:0kB [ 286.139542][T12128] lowmem_reserve[]: 0 0 1 1 1 [ 286.144372][T12128] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 286.177277][T12128] lowmem_reserve[]: 0 0 0 0 0 [ 286.185085][T12128] Node 1 Normal free:3903628kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17548kB local_pcp:7432kB free_cma:0kB [ 286.254461][T12128] lowmem_reserve[]: 0 0 0 0 0 [ 286.262297][T12128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.277729][T12128] Node 0 DMA32: 895*4kB (UME) 412*8kB (ME) 70*16kB (ME) 16*32kB (ME) 57*64kB (UM) 125*128kB (UME) 220*256kB (UM) 99*512kB (UM) 45*1024kB (UME) 7*2048kB (UME) 292*4096kB (M) = 1391612kB [ 286.339467][T12128] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 286.380503][T12128] Node 1 Normal: 201*4kB (UME) 47*8kB (UME) 41*16kB (UME) 159*32kB (UME) 42*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3903628kB [ 286.424626][T12128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.452823][T12128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.474937][T12078] chnl_net:caif_netlink_parms(): no params data found [ 286.492260][T12128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.502726][T12128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.517635][T12128] 42615 total pagecache pages [ 286.522435][T12128] 0 pages in swap cache [ 286.526745][T12128] Free swap = 124996kB [ 286.569689][T12128] Total swap = 124996kB [ 286.573938][T12128] 2097051 pages RAM [ 286.583659][T12128] 0 pages HighMem/MovableOnly [ 286.588515][T12128] 424694 pages reserved [ 286.600619][T12128] 0 pages cma reserved [ 286.706564][ T324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.980511][ T5836] Bluetooth: hci4: command tx timeout [ 286.991992][T12159] sit0: left promiscuous mode [ 287.058709][T12159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.086844][T12159] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.116414][T12159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.174379][ T324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.193856][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.201655][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.209046][T12047] bridge_slave_0: entered allmulticast mode [ 287.252344][T12047] bridge_slave_0: entered promiscuous mode [ 287.423492][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.464487][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.473309][T12047] bridge_slave_1: entered allmulticast mode [ 287.473585][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.481881][T12047] bridge_slave_1: entered promiscuous mode [ 287.493959][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.503576][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.514687][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.523725][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.554221][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.570713][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.580110][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.588850][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.598499][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.607780][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.617212][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.626437][T12183] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.699846][ T5842] Bluetooth: hci0: command tx timeout [ 287.732758][T12189] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 287.734445][ T324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.859737][ T324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.888407][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.946220][T12189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.975322][T12192] gretap1: entered promiscuous mode [ 288.007995][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.267323][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.301144][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.308681][T12078] bridge_slave_0: entered allmulticast mode [ 288.318473][T12078] bridge_slave_0: entered promiscuous mode [ 288.339889][T12047] team0: Port device team_slave_0 added [ 288.450039][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.457424][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.477687][T12078] bridge_slave_1: entered allmulticast mode [ 288.503196][T12078] bridge_slave_1: entered promiscuous mode [ 288.541281][T12047] team0: Port device team_slave_1 added [ 288.553981][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 288.594949][T12209] syzkaller1: entered promiscuous mode [ 288.604365][T12209] syzkaller1: entered allmulticast mode [ 288.744872][ T324] bridge_slave_1: left allmulticast mode [ 288.757767][ T324] bridge_slave_1: left promiscuous mode [ 288.772245][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.786988][ T324] bridge_slave_0: left allmulticast mode [ 288.795029][ T324] bridge_slave_0: left promiscuous mode [ 288.804180][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.059857][ T5842] Bluetooth: hci4: command tx timeout [ 289.135312][ T324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.147147][ T324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.158859][ T324] bond0 (unregistering): Released all slaves [ 289.236071][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.308454][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.320036][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.347258][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.369973][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.377763][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.405374][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.468169][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.593831][T12228] veth0: entered promiscuous mode [ 289.621815][ T5842] Bluetooth: hci3: command tx timeout [ 289.658602][T12078] team0: Port device team_slave_0 added [ 289.681375][T12227] veth0: left promiscuous mode [ 289.690457][T12078] team0: Port device team_slave_1 added [ 289.718163][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 289.733483][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 289.779455][ T5842] Bluetooth: hci0: command tx timeout [ 289.853023][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 289.863815][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 289.872909][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 289.923559][T12047] hsr_slave_0: entered promiscuous mode [ 289.933636][T12047] hsr_slave_1: entered promiscuous mode [ 289.943169][T12047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.951204][T12047] Cannot create hsr debugfs directory [ 289.980194][T12078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.997471][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.024805][T12078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.037894][T12078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.044989][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.072191][T12078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.097170][ T324] hsr_slave_0: left promiscuous mode [ 290.107835][ T324] hsr_slave_1: left promiscuous mode [ 290.116475][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.124229][ T324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.132443][ T324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.140036][ T324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.160659][ T324] veth1_macvtap: left promiscuous mode [ 290.166302][ T324] veth0_macvtap: left promiscuous mode [ 290.172235][ T324] veth1_vlan: left promiscuous mode [ 290.177652][ T324] veth0_vlan: left promiscuous mode [ 290.666415][ T324] team0 (unregistering): Port device team_slave_1 removed [ 290.708733][ T324] team0 (unregistering): Port device team_slave_0 removed [ 291.139512][ T5842] Bluetooth: hci4: command tx timeout [ 291.278616][T12253] netlink: 'syz.4.1488': attribute type 11 has an invalid length. [ 291.296320][T12253] netlink: 'syz.4.1488': attribute type 11 has an invalid length. [ 291.324204][T12253] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1488'. [ 291.699809][ T5842] Bluetooth: hci3: command tx timeout [ 291.899528][T12078] hsr_slave_0: entered promiscuous mode [ 291.920757][T12078] hsr_slave_1: entered promiscuous mode [ 291.927152][T12078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.959135][T12078] Cannot create hsr debugfs directory [ 292.007500][T12179] chnl_net:caif_netlink_parms(): no params data found [ 292.825970][T12309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'. [ 292.858865][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.882133][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.889770][T12179] bridge_slave_0: entered allmulticast mode [ 292.900364][T12179] bridge_slave_0: entered promiscuous mode [ 292.924747][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.935041][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.944057][T12179] bridge_slave_1: entered allmulticast mode [ 292.954357][T12179] bridge_slave_1: entered promiscuous mode [ 292.979837][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.096849][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 293.107868][T12318] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1498'. [ 293.169417][T12318] 0ªX¹¦D: renamed from gretap0 (while UP) [ 293.183069][T12318] 0ªX¹¦D: entered allmulticast mode [ 293.188727][T12318] net_ratelimit: 36 callbacks suppressed [ 293.188744][T12318] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 293.222586][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.249027][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.389547][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.478560][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.620001][T12179] team0: Port device team_slave_0 added [ 293.679453][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.747878][T12335] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 293.758030][T12335] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1502'. [ 293.774474][T12179] team0: Port device team_slave_1 added [ 293.779650][ T5842] Bluetooth: hci3: command tx timeout [ 293.867262][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.881935][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.926178][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.004833][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.012108][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.040203][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.084294][T12047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.149405][ T2967] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.179791][ T1097] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.180451][T12047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.202203][T12047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.232519][ T8885] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.261499][ T8885] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.289425][ T2967] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.311184][ T8885] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.328569][T12179] hsr_slave_0: entered promiscuous mode [ 294.335421][T12179] hsr_slave_1: entered promiscuous mode [ 294.340037][ T8885] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.356219][T12179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.364358][T12179] Cannot create hsr debugfs directory [ 294.371066][ T324] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.415946][T12047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.425632][ T324] bond3: (slave ip6gretap1): link status up again after 0 ms [ 294.551330][T12354] netlink: 'syz.4.1507': attribute type 10 has an invalid length. [ 294.567830][ T37] bridge_slave_1: left allmulticast mode [ 294.577734][ T37] bridge_slave_1: left promiscuous mode [ 294.585214][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.596920][ T37] bridge_slave_0: left allmulticast mode [ 294.603213][ T37] bridge_slave_0: left promiscuous mode [ 294.610288][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.968552][T12362] __nla_validate_parse: 1 callbacks suppressed [ 294.968572][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 295.162062][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.176341][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.187111][ T37] bond0 (unregistering): Released all slaves [ 295.241465][T12354] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.525650][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1511'. [ 295.863920][ T5842] Bluetooth: hci3: command tx timeout [ 295.954070][ T37] hsr_slave_0: left promiscuous mode [ 295.964677][ T37] hsr_slave_1: left promiscuous mode [ 295.981476][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.988985][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.008702][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.017229][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.048901][ T37] veth1_macvtap: left promiscuous mode [ 296.061917][ T37] veth0_macvtap: left promiscuous mode [ 296.067781][ T37] veth1_vlan: left promiscuous mode [ 296.076079][ T37] veth0_vlan: left promiscuous mode [ 296.868831][ T37] team0 (unregistering): Port device team_slave_1 removed [ 296.916547][ T37] team0 (unregistering): Port device team_slave_0 removed [ 297.405040][T12399] wg1: entered promiscuous mode [ 297.507136][T12078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.553810][T12078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.586276][T12407] netlink: 'syz.4.1519': attribute type 7 has an invalid length. [ 297.628921][T12078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.645031][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 297.669805][T12078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.696628][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 297.703699][T12411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1520'. [ 297.727074][T12411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1520'. [ 297.751252][T12407] : entered promiscuous mode [ 298.037340][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.134727][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.215111][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.222434][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.264206][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.271436][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.646750][T12179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.718225][T12179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.738009][T12179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.795645][T12179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.881318][ T1097] net_ratelimit: 10 callbacks suppressed [ 298.881356][ T1097] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 299.025725][T12078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.107372][T12478] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1530'. [ 299.131695][T12478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.156248][T12477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.174278][T12078] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.209458][ T1097] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 299.244615][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.251882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.292224][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.299659][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.345585][ T1097] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 299.463570][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.481331][ T8884] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 299.548498][T12078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.598175][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.693353][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.700618][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.770964][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.778192][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.836338][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.093845][ T1097] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 300.243456][T12047] veth0_vlan: entered promiscuous mode [ 300.285889][T12047] veth1_vlan: entered promiscuous mode [ 300.362492][ T1097] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 300.370572][T12521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.377887][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 300.385286][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 300.392601][T12521] IPv6: NLM_F_CREATE should be set when creating new route [ 300.472606][T12521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.496691][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.525982][T12047] veth0_macvtap: entered promiscuous mode [ 300.585390][T12047] veth1_macvtap: entered promiscuous mode [ 300.712056][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 300.883419][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.941536][T12078] veth0_vlan: entered promiscuous mode [ 301.122294][ T2967] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.174338][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.195679][T12078] veth1_vlan: entered promiscuous mode [ 301.227316][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.237911][T12047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.254170][T12047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.265058][T12047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.278594][T12047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.349819][ T2967] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.524609][T12078] veth0_macvtap: entered promiscuous mode [ 301.564485][T12078] veth1_macvtap: entered promiscuous mode [ 301.666644][T12563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1546'. [ 301.697747][T12078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.723492][T12179] veth0_vlan: entered promiscuous mode [ 301.735028][ T324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.761608][ T324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.782983][T12078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.838699][T12179] veth1_vlan: entered promiscuous mode [ 301.894338][T12078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.921041][T12078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.939008][T12078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.948210][T12078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.996959][ T8086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.043853][ T8086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.211063][T12179] veth0_macvtap: entered promiscuous mode [ 302.277449][T12179] veth1_macvtap: entered promiscuous mode [ 302.436633][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.452796][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.586838][T12179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.695676][T12179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.773119][T12179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.824488][T12179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.857737][T12179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.867334][T12179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.956380][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.114314][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.153843][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.198734][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.261978][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.423685][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.583120][ T8885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.596039][ T8885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.721916][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.742574][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.757471][ T12] bridge_slave_1: left allmulticast mode [ 303.770013][ T12] bridge_slave_1: left promiscuous mode [ 303.775878][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.814800][ T12] bridge_slave_0: left allmulticast mode [ 303.839656][ T12] bridge_slave_0: left promiscuous mode [ 303.845594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.558587][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.571913][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.580803][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.590144][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.598906][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.719009][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.737271][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.748579][ T12] bond0 (unregistering): Released all slaves [ 305.186792][ T12] hsr_slave_0: left promiscuous mode [ 305.201945][ T12] hsr_slave_1: left promiscuous mode [ 305.208226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.236098][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.260448][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.267944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.334764][ T12] veth1_macvtap: left promiscuous mode [ 305.373001][ T12] veth0_macvtap: left promiscuous mode [ 305.381128][ T12] veth1_vlan: left promiscuous mode [ 305.386542][ T12] veth0_vlan: left promiscuous mode [ 306.221879][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.234763][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.245129][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.255039][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.265359][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.402208][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.416453][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.425665][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.434965][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.442962][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.660664][ T5842] Bluetooth: hci0: command tx timeout [ 306.674542][ T12] team0 (unregistering): Port device team_slave_1 removed [ 306.716699][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.303235][ T13] net_ratelimit: 9 callbacks suppressed [ 307.303256][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.598856][T12683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.691836][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 307.984017][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 308.097424][T12624] chnl_net:caif_netlink_parms(): no params data found [ 308.237229][T12718] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 308.339505][ T5842] Bluetooth: hci3: command tx timeout [ 308.348238][T12719] bond6 (unregistering): Released all slaves [ 308.499503][ T5842] Bluetooth: hci4: command tx timeout [ 308.570118][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 308.695514][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.726578][T12668] chnl_net:caif_netlink_parms(): no params data found [ 308.745340][ T5842] Bluetooth: hci0: command tx timeout [ 308.757282][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.768270][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.777339][T12624] bridge_slave_0: entered allmulticast mode [ 308.800328][T12624] bridge_slave_0: entered promiscuous mode [ 308.810122][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 308.847295][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.889396][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.896608][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.914616][T12624] bridge_slave_1: entered allmulticast mode [ 308.930796][T12624] bridge_slave_1: entered promiscuous mode [ 309.037099][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 309.047787][T12744] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1574'. [ 309.175962][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.253210][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.273585][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.357394][T12749] veth7: entered promiscuous mode [ 309.362973][T12749] veth7: entered allmulticast mode [ 309.367039][T12757] sctp: [Deprecated]: syz.2.1576 (pid 12757) Use of int in maxseg socket option. [ 309.367039][T12757] Use struct sctp_assoc_value instead [ 309.384449][T12749] bond0: (slave veth7): Enslaving as an active interface with an up link [ 309.497550][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.652992][T12624] team0: Port device team_slave_0 added [ 309.689543][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 309.738899][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.755010][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.763786][T12668] bridge_slave_0: entered allmulticast mode [ 309.776663][T12668] bridge_slave_0: entered promiscuous mode [ 309.806859][T12624] team0: Port device team_slave_1 added [ 309.816058][T12665] chnl_net:caif_netlink_parms(): no params data found [ 309.840370][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.847592][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.871983][T12668] bridge_slave_1: entered allmulticast mode [ 309.933084][T12668] bridge_slave_1: entered promiscuous mode [ 310.168932][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.384475][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.422663][ T5836] Bluetooth: hci3: command tx timeout [ 310.483946][ T37] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 310.498419][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.507821][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.534691][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.553187][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 310.563506][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 310.573900][T12791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1583'. [ 310.580457][ T5836] Bluetooth: hci4: command tx timeout [ 310.708715][T12668] team0: Port device team_slave_0 added [ 310.730330][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.737342][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.779366][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 310.809872][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.825934][ T5836] Bluetooth: hci0: command tx timeout [ 310.906922][T12668] team0: Port device team_slave_1 added [ 310.923754][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 311.032504][T12819] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1589'. [ 311.052744][T12823] netlink: zone id is out of range [ 311.058115][T12823] netlink: zone id is out of range [ 311.068662][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'. [ 311.088375][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'. [ 311.123568][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.162836][T12665] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.170478][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.177942][T12665] bridge_slave_0: entered allmulticast mode [ 311.198059][T12665] bridge_slave_0: entered promiscuous mode [ 311.213243][T12665] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.239266][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.246657][T12665] bridge_slave_1: entered allmulticast mode [ 311.264896][T12665] bridge_slave_1: entered promiscuous mode [ 311.341271][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.348299][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.389009][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.458577][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.670289][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.677329][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.749271][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.816840][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.884654][T12665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.908194][T12624] hsr_slave_0: entered promiscuous mode [ 311.920378][T12624] hsr_slave_1: entered promiscuous mode [ 311.926933][T12624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.936180][T12624] Cannot create hsr debugfs directory [ 312.041554][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.107445][T12665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.297932][T12864] netlink: 'syz.4.1597': attribute type 4 has an invalid length. [ 312.306762][T12866] netlink: 'syz.4.1597': attribute type 4 has an invalid length. [ 312.401678][ T36] net_ratelimit: 402 callbacks suppressed [ 312.401701][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.460288][T12665] team0: Port device team_slave_0 added [ 312.485067][T12665] team0: Port device team_slave_1 added [ 312.499717][ T5836] Bluetooth: hci3: command tx timeout [ 312.516201][T12668] hsr_slave_0: entered promiscuous mode [ 312.523341][T12668] hsr_slave_1: entered promiscuous mode [ 312.533876][T12668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.541739][T12668] Cannot create hsr debugfs directory [ 312.550669][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.659371][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 312.902628][ T5842] Bluetooth: hci0: command tx timeout [ 313.169804][T12665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.176815][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.203820][T12665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.427003][T12665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.439147][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.475109][T12665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.540553][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 313.605589][T12879] netlink: 'syz.2.1601': attribute type 1 has an invalid length. [ 313.777994][ T12] bridge_slave_1: left allmulticast mode [ 313.788182][ T12] bridge_slave_1: left promiscuous mode [ 313.803240][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.817709][ T12] bridge_slave_0: left allmulticast mode [ 313.826630][ T12] bridge_slave_0: left promiscuous mode [ 313.836225][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.859911][ T12] bridge_slave_1: left allmulticast mode [ 313.865791][ T12] bridge_slave_1: left promiscuous mode [ 313.873020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.924953][ T12] bridge_slave_0: left allmulticast mode [ 313.952134][ T12] bridge_slave_0: left promiscuous mode [ 313.957971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.579617][ T5842] Bluetooth: hci3: command tx timeout [ 314.743911][ T5842] Bluetooth: hci4: command 0x040f tx timeout [ 314.754758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.767006][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.777423][ T12] bond0 (unregistering): Released all slaves [ 315.088298][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.103469][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.114736][ T12] bond0 (unregistering): Released all slaves [ 315.182819][T12902] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 315.219886][ T8884] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 315.277221][T12665] hsr_slave_0: entered promiscuous mode [ 315.312776][T12665] hsr_slave_1: entered promiscuous mode [ 315.325154][T12665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.335380][T12665] Cannot create hsr debugfs directory [ 315.501375][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 316.149869][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 316.262644][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 316.308500][ T12] hsr_slave_0: left promiscuous mode [ 316.326425][ T12] hsr_slave_1: left promiscuous mode [ 316.341056][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.348720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.364737][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.402125][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.446474][ T12] hsr_slave_0: left promiscuous mode [ 316.470808][ T12] hsr_slave_1: left promiscuous mode [ 316.476839][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.498433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.508651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.524184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.597648][ T12] veth1_macvtap: left promiscuous mode [ 316.608280][ T12] veth0_macvtap: left promiscuous mode [ 316.616500][ T12] veth1_vlan: left promiscuous mode [ 316.626051][ T12] veth0_vlan: left promiscuous mode [ 316.635564][ T12] veth1_macvtap: left promiscuous mode [ 316.645922][ T12] veth0_macvtap: left promiscuous mode [ 316.654170][ T12] veth1_vlan: left promiscuous mode [ 316.664739][ T12] veth0_vlan: left promiscuous mode [ 316.820709][ T5842] Bluetooth: hci4: command 0x040f tx timeout [ 317.161207][T12963] __nla_validate_parse: 6 callbacks suppressed [ 317.161231][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 317.549179][ T12] team0 (unregistering): Port device team_slave_1 removed [ 317.594161][ T12] team0 (unregistering): Port device team_slave_0 removed [ 318.395813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 318.442429][ T12] team0 (unregistering): Port device team_slave_0 removed [ 318.935906][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.096812][T12968] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1623'. [ 319.107070][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.112419][T12970] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 319.319266][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.464967][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.613357][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.696915][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 319.714830][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 319.770066][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.808867][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1629'. [ 319.920865][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 319.941683][T12665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.002701][T12665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.112615][T12665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.161465][T12665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.163345][T12994] netlink: 'syz.2.1631': attribute type 1 has an invalid length. [ 320.233565][T12668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.284284][T12668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.320134][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 320.332018][T12668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.361108][T12668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.456064][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 320.484304][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1634'. [ 320.545075][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 320.560695][T12624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.584312][T12624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.630163][T12624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.648374][T12624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.677318][T13016] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 320.677720][ T12] bond0: (slave bond_slave_0): interface is now down [ 320.697236][ T12] bond0: (slave bond_slave_1): interface is now down [ 320.706035][ T12] bond0: (slave dummy0): interface is now down [ 320.713281][ T12] bond0: (slave wlan1): interface is now down [ 320.721631][ T12] bond0: (slave veth7): interface is now down [ 320.751168][ T324] bond0: (slave bond_slave_0): interface is now down [ 320.777573][ T324] bond0: (slave bond_slave_1): interface is now down [ 320.805455][ T324] bond0: (slave dummy0): interface is now down [ 320.833603][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.840421][ T324] bond0: (slave wlan1): interface is now down [ 320.846540][ T324] bond0: (slave veth7): interface is now down [ 320.869551][ T13] bond0: (slave bond_slave_0): interface is now down [ 320.873824][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.893544][ T13] bond0: (slave bond_slave_1): interface is now down [ 320.913749][ T13] bond0: (slave dummy0): interface is now down [ 320.923190][T12665] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.931623][ T13] bond0: (slave wlan1): interface is now down [ 320.934021][T13024] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1636'. [ 320.937746][ T13] bond0: (slave veth7): interface is now down [ 320.959403][ T59] bond0: (slave bond_slave_0): interface is now down [ 320.966155][ T59] bond0: (slave bond_slave_1): interface is now down [ 320.975887][ T59] bond0: (slave dummy0): interface is now down [ 320.983115][ T59] bond0: (slave wlan1): interface is now down [ 320.989828][ T59] bond0: (slave veth7): interface is now down [ 321.012527][ T13] bond0: (slave bond_slave_0): interface is now down [ 321.022309][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.037813][ T13] bond0: (slave bond_slave_1): interface is now down [ 321.046457][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.049222][ T13] bond0: (slave dummy0): interface is now down [ 321.053695][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.060787][ T13] bond0: (slave wlan1): interface is now down [ 321.073228][ T13] bond0: (slave veth7): interface is now down [ 321.100756][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.104526][ T8884] bond0: (slave bond_slave_0): interface is now down [ 321.107968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.126087][ T8884] bond0: (slave bond_slave_1): interface is now down [ 321.143493][ T8884] bond0: (slave dummy0): interface is now down [ 321.179811][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 321.191823][ T8884] bond0: (slave wlan1): interface is now down [ 321.199204][T13026] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 321.212335][ T8884] bond0: (slave veth7): interface is now down [ 321.218788][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.226051][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.248109][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.255379][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.266162][ T324] bond0: (slave bond_slave_0): interface is now down [ 321.274566][ T324] bond0: (slave bond_slave_1): interface is now down [ 321.281589][ T324] bond0: (slave dummy0): interface is now down [ 321.287808][ T324] bond0: (slave wlan1): interface is now down [ 321.327841][ T324] bond0: (slave veth7): interface is now down [ 321.380779][ T324] bond0: (slave bond_slave_0): interface is now down [ 321.387547][ T324] bond0: (slave bond_slave_1): interface is now down [ 321.419672][ T324] bond0: (slave dummy0): interface is now down [ 321.425933][ T324] bond0: (slave wlan1): interface is now down [ 321.441435][ T324] bond0: (slave veth7): interface is now down [ 321.489298][ T37] bond0: (slave bond_slave_0): interface is now down [ 321.505460][ T37] bond0: (slave bond_slave_1): interface is now down [ 321.533600][ T37] bond0: (slave dummy0): interface is now down [ 321.555650][ T37] bond0: (slave wlan1): interface is now down [ 321.583666][ T37] bond0: (slave veth7): interface is now down [ 321.632215][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.639294][ T37] bond0: (slave bond_slave_0): interface is now down [ 321.646040][ T37] bond0: (slave bond_slave_1): interface is now down [ 321.713217][ T37] bond0: (slave dummy0): interface is now down [ 321.721665][ T37] bond0: (slave wlan1): interface is now down [ 321.753986][ T37] bond0: (slave veth7): interface is now down [ 321.756589][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.789899][ T8884] bond0: (slave bond_slave_0): interface is now down [ 321.798624][ T8884] bond0: (slave bond_slave_1): interface is now down [ 321.806776][ T8884] bond0: (slave dummy0): interface is now down [ 321.824651][ T8884] bond0: (slave wlan1): interface is now down [ 321.840899][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.848077][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.860170][ T8884] bond0: (slave veth7): interface is now down [ 321.879857][ T59] bond0: (slave bond_slave_0): interface is now down [ 321.886718][ T59] bond0: (slave bond_slave_1): interface is now down [ 321.923652][ T59] bond0: (slave dummy0): interface is now down [ 321.936097][ T59] bond0: (slave wlan1): interface is now down [ 321.943448][ T59] bond0: (slave veth7): interface is now down [ 321.964673][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.971950][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.992644][ T59] bond0: (slave bond_slave_0): interface is now down [ 322.020380][ T59] bond0: (slave bond_slave_1): interface is now down [ 322.027586][ T59] bond0: (slave dummy0): interface is now down [ 322.044297][ T59] bond0: (slave wlan1): interface is now down [ 322.064287][ T59] bond0: (slave veth7): interface is now down [ 322.089237][ T59] bond0: (slave bond_slave_0): interface is now down [ 322.107074][ T59] bond0: (slave bond_slave_1): interface is now down [ 322.124536][ T59] bond0: (slave dummy0): interface is now down [ 322.131497][ T59] bond0: (slave wlan1): interface is now down [ 322.137625][ T59] bond0: (slave veth7): interface is now down [ 322.169451][ T8884] bond0: (slave bond_slave_0): interface is now down [ 322.176412][ T8884] bond0: (slave bond_slave_1): interface is now down [ 322.231796][ T8884] bond0: (slave dummy0): interface is now down [ 322.271315][T12624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.290093][ T8884] bond0: (slave wlan1): interface is now down [ 322.296245][ T8884] bond0: (slave veth7): interface is now down [ 322.361275][ T8884] bond0: now running without any active interface! [ 322.502784][T12665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.552905][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.812295][T12665] veth0_vlan: entered promiscuous mode [ 322.845612][T13072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1645'. [ 322.855356][T13072] netlink: 'syz.4.1645': attribute type 7 has an invalid length. [ 322.887682][T12665] veth1_vlan: entered promiscuous mode [ 322.893421][T13072] netlink: 'syz.4.1645': attribute type 8 has an invalid length. [ 322.910426][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 322.935443][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.952514][T13072] erspan0: entered promiscuous mode [ 322.963227][T13072] batadv_slave_1: entered promiscuous mode [ 322.973445][T13072] batadv_slave_1: left promiscuous mode [ 322.982169][T13072] erspan0: left promiscuous mode [ 323.003286][T12668] veth0_vlan: entered promiscuous mode [ 323.026651][T12668] veth1_vlan: entered promiscuous mode [ 323.103925][T12665] veth0_macvtap: entered promiscuous mode [ 323.184914][T12665] veth1_macvtap: entered promiscuous mode [ 323.327060][T12624] veth0_vlan: entered promiscuous mode [ 323.333584][T13081] xt_policy: neither incoming nor outgoing policy selected [ 323.350487][T12665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.358415][T12668] veth0_macvtap: entered promiscuous mode [ 323.412178][T12665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.445064][T12668] veth1_macvtap: entered promiscuous mode [ 323.463250][T12624] veth1_vlan: entered promiscuous mode [ 323.486944][T12665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.505789][T12665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.509449][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 323.517684][T12665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.536316][T12665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.687888][T12668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.713615][T12624] veth0_macvtap: entered promiscuous mode [ 323.740754][T12668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.762764][T12624] veth1_macvtap: entered promiscuous mode [ 323.831506][T12668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.871056][T12668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.879981][T12668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.888749][T12668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.033491][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.079546][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.092431][ T13] net_ratelimit: 14 callbacks suppressed [ 324.092452][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 324.166627][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.188786][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.284192][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.285429][T12624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.301426][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.339873][T12624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.353787][T12624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.368135][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 324.379713][T12624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.482930][ T2967] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 324.530115][T13118] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 324.673218][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 324.679280][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.709979][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.856049][T13125] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 324.892473][T13125] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1660'. [ 324.903296][T13122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1661'. [ 324.944124][ T8885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.956044][ T8885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.116984][ T2967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.326455][ T2967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.389600][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.405584][ T8884] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 325.417138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.523893][ T2967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.574395][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.583152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.609304][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 325.695845][ T2967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.870242][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 326.079548][ T2967] bridge_slave_1: left allmulticast mode [ 326.085279][ T2967] bridge_slave_1: left promiscuous mode [ 326.123822][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.183495][ T2967] bridge_slave_0: left allmulticast mode [ 326.199245][ T2967] bridge_slave_0: left promiscuous mode [ 326.205236][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.057655][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.070464][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.083785][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.103359][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.111380][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.339945][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.363991][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.376613][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.400755][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.408704][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.615929][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.643473][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.676182][ T2967] bond0 (unregistering): Released all slaves [ 327.834744][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.850672][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.860685][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.879712][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.887566][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.994554][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1664'. [ 328.008551][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 328.048673][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'. [ 328.058514][T13186] netlink: 'syz.2.1665': attribute type 11 has an invalid length. [ 328.078758][T13189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1664'. [ 328.106196][T13191] xt_hashlimit: max too large, truncated to 1048576 [ 328.141610][ T8885] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 328.712664][ T2967] hsr_slave_0: left promiscuous mode [ 328.734570][ T2967] hsr_slave_1: left promiscuous mode [ 328.749990][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.760593][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.775350][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.784445][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.846003][ T2967] veth1_macvtap: left promiscuous mode [ 328.859215][ T2967] veth0_macvtap: left promiscuous mode [ 328.874130][ T2967] veth1_vlan: left promiscuous mode [ 328.880024][ T2967] veth0_vlan: left promiscuous mode [ 329.220612][ T5842] Bluetooth: hci0: command tx timeout [ 329.463639][ T5836] Bluetooth: hci3: command tx timeout [ 329.907950][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 329.992408][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 330.029345][ T5836] Bluetooth: hci4: command tx timeout [ 330.710544][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.029373][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.301541][ T5836] Bluetooth: hci0: command tx timeout [ 331.333637][ T324] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.445768][T13171] chnl_net:caif_netlink_parms(): no params data found [ 331.486084][T13161] chnl_net:caif_netlink_parms(): no params data found [ 331.540154][ T5836] Bluetooth: hci3: command tx timeout [ 331.609250][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 331.614180][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 331.627752][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 331.687412][T13180] chnl_net:caif_netlink_parms(): no params data found [ 331.704785][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 331.926604][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.957965][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.973449][T13171] bridge_slave_0: entered allmulticast mode [ 331.981853][T13171] bridge_slave_0: entered promiscuous mode [ 331.999837][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.016535][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.024823][T13171] bridge_slave_1: entered allmulticast mode [ 332.035309][T13171] bridge_slave_1: entered promiscuous mode [ 332.100737][ T5836] Bluetooth: hci4: command 0x041b tx timeout [ 332.139440][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.160962][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1686'. [ 332.173987][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 332.348385][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.368445][T13161] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.375870][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.386304][T13161] bridge_slave_0: entered allmulticast mode [ 332.395580][T13161] bridge_slave_0: entered promiscuous mode [ 332.436641][T13321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1686'. [ 332.493547][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.537587][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.548314][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.564754][T13161] bridge_slave_1: entered allmulticast mode [ 332.576262][T13161] bridge_slave_1: entered promiscuous mode [ 332.617297][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.632953][T13180] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.643119][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.656674][T13180] bridge_slave_0: entered allmulticast mode [ 332.666878][T13180] bridge_slave_0: entered promiscuous mode [ 332.704706][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.820164][ C1] ================================================================== [ 332.823917][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.828285][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 332.828320][ C1] Read of size 2 at addr ffff888055d22c2a by task sed/13340 [ 332.852606][ C1] [ 332.854964][ C1] CPU: 1 UID: 0 PID: 13340 Comm: sed Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.854994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.855009][ C1] Call Trace: [ 332.855019][ C1] [ 332.855029][ C1] dump_stack_lvl+0x189/0x250 [ 332.855069][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 332.855092][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.855132][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.855166][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.855200][ C1] ? lock_release+0x4b/0x3e0 [ 332.855234][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 332.855257][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 332.855280][ C1] print_report+0xd2/0x2b0 [ 332.855310][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 332.855332][ C1] kasan_report+0x118/0x150 [ 332.855357][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 332.855383][ C1] rose_timer_expiry+0x471/0x4b0 [ 332.855407][ C1] call_timer_fn+0x17e/0x5f0 [ 332.855436][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.855457][ C1] ? call_timer_fn+0xbe/0x5f0 [ 332.855486][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 332.855522][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.855553][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.855584][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.855606][ C1] __run_timer_base+0x61a/0x860 [ 332.855633][ C1] ? ktime_get+0x3e/0x1f0 [ 332.855663][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 332.855689][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 332.855725][ C1] run_timer_softirq+0xb7/0x180 [ 332.855753][ C1] handle_softirqs+0x286/0x870 [ 332.855790][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 332.855827][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 332.855868][ C1] __irq_exit_rcu+0xca/0x1f0 [ 332.855901][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 332.855940][ C1] irq_exit_rcu+0x9/0x30 [ 332.855971][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.856003][ C1] [ 332.856010][ C1] [ 332.856020][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.856046][ C1] RIP: 0010:process_measurement+0x53f/0x1a40 [ 332.856082][ C1] Code: c8 10 00 00 e8 62 15 3d fd 4c 8b 64 24 08 49 8d bc 24 b8 00 00 00 be 08 00 00 00 e8 ab 9b a0 fd f0 41 80 8c 24 b8 00 00 00 10 <49> 81 c5 08 02 00 00 4c 89 ef be 04 00 00 00 e8 5d 9b a0 fd 4c 89 [ 332.856104][ C1] RSP: 0018:ffffc90003047980 EFLAGS: 00000202 [ 332.856135][ C1] RAX: ffffffff84833901 RBX: 0000000000000001 RCX: ffffffff84833925 [ 332.856152][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888031abb608 [ 332.856166][ C1] RBP: ffffc90003047c68 R08: ffff888031abb60f R09: 1ffff110063576c1 [ 332.856184][ C1] R10: dffffc0000000000 R11: ffffed10063576c2 R12: ffff888031abb550 [ 332.856200][ C1] R13: ffff88803215ebc8 R14: 0000000000000001 R15: dffffc0000000000 [ 332.856222][ C1] ? process_measurement+0x511/0x1a40 [ 332.856253][ C1] ? process_measurement+0x535/0x1a40 [ 332.856300][ C1] ? __pfx_process_measurement+0x10/0x10 [ 332.856360][ C1] ? do_mmap+0xcd0/0x10d0 [ 332.856396][ C1] ? end_current_label_crit_section+0x152/0x180 [ 332.856427][ C1] ima_file_mmap+0x1a2/0x1f0 [ 332.856458][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 332.856487][ C1] ? end_current_label_crit_section+0x152/0x180 [ 332.856517][ C1] ? common_file_perm+0x199/0x200 [ 332.856547][ C1] security_mmap_file+0x7a4/0xa60 [ 332.856572][ C1] vm_mmap_pgoff+0x12c/0x4c0 [ 332.856605][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 332.856636][ C1] ? __fget_files+0x2a/0x420 [ 332.856663][ C1] ? __fget_files+0x3a0/0x420 [ 332.856686][ C1] ? __fget_files+0x2a/0x420 [ 332.856713][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 332.856752][ C1] do_syscall_64+0xfa/0x3b0 [ 332.856770][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.856802][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.856824][ C1] ? clear_bhb_loop+0x60/0xb0 [ 332.856849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.856871][ C1] RIP: 0033:0x7fcd1e3d0242 [ 332.856890][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 332.856910][ C1] RSP: 002b:00007fff93b11678 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 332.856932][ C1] RAX: ffffffffffffffda RBX: 00007fcd1e0ec000 RCX: 00007fcd1e3d0242 [ 332.856948][ C1] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007fcd1e0ec000 [ 332.856963][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000002000 [ 332.856977][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff93b116c8 [ 332.856991][ C1] R13: 00007fcd1e3a5050 R14: 00007fff93b11ab0 R15: 00000ffff27622d2 [ 332.857019][ C1] [ 332.857026][ C1] [ 333.316244][ C1] Allocated by task 12078: [ 333.320681][ C1] kasan_save_track+0x3e/0x80 [ 333.325398][ C1] __kasan_kmalloc+0x93/0xb0 [ 333.330019][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 333.334901][ C1] fib6_info_alloc+0x30/0xf0 [ 333.339512][ C1] ip6_route_info_create+0x142/0x860 [ 333.344823][ C1] addrconf_f6i_alloc+0x1d2/0x450 [ 333.349882][ C1] addrconf_permanent_addr+0x274/0x9d0 [ 333.355379][ C1] addrconf_notify+0x887/0x1010 [ 333.360262][ C1] notifier_call_chain+0x1b3/0x3e0 [ 333.365406][ C1] __dev_notify_flags+0x18d/0x2e0 [ 333.370450][ C1] netif_change_flags+0xe8/0x1a0 [ 333.375410][ C1] do_setlink+0xc55/0x41c0 [ 333.379847][ C1] rtnl_newlink+0x160b/0x1c70 [ 333.384541][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 333.389503][ C1] netlink_rcv_skb+0x208/0x470 [ 333.394290][ C1] netlink_unicast+0x75b/0x8d0 [ 333.399072][ C1] netlink_sendmsg+0x805/0xb30 [ 333.403870][ C1] __sock_sendmsg+0x21c/0x270 [ 333.408572][ C1] __sys_sendto+0x3bd/0x520 [ 333.413101][ C1] __x64_sys_sendto+0xde/0x100 [ 333.417892][ C1] do_syscall_64+0xfa/0x3b0 [ 333.422444][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.428356][ C1] [ 333.430690][ C1] Freed by task 15: [ 333.434593][ C1] kasan_save_track+0x3e/0x80 [ 333.439293][ C1] kasan_save_free_info+0x46/0x50 [ 333.444340][ C1] __kasan_slab_free+0x62/0x70 [ 333.449136][ C1] kfree+0x18e/0x440 [ 333.453079][ C1] rcu_core+0xca8/0x1710 [ 333.457351][ C1] handle_softirqs+0x286/0x870 [ 333.462147][ C1] run_ksoftirqd+0x9b/0x100 [ 333.466667][ C1] smpboot_thread_fn+0x53f/0xa60 [ 333.471633][ C1] kthread+0x70e/0x8a0 [ 333.475717][ C1] ret_from_fork+0x3fc/0x770 [ 333.480351][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.485136][ C1] [ 333.487472][ C1] Last potentially related work creation: [ 333.493211][ C1] kasan_save_stack+0x3e/0x60 [ 333.497922][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 333.503146][ C1] call_rcu+0x157/0x9c0 [ 333.507317][ C1] __ip6_del_rt+0x111/0x180 [ 333.511840][ C1] ip6_del_rt+0xb3/0x100 [ 333.516107][ C1] __ipv6_ifa_notify+0x5c7/0xac0 [ 333.521061][ C1] addrconf_ifdown+0xe69/0x1880 [ 333.525922][ C1] addrconf_notify+0x1bc/0x1010 [ 333.530798][ C1] notifier_call_chain+0x1b3/0x3e0 [ 333.535932][ C1] dev_close_many+0x29c/0x410 [ 333.540624][ C1] unregister_netdevice_many_notify+0x834/0x2320 [ 333.546976][ C1] default_device_exit_batch+0x819/0x890 [ 333.552628][ C1] ops_undo_list+0x525/0x990 [ 333.557232][ C1] cleanup_net+0x4c5/0x800 [ 333.561660][ C1] process_scheduled_works+0xae1/0x17b0 [ 333.567230][ C1] worker_thread+0x8a0/0xda0 [ 333.572191][ C1] kthread+0x70e/0x8a0 [ 333.576275][ C1] ret_from_fork+0x3fc/0x770 [ 333.580972][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.585844][ C1] [ 333.588277][ C1] The buggy address belongs to the object at ffff888055d22c00 [ 333.588277][ C1] which belongs to the cache kmalloc-512 of size 512 [ 333.602352][ C1] The buggy address is located 42 bytes inside of [ 333.602352][ C1] freed 512-byte region [ffff888055d22c00, ffff888055d22e00) [ 333.616083][ C1] [ 333.618419][ C1] The buggy address belongs to the physical page: [ 333.624850][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055d22000 pfn:0x55d20 [ 333.634929][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.643455][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 333.651970][ C1] page_type: f5(slab) [ 333.655993][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea00015a8f10 ffffea00015ae410 [ 333.664593][ C1] raw: ffff888055d22000 000000000010000e 00000000f5000000 0000000000000000 [ 333.673201][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea00015a8f10 ffffea00015ae410 [ 333.681890][ C1] head: ffff888055d22000 000000000010000e 00000000f5000000 0000000000000000 [ 333.690582][ C1] head: 00fff00000000002 ffffea0001574801 00000000ffffffff 00000000ffffffff [ 333.699280][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 333.707962][ C1] page dumped because: kasan: bad access detected [ 333.714397][ C1] page_owner tracks the page as allocated [ 333.720122][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 104362179771, free_ts 30551975575 [ 333.741598][ C1] post_alloc_hook+0x240/0x2a0 [ 333.746384][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 333.752300][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 333.758128][ C1] alloc_pages_mpol+0x232/0x4a0 [ 333.763039][ C1] allocate_slab+0x8a/0x3b0 [ 333.767567][ C1] ___slab_alloc+0xbfc/0x1480 [ 333.772311][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 333.777720][ C1] device_add+0xbe/0xb50 [ 333.781985][ C1] device_create+0x25b/0x2f0 [ 333.786613][ C1] mac80211_hwsim_new_radio+0x418/0x5340 [ 333.792280][ C1] hwsim_new_radio_nl+0xea4/0x1b10 [ 333.797424][ C1] genl_family_rcv_msg_doit+0x212/0x300 [ 333.803016][ C1] genl_rcv_msg+0x60e/0x790 [ 333.807550][ C1] netlink_rcv_skb+0x208/0x470 [ 333.812355][ C1] genl_rcv+0x28/0x40 [ 333.816420][ C1] netlink_unicast+0x75b/0x8d0 [ 333.821218][ C1] page last free pid 1 tgid 1 stack trace: [ 333.827042][ C1] __free_frozen_pages+0xc71/0xe70 [ 333.832189][ C1] free_contig_range+0x1bd/0x4a0 [ 333.837158][ C1] destroy_args+0x7e/0x5d0 [ 333.841604][ C1] debug_vm_pgtable+0x412/0x450 [ 333.846476][ C1] do_one_initcall+0x233/0x820 [ 333.851283][ C1] do_initcall_level+0x137/0x1f0 [ 333.856237][ C1] do_initcalls+0x69/0xd0 [ 333.860604][ C1] kernel_init_freeable+0x3d9/0x570 [ 333.865817][ C1] kernel_init+0x1d/0x1d0 [ 333.870168][ C1] ret_from_fork+0x3fc/0x770 [ 333.874778][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.879585][ C1] [ 333.881942][ C1] Memory state around the buggy address: [ 333.887582][ C1] ffff888055d22b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.895661][ C1] ffff888055d22b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.903740][ C1] >ffff888055d22c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.911816][ C1] ^ [ 333.917205][ C1] ffff888055d22c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.925290][ C1] ffff888055d22d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.933368][ C1] ================================================================== [ 333.941569][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 333.948808][ C1] CPU: 1 UID: 0 PID: 13340 Comm: sed Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 333.960315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.970415][ C1] Call Trace: [ 333.973740][ C1] [ 333.976625][ C1] dump_stack_lvl+0x99/0x250 [ 333.981278][ C1] ? __asan_memcpy+0x40/0x70 [ 333.985923][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.991182][ C1] ? __pfx__printk+0x10/0x10 [ 333.995838][ C1] panic+0x2db/0x790 [ 333.999790][ C1] ? __pfx_panic+0x10/0x10 [ 334.004256][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 334.010202][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 334.016148][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.022532][ C1] ? print_memory_metadata+0x314/0x400 [ 334.028062][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 334.033232][ C1] check_panic_on_warn+0x89/0xb0 [ 334.038220][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 334.043379][ C1] end_report+0x78/0x160 [ 334.047677][ C1] kasan_report+0x129/0x150 [ 334.052229][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 334.057391][ C1] rose_timer_expiry+0x471/0x4b0 [ 334.062376][ C1] call_timer_fn+0x17e/0x5f0 [ 334.067016][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 334.072529][ C1] ? call_timer_fn+0xbe/0x5f0 [ 334.077253][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 334.082428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.087684][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.092942][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 334.098456][ C1] __run_timer_base+0x61a/0x860 [ 334.103364][ C1] ? ktime_get+0x3e/0x1f0 [ 334.107755][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 334.113179][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 334.119477][ C1] run_timer_softirq+0xb7/0x180 [ 334.124376][ C1] handle_softirqs+0x286/0x870 [ 334.129197][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 334.134006][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 334.139334][ C1] __irq_exit_rcu+0xca/0x1f0 [ 334.143957][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 334.149198][ C1] irq_exit_rcu+0x9/0x30 [ 334.153498][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.159182][ C1] [ 334.162153][ C1] [ 334.165099][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.171104][ C1] RIP: 0010:process_measurement+0x53f/0x1a40 [ 334.177286][ C1] Code: c8 10 00 00 e8 62 15 3d fd 4c 8b 64 24 08 49 8d bc 24 b8 00 00 00 be 08 00 00 00 e8 ab 9b a0 fd f0 41 80 8c 24 b8 00 00 00 10 <49> 81 c5 08 02 00 00 4c 89 ef be 04 00 00 00 e8 5d 9b a0 fd 4c 89 [ 334.196932][ C1] RSP: 0018:ffffc90003047980 EFLAGS: 00000202 [ 334.203054][ C1] RAX: ffffffff84833901 RBX: 0000000000000001 RCX: ffffffff84833925 [ 334.211055][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888031abb608 [ 334.219304][ C1] RBP: ffffc90003047c68 R08: ffff888031abb60f R09: 1ffff110063576c1 [ 334.227298][ C1] R10: dffffc0000000000 R11: ffffed10063576c2 R12: ffff888031abb550 [ 334.235292][ C1] R13: ffff88803215ebc8 R14: 0000000000000001 R15: dffffc0000000000 [ 334.243303][ C1] ? process_measurement+0x511/0x1a40 [ 334.248762][ C1] ? process_measurement+0x535/0x1a40 [ 334.254305][ C1] ? __pfx_process_measurement+0x10/0x10 [ 334.260003][ C1] ? do_mmap+0xcd0/0x10d0 [ 334.264365][ C1] ? end_current_label_crit_section+0x152/0x180 [ 334.270647][ C1] ima_file_mmap+0x1a2/0x1f0 [ 334.275276][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 334.280417][ C1] ? end_current_label_crit_section+0x152/0x180 [ 334.286682][ C1] ? common_file_perm+0x199/0x200 [ 334.291760][ C1] security_mmap_file+0x7a4/0xa60 [ 334.296865][ C1] vm_mmap_pgoff+0x12c/0x4c0 [ 334.301485][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.306615][ C1] ? __fget_files+0x2a/0x420 [ 334.311243][ C1] ? __fget_files+0x3a0/0x420 [ 334.315950][ C1] ? __fget_files+0x2a/0x420 [ 334.320568][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 334.325362][ C1] do_syscall_64+0xfa/0x3b0 [ 334.329883][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.335106][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.341206][ C1] ? clear_bhb_loop+0x60/0xb0 [ 334.345903][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.351815][ C1] RIP: 0033:0x7fcd1e3d0242 [ 334.356249][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 334.376005][ C1] RSP: 002b:00007fff93b11678 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 334.384470][ C1] RAX: ffffffffffffffda RBX: 00007fcd1e0ec000 RCX: 00007fcd1e3d0242 [ 334.392463][ C1] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007fcd1e0ec000 [ 334.400452][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000002000 [ 334.408452][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff93b116c8 [ 334.416443][ C1] R13: 00007fcd1e3a5050 R14: 00007fff93b11ab0 R15: 00000ffff27622d2 [ 334.424446][ C1] [ 334.427793][ C1] Kernel Offset: disabled [ 334.432134][ C1] Rebooting in 86400 seconds..