last executing test programs: 1m17.624723445s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 1m6.647022743s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 51.394717931s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 39.969684005s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 32.754956372s ago: executing program 2 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x3) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x2, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0x0, 0x2}, {0x0, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 32.426262412s ago: executing program 2 (id=2560): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket(0xa, 0x2400000001, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x150) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000fe52cc48829c9f0eae2be2c16e079702426d4a225aa5b448829e30d510eb9a5ba3f4431847ae725545976c65538ac9aa2c026cfb291a77b7aa4635e9ffa3881f425309d812e1f276b9b9c7db0f7c5350e4311ac0db8fe6d964edc1ffdd9732818e411328efc38b0d7e82cca6674c7472e61a16abf06c7481cc734ff67206ed434b79594fbd96c695", @ANYRES16=r6, @ANYBLOB="030b0000000000000000130000000c0009800600020000000000000002800000010002000000000002000400000000000380000002000200000000000100070000000000020009000000000001000900000000000200000000800000020010000000000002000000000000000200400000000000020009000000000001000200000000000380000001000900000000000100010000000000010003000000000002000a000000000001000700000000000400000002000700000000000380000001000300000000000400"], 0x20}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 32.165043064s ago: executing program 2 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003b0007010000000000001000017c0000090202808d437a57710000000000000000000000000000002909d5ea0514ffb528abb979aaf9f4e7426bfeaa888dc6e0bb589853d4db8db94f971a5d8d914cbbe830c48bcbe0f72853fa40b5752627168c44784b7c912cf71340b403f76dea528b3a5cada6b2c3a15c8a59a584454e9cdd127b8e6c25eacb72146969fe940db36a698575a5681535d210e2d62a579d116156c324d37e042d68255b545400d0248655cbbe181b353edb918a314447e605cb37fd4d7f0fa059809c1ced15cfdeec93cca5d48055058293403a4404f6013914cc0627f1c6d0333c4628882f5041c113b463d849"], 0x30}}, 0xc000) unshare(0x20400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xac, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000890) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1480000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x144, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e29c934928b8055b2b20c9ee8a1359540ef33a89cee456d"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33975a446e13a2e6118f885729a14069b4338747161e5866"}]]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x4080) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x3c}}, 0x0) 32.071101645s ago: executing program 2 (id=2564): epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000950000000000f900"/32], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_EVENT={0x8, 0x2c, 0xfffffffc}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0x0) listen(r5, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x98282, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'gre0\x00', @remote}) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r8, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) 29.04651036s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 21.574257618s ago: executing program 2 (id=2564): epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000950000000000f900"/32], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_EVENT={0x8, 0x2c, 0xfffffffc}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0x0) listen(r5, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x98282, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'gre0\x00', @remote}) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r8, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) 21.174882811s ago: executing program 1 (id=2663): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}}, 0x40044) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x6, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x44, 0x2, [@m_nat={0x40, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x16, 0x6, "69b89de76b2e825144dd4a493d7c1a7eba6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfffd, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x10}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5c840}, 0x20008005) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.001206979s ago: executing program 1 (id=2664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 20.797415878s ago: executing program 1 (id=2668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x4, 0x1, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 20.666379096s ago: executing program 1 (id=2669): socketpair(0x4, 0x80000, 0x10000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002000000", @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r6) socket$netlink(0x10, 0x3, 0x1) 20.585164109s ago: executing program 4 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="060018"], 0x84}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000005c0)="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", 0x114}], 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async, rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f00000000c0)=""/35, &(0x7f0000000140)=0x23) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="07020000b8d9cac360abf2f4d8cda6b915366424b85feb234970612e52ae4d3dbc9315aea7043e5f43ef7ab7a2f9183a1a05", @ANYRES16=r6, @ANYBLOB="050025bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="0c0023800600180003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) close(r11) ioctl$SIOCPNADDRESOURCE(r11, 0x89e0, &(0x7f0000000700)=0x1000) (async, rerun: 32) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) bind$bt_sco(r11, &(0x7f00000007c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 20.042402788s ago: executing program 4 (id=2671): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r2, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r4, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001040)=0x14) sendmmsg$inet(r3, &(0x7f0000001100)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="c16ecfc69c601870b07060ac55de5c00aba5b974c1ece1aab3b2b216eeaf489480ab03a2208b4930491994", 0x2b}, {&(0x7f0000000100)="2b34bb409eade629cd11914cf17b0652a609280147123b0abf0c23de64ca11d22e1db42100db82dee5e69e29ad18eeea7f3971cd32b43d6186d6121189aea722ccc00700fd205935b19509ba79d9011a86ba10224a6fc793cbf9dd859fe1f63bbc5ce61bc127eb72a0e09553a14705d9b927c54f32ca20bc878acf1520a1dc1cdc4716c317abb2f9821fd929e4d8f073f3521a815b898cb1d0a7c8dc08310898b391b57a802b70ca02c2db570412921d861b52a69c123e", 0xb7}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="02e4b41467cf332984e23c58d31d8b6229cdd6cb65760c3b8afeec54bcc57622e328d52125f382907fc8f09bd3ce05a102943ecd1e68a12818c4dc28fffeac813a9a898d096458befa262b9bb3ea6fd0f6369b80c5c42243e02294799e753acd4b4545cf9be2c26de86b380e0ce980a89fb8f009726444aab0ba2a8a76d29158fa579f1366a2185767b55fecd875424d17377f43018a84bb01a05e995d77f4d7", 0xa0}, {&(0x7f0000000700)="9b10996ba6ce649f350001dabe9fe90b4a7ba2619c07d9971591363a4baafbaa1973a01fecbb54f738166c9452c3e04777bac87c4c70b5d0e52f11c1a0c6cdcb598f635297717607e4b80915c2c495a43572317afc0411e3f9f3d9e0ba66ff8c86226ea8dca0fabe2392036982f609d137595d081d928f46ac47dec07c130b9747f02df19478a44762daaf02d393d9b3e81000"/161, 0xa1}], 0x5, &(0x7f00000011c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @broadcast}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @generic={0x83, 0x2}, @rr={0x7, 0x17, 0x36, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @noop, @generic={0x7, 0x12, "2dfd7e14f0b4181eb96c9d9bd43e2885"}, @timestamp_addr={0x44, 0x24, 0x7a, 0x1, 0x3, [{@remote, 0x2}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@rand_addr=0x64010102, 0xe}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x98, 0x0, 0x4, [0x3, 0x0]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf8}}, {{&(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000480)="c9e919e72f96d886055cc07b8b8d434853f6497035504412deaad9a8e187a3983a898a09b2438d750d797929ad920476c73d043fc4dee3c2b63d3c7c641fd5577c26fe3a42029cfd49e1c449cda37c29fa7a7f8d42fac99225236a582b546b5d5cc7f4e58a072e90bc3267dd7c417526076023d970552dcc1428b2d654eec6", 0x7f}, {&(0x7f0000000880)="10aa9549258ffab84145ca0a9151353f2757cf4fa5225b973ddeaa5739b2b4af8caa022f3fed94db5081eff44664a76c50bed368d192e90815b376c2142d00c624974f9143a43a586be6fd9b66e62e0c04e3f448fce2594d8e7b7b5b0993a2bb7b2f7846c62595825048c82bc235c0180dd59f3089b646648f5ef3d8a8b0e814fcc23dacb66026b67b94deee390e88126ec2a5addf05848471b12fa4abfcb4f0911eae5ed5ec5988490c3bf32c5e102e881a3fa44d685adcdb2d28efbb3718f2", 0xc0}, {&(0x7f0000000940)="6e4752a03486e14076005339564aab93206840cdbaf9ed486b45b948e03afe40fcde1cccbb9e4fe36c273e8879a2c131b2fd708aa2df705c370612ccadc689c95ae0c76ef57c3740059c88bfb002126cd3f21d48f90a426157fd333aadf1ebe616cacde29a4ff12a1c", 0x69}, {&(0x7f00000009c0)="612227434028920efa9dc97ac98cf1b79bad932affb72d7a66cca0273ffc5e36c6a264a71dc866414bb043fe52cb952a8ce87aa75c3e9593b2d6780c521fcc0f8294d2bd2291bb45345ac5908cd87161ece80c243b0fc094a09373b3a4c5633d387360134d6e6a83aad966f8f1886c5e83f6c63a69cc2bc7c0cfa40a85e5e27afcb52cf19a09952e2ac0f2a427c4cd40b3bd3a95e5674d79da2a03a64974c48c4e96b759cfe5fc07c4826a68c6f6c9", 0xaf}, {&(0x7f0000000a80)="7a416ba76e9d8e36857a8bb398b091506f4e850fbdc6a5637fd6870462c712835505be270ae903cb8c0361adcd50d1ed8b68ac1c9605ab72e057165d19", 0x3d}, {&(0x7f0000000ac0)="441509d03bfe0d43d8e5de81f8adb93a33e5afa9f0f04cf37b46957a5674a447ad2e71d0e4c475d81a0aeff09351db741de957cccc552c3c218eed9fa71f477138adcdacc21e82917a4e8fa400d551e3b8ca4d7f992cd19081cf4505d47c9c2c9702fd10269695b54abad7f180deb1abbb74f6cef8c8aa530a35c8d1c62961cfc3f256f2a9c2ee91d6015fd8b7786366eb0f374c2579563b4bff1319889df62c2e72b8bf9f187e72891e675d84e64d895c6a1e9badb209381ddb4ff95dd88810d4630f2f0cb283586158a1d47fdcac16e22721712cf20f3f65292687678941afffce247169450fb29f7203", 0xeb}, {&(0x7f0000000bc0)="502cc3fa522682e6c531f37cbe98c5c0fc4556f9afffbdcb8b8cb257576a976ff9697e657e4a9df6f8fa8b432a97c9d8e8b77b30c4cb75ab8e9bd7e76ed402d01766785f2be25b86a4e634511002bd4118653d78c91e3bc1d2647d262b765f58225ade0ba0ebf4bc29c4f2d24cc2deadc63cc9ce941a61347bc3ba9dc9f2b5359ec470d72b8f1e21345f301446c8a91b", 0x90}], 0x7, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010101, @local}}}], 0x58}}, {{&(0x7f0000000e40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="977ade304d467cecc2a1b236954ce82322d27ab3b68be95052e10e3302d372504cf34c39ecc2b349eb0e0802643e6ea199d8baa093060257c736d026c84d8bc2a861a0a05c11c8d73df183241456b39f26dfab07814df5f4784d21a7eaad73aaea0dece82c2c7d7516f7c3475b295806004081921a0f0e725eecd09c14536c6b368636cc5e5230e996ffde538f2ea4cdea956024e633b3bb938444251d44666fe7dcdce902ff01aad154447098e7", 0xae}, {&(0x7f0000000f40)="78850aae28f60a50181f66597c4bf2e2a8105494f94e692004da1a848fa92f2c88f87a759bb6d969e9d94650fe0473458c7ddbb686ed801fcdcdc9532619a75bc7e6f8b168d19e8da3f35cc536c9cbe7612b099a89bdffda0776b7701c8acea56573a6dba150b2b49367dc98650fda7a147b3da24862ebaf2b", 0x79}], 0x2, &(0x7f0000001080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0x58}}], 0x3, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 19.750682941s ago: executing program 1 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000c0007800800084000000070c0fd050000003d000500010007000000050004000000000013cadc1c32cf98240002000000000000006173683a6d616300000000"], 0x54}}, 0x0) 19.657315119s ago: executing program 1 (id=2674): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fbdbdf251e00000008000300", @ANYRES32, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20008045}, 0x24004804) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000c000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000000000000000000a97099e81d89d1339467615111d1f3aa97652e12e96cefd1cea9e39292b05a338363776b85472294495fc1d107c2f6b78ddd6998ceac3a823983685c173f3c7ecfb8dda2e4dba9cc402857c8d5a33b17eb0d98bc52f71d3828728e7d1f1a97785d9837a9169ab4203f08bb8d58a73e6e1b06e989ed2d552facb6908c866182a32c8d3dbdd1d928efa91e466c584836c66b7f5af238a0a52282a5661cc30ddfeba48d71309e3b746554e1474e8061c6425e258ab5c32807af016031d633607a19cf9affbf496c336a19b4"], 0x30}}, 0x0) sendmmsg$sock(r2, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0}}, {{&(0x7f0000000140)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x80, 0x0}}], 0x2, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "313bbaa15397d072b2507d4d39f601c8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000c04) splice(r0, &(0x7f00000002c0), r0, &(0x7f0000000300)=0x7, 0x7fff, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000700)=[@iv={0x68, 0x117, 0x2, 0x4d, "6e7a41f45101bbdaa8432d0ca6bccfa0641ff81a2618112933169c7c81cac48a37e08c5069566f496bdf3adb3934ba313d89875facc327f4b2d157e317f7081eba90a1499108c393a0545384e0"}], 0x68}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010827bd709b43f9b44257d7d10008000300", @ANYRES32=r13, @ANYBLOB="20005080090001006f8584e78b00000005000200020000000800030008ac0f000a0006000802110000010000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001800010000000000000000000a000000e1afa9c20002000014000500fe8000"/48], 0x30}}, 0x0) 19.638231061s ago: executing program 4 (id=2675): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8", 0x28}], 0x1}, 0x9cdc2384056b80a8) socket$inet(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000200)="b08a34", 0x3}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1b2f, '\x00', r2, r5, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1b2f, '\x00', r2, r5, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x19, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c5}, [@map_idx={0x18, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8001}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0x4, 0x1, 0x6, 0x5c7a, 0xa5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x3c0, 0x9d, &(0x7f0000000240)=""/157, 0x41100, 0x2, '\x00', r2, 0x17, r8, 0x8, &(0x7f0000000140)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x10, 0xffffffff, 0x26}, 0x10, 0x1e401, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[r9, r3, r3], &(0x7f0000000680)=[{0x2, 0x1}, {0x0, 0x5, 0x8}, {0x5, 0x3, 0xe, 0x7}], 0x10, 0x7, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0) 19.228725273s ago: executing program 4 (id=2677): socketpair(0x4, 0x80000, 0x10000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002000000", @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 19.142881514s ago: executing program 4 (id=2678): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], '\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x7, 0x2, 0x0, 'syz1\x00', 0x8}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x428) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000002180)=[{{&(0x7f00000000c0)=@generic={0x2c, "ffb8bce398e2a49a998e3a30d9ce38c38e653a8560c30cfc4a8dc67d29f62adeaf4220ac6bb88294b5ef090cef3fb582ec64861c00559a2c84da572d0b623640df66934f45feae9360b62bb9c74c3ca7c8b7044c998cfbc821bdda51f3e3720cfb62066c7a3f31a499f68d5fc3d76be081b6f48600d221de2c2fdcd20895"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)="717d9f56ee1c80acc2858c25369b0f275f255edd492a922a0a2a001030b65eb081279cbd094b8cfdc4fe2dfba58c42125728b1a563476ff6dccfbc2080f3cbe635d05db0e2a1ba6dabbb85ab4e1eb98770db4ea2b0bf8005062cdf804cb91028446a3eb1a49c216c00f58c76852dba72890adbc66e4a3355e14c1551cfe02ee56d9a6ebe9f5cb5f18fd85d09110bd1880eff02098d25e5e3038df469d9c408d5a3ab8fae408c8f48c4312d36b306d09780df6a91f9a203ab74bea7517af4487be9400a6e9e702808e3a565bed2423eac990ec078b6f8917d5ce6", 0xda}, {&(0x7f0000000240)="9f09f64e42269010f02bf5eba5ba6c77d3dc1413b6e2ab29d7427ceab1f9aa1a02cb761e9b461fba7c9cb1bb8c7cc14573840b4b701b2baee72ff4355ed89a03c4b119b79045cbe52faadac56a169fcd067a8805d50fefdce85154c3bdbc5cf01251e193077b9c5f0a9dc6ca6fa36c2db3ffbdd97b6477db1f7da6407164435aaf9d2f4338a2c86520290ed288059e117698fb9fb5b09168ad981fecaebc0f40da3e45019820a44c620290f2498c5cd41839d67df94aa3f6c7b6953dd7", 0xbd}, {&(0x7f0000000140)="104869f8808405bb5a0a33bc6e3b4d3a8baf019053b631eaac351329eda79a8f", 0x20}, {&(0x7f0000000600)="8ebdc05af11cd6a2ce750bedded464c1a254bd81fe7f9071573fa1d0be8afe21457cb35b114433c2562a1e748723d98f57114e22db9eb6a91ee2cf991cbaf38980cc39766118e04f6b2a667b977e88e876733572a495d4c9bc1dc2bda0ac06d3514a1fae8b6513e9bb829a7f63bac8fdb2438c0eeca30afccea9dd229b2f0ce6024407b488d275b1189b299ddda606d7e265295ac88ee770cf5f1e18c3868d713a79d253935ccb402ccc979bdf6ad6fd54a115ecf3f84b3338d39936", 0xbc}, {&(0x7f0000000180)="19223c72b9ddf4ab5c1d1aa9619c82ed966eb33d84ecbc59df60af690d50a0ff6ea7dbaa2c45", 0x26}], 0x5, &(0x7f00000007c0)=[{0x58, 0x108, 0x2, "2234c53b5f11609cee87064ab3f46ccf055acd0c183508b6642cc74a7a3bc769832fa42571b7eee4c6dbcd0cbad15b11135cdeb3712049b449b2dc8f130d2148854080f728364f"}, {0xf0, 0xfe, 0x3, "4b1983a0ed527468ea5d331964c4550e137ce170dffa722880e2d3e3cc9eb76f22db94ffde59a0e112c3d6a71de270d06c7b581e6cb1173fd8d39cfe1898f6a1881555f67744209de4f0308bcb4f60621145439fa91c25722884e3d7643fa2fc4b20648b4892d9e156a4813ac350019e04679a5f90838e8e9a6cfb1b9dd3119e4f72663ccef82cef322b4ea12f496f1ada769a74ed64809dea4f9d8f8983234f031b97c04f5dd8ea0c52854bc25775d3b606de504f09dbf1e7108755ee49329a663a00fe9f4653a91c606d08662b04e4c5c5a407068f7bd4e80e"}], 0x148}}, {{&(0x7f00000006c0)=@generic={0x11, "07e337caa5b509239549aff79c466ac325f90b8da54e409b8b2be5a58a99ce83e89289d0f017ab3ae47d106981e6a88b52aae03129454f4fef0793ca1a015bb5d4a09cc7e502e053733df5f710f39a1ffe009f1c946dd41adadf399aeee1037bf8fb08298dfbaf3bb5c1b6d87121320fea01c5ecd75b51486c1abb8ac98d"}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)="98a89b2878ac2efcc0bf08c110921be324010530e64eac0c843983ca55288d36d11aa8599e269aa1ba7b720e9648b5fb71f6e6b42116e0610b437753407ac446e6c745172b76f952836d1cdf1d4ec09851bc5fe5e2170283426a52e649274d5e7c06d30380a0218205349c8e7025b9688f1bd53e62b3c3491e8d266227f49cfe2e116cfa8ceb8616136a88903bf2768b1374d2", 0x93}, {&(0x7f0000000a00)="f79b727b3ef8445bde3e53afd9137cfa9d8b819312a01936dcff59d64be5b7531a86c6cdaeadf3058e714ab558e974c1a6f57791f5cf6770a6fcaeda42e094c49487a941c3cf29320c21e7a1d5eecc42112e852fe71a9474", 0x58}, {&(0x7f0000000a80)="e91caa1a21319c02f1f5c120615e6ab0490b74b60dc228ce07abfdbcbd9aba137a7c7ff416639d1e9b5408a06a32fdf6e7d7ac4dc8be7c79ff91a236063fcc0ea5b7a771371c3c29d0d06886db6853df6127727f70774273518716fc5d9f376f6aaa1c7c6a18f69ea3d2a727b027a2eef63d9aa83219a187aa05b276ccb5dbf8e902efa053b1c0d1789bd85d6851a89bbb6a776dab23dd2395289a4f8c753ae87eaffb840f0fd5192e0148df99cb609765fa1ebd11cecb51795a8e474e36cf2563372f02c62c37f1bb94113f5f8a861bb944534ce358fe4b8c72b5b4828162595885e9902a25a770b82ce9d64ba770", 0xef}, {&(0x7f0000000b80)="6575dd738b24f0ab86f4223e99c735e27079f728b6b91efe6a0326fe46270694578e98329a1ee99a8013ca429093f5995a63bda08d42d06261d25c5a62a0155bd0f2320c5bae11367307a0094e9263bcf2862c01596b5a020d9a320f695a0a54f25c33eef5ad4b02e05387a0542a3bb270de992b020c002e4a3f8ef038e00a9223c8ab67d8b5a665e33a42944ba4f32623e9553f9ddb0b745ada030387f6a143a1153bf46c3b448631211363c39f816f8c8d4d0d2e219ae8681514d35b012e96da727d619242350d1f97a0311d1df74bdd35c0951136a45fa3b695adb3d6f966b8d02448", 0xe4}, {&(0x7f0000000c80)="4a0436f8c819a2f1f8a6070f2c768c72ee9aaa5081b074c65311d516403811f84868dc4cd6bae5745e9fbe6d78e50762e8f0e1d3609149a1495f6b1683a94accbe18a1e025571c72ec4caaa91ef868cc978d86a13c8c45ebde0d1c0ab2181e379fcad17859083ce2f6ef9486bab59d71e15fa513c2f1f067518835975b8688527597811069fe5276b46e148ecff1", 0x8e}, {&(0x7f0000000740)="2242b2f1509e35af687da0c2fa", 0xd}], 0x6, &(0x7f0000000dc0)=[{0x60, 0x29, 0x80000000, "857409af054d6c408a337c9f74eca7d2b89d6caeab611ad0122cae48b5d932771e3c0cad0c0d89664324c6f3effd0590807fa9b1e5c6b54c42c5ac4a12458a73ff3614dd35cfbf4220"}, {0xe8, 0x84, 0xf, "6f6c70a59dd8e9070b82e41aaa0666a86c88a163d50c6865522aed500cb40d3e261f8b6a2e23c2d721e4eb5a6712412801a7ad6e20e0921cb08d38ca5f61f1303f17a286f481d04b25984e7465deddfd772c66411160c5392f02a76a85db824b10080496e5cbd56f3741b122d04b20761579e9fb6b21486ccd0812dfa648f7d682e3ad8926d3d8ca805d4d14a587bd78bd7f569005e7cd43064729edda812320ed84428446379013251e2d04cb6b18d047613cea1a0e2d7cba4688f797ab7cb6a657bbd2eeef6e26a0ee003e13a07949de70832b1c"}, {0x1010, 0x113, 0x0, "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"}, {0xf0, 0x0, 0x4, "59d8ccd4da7659e3e83003d97c0969d47b8767d50e88cb0c3e6d41cd46948b91adfe03a0fd51611b15621acec565134a47bff84e5d31fe8c4de1626c92875630006de7a6781dc2c22192cd3251572c82b2396524a121a735001054a9d46ec252954ec690804b93dbc3e783691e5b56f96c9885ed27c050b2472eb6f0c89bfe4372336a1445f58a540d4edfd869f9015dd00ee31bc18f6ab557e5e9fa813017e33d43c4333db537847aa8565ae8ed3d0ccaa100916edaba3e4f88aeb588d328ea3c64d18032d45877e57ce86ebf60d1f2f2fbeac4ad5c933a362b92ded01b"}], 0x1248}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000002040)="0f637f5b7e711907aed17403ee12cb6ff1d2ce255442a709c1b5377960c1c29dc0325b02c81da4b7f07257a38ad16e18157cffdd6471652e68f4518d8ceb7ff2", 0x40}], 0x1, &(0x7f0000002240)=[{0xc0, 0x0, 0x0, "a120be7fd15440c85f057bc52d1857f50ec0006353a07f2739f2d99203122dc2b978107b624fb45fc2df0fe824db799a8c380e8c63b5b5739fcdb98617d92b04b2d8bc059a9c3f67b0d56cee6dcebf0fba13b0d2ef9617d636485145dac3fd25c2decf49f4ddb4a901ca64700244ff027aa994572134d9b213a0e6e71a3b3c8b1f1b20a586c65f3e79b2e51c1465f38e5c1b35e4d91a6f7b85e74f70f6856c27dc8253359bd8910163"}, {0xa0, 0xe0, 0x8001, "89c8f92fc98e9770891fc4e103a535e94b878eeb10ad78aedc01a842013e5e33ac5a0d0b8d949f14fe6041490b1b9245e456d9a89747f2e3e9652e444d1614a0e39aeb81c1b20c0f87cdac64bcb1b0db5c03ebfe5a7c13ef3ab3d2e10a567a0bfe302195a32318aabed7611a2e262fc575c111a077cb939796c1597082b4b40fb8f843db0fb324f590bc88fe8e206d"}, {0x80, 0x114, 0x7fff, "bbedfbf5a1230b996a22c2b49d40399284b09910ec677a9162e60fb221b63fa021608fdc3c6fc3938ce35e0bc0d84d8e278da7c8b62eb96855b69dfc5f6461c06883fd2589d038e1c309150bdb3ef732d08eb524bc4c6e573d15c5f6ac71d459bfa64397d84ccd33fe2f7c179aa4e5f6"}, {0x110, 0x112, 0x4, "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"}, {0xa0, 0x3a, 0x7, "beefca4fcd93527784a3ae22bd6e318207610820e03dee5f7e6041309fa72d3ba4b60b6ee3d259c73cbaa22435da1d0dd8c8ee18c48cc2cf335b018393f3698b5c8c3fe7e357ca1710b8bb37fc3bc7bab63c9c5461d60fd4dac4950b074efe03396daa3dde6faafb0bef1a113f67ec1a01016d0db8553ac4e1eab6870a115aa5da5eef6f6988ecf478b9ce"}, {0x1010, 0x103, 0x6, "1efea70277fe04d6f00caaf8b24fc793b914d3d2d91e66de7654de1af2e5a707f74809e37d6bc0564f1adc2da180acfac479d6af6313183ab48979920f4f53a7309fd254e485414abb405616fb55ca1ffd8fa5b6654814f3bcfd70d3ea87e76853795a0bf3b138a8693b075d70fcdf9a2fc6313086db1c089922c945264580eccaf2b7d9440b3220e3f701bae9241235eb192d57b030cfe5c3647aaafcf32133da7eca9c96794868ccb26ada0cc71d95db2767b52aa87b23a4fe3a258906ca2fe308414f00f1a029b43b20f70f99acba52f5c77291a4516d066fcf71c6d6b89491b377eadf8807a72d684914d5daf20972ae4b163b6987610ca5edb5f8b3b0c9f779e0cdad10d480ad90f0eaba1aaa20aef61bfa0d3feecf2dcf6c48a8fb1f5d9064c3a4d7fdf20d15217ca38f6448fee373047b1d71687b18908d4bdb58fb8a676f863f96f0c47f172704c7f7485a62148044ef4f63fb41f583d111396bf63434f707a9ee1e8ea35c15deb50326eb97dc759d544a954d42cc9e9aacfab79c63e022a146baa022c4d1065fbe5dcd14e970e366812d93d1d153ed59eb62466d039b68ecf1bb0adde0ee1cbc9fab569579d7a6d15b74af074700668fdad648eb24eebf1f1b448b79e7be30bc29efd8d35d825b8ce4fe23ae0f5b364382002f79eaa8b17427b3c243f99b4214857d34b98aed58f0318d04bde1c53a411203ee9f7fcb41e1a618bffd7bcb97027af5e09707940e8a9889e40c104768462c860f7c802f83d0df9018473ccd3108d9f3e5d98e088c70b2bee83c5af92f237d109d1d9d39a855ef32a57b7ad6be6aeb3b4ac183775be8400e3a2e25c2509e6b14b7ff7961bc82bbed5439eb4e9f7c836101ffb04907c9e0c754fc05f73b30d19baa2de3e0e6591abf0beb9d5ca9cb3b2ca7b160ddb6d20559d2dad74e4b996f0db074458942384a066fdd8c12aa0355412d666b92401e5239d0fd99de5ff0a72792bfe8f231b2c50dac57718308c400d6b5e21beb20efa5f76194130a8775e36f70c59d503934d1f0304491065cf12ca712656504d608245883a8075d15ed10799e689309b7f586abd56c8a9430144dda20837aa633f60c4f93e2a17a05bc8b80c0107a10d65e8b8a2a0ec14c686056c632c9ce76f6f56284e2864dab9da2ceafab796a418076503bc59069c24344f95803a68f4b85be9159ba06871fc373639feb14b8fd57289550e2bbdcb5b23a5885bed7ae6f7cb790fbdb2467bbbae8247e805f90140caba1deba61112674dfbf35e3a91057e562768b2887042de9f5a694273118cf63f669f61d52f1fe521391b8681389c5ce3188ad02b1d310e4bb3dc137619a6299e90c70c8735aafbc14f3cd122a9b5e8f86fd5a5aee240f1db4beb77218c23e8d67a9451926661a6a45d2b0845a3581b6bb6264c202987f5f485472151500cdf1c7c32e3663972319b598670e183f3adb126a36b31d6cf1230aea95c645723ac64e3b97c87ba1d1362fac63541e92d59cba5caf38396af78feb6086401d727fea1ea925c8db2190c0221f03683666c331b20354f8a655a4035547e7f78372d12d2cd6515635d11f223e694336f3a8c788f0b27a5cf30344fcdfc068023f0731405c47a94218f198c393db0a570e671c85bf698a1a145a414af1ef5d5281e3b8acd4941b06a25dc298d530f155aba874b8a404a3244214429dbe2748b7e1754648891edde7edff738c671c3ec0e7aba12c7ab1606dcd6b96df8eaf9dfbf50a81b7aa460946f84bceda59e06669d3f5791092c07c20f174b1b3d9538325c9e477b900c2d1424e154282b58982d980a741ec4301942cd042f613c0dc2a26f70b71eda01f168e24a174b524e0a078e13093296b459c2cdc8528461a9e1d28f16ecc096eab8df3ca3fc6e9bb9272eca52148880f772ccdcf38377dd19bbe6bfc401eb8b85ed9c1833a85b95130686a722aa5c8397b6a34f8afd7dcadbe2953b0037e25147bdc891d3f6ca553a5f331d0b5fe27a3e12a2f90c48e3b91428784c150e793d5fb2f1a84d79d86434af303e2cc68773e2d4e228ec22135fc741b060ea9009d4df4e75f01f8c67cf643e6206551f2fdd885fa014ea8b95bb1e69d9d50fcb84cce586cc27ff4df759fc393470c4cf0e42e356e904a2635c380ee079882a3596f7988dece12efc7c44591bc96af8fb2a941aec482165ff9fec076c1e473e2412bf8b4c908877ffe0a078eef54c2559af7eafb7a05b233bf2974db53b83b1fbdfad3b15fc392f6f06e19ca23775e7224876bd26d908b499f0e3e2ea787ed7313104c3ead9064f351ed1638aad6ab361c3023ee11f72e745e8fa4e7f6adddacf0f403d143e6d5cae60689111247e685a03982c3b315f315ce5705dae510a450a01cd1c9a905502184b15a95abbeeb858299972af4d67029daf3ce2a417676b3fa944e908484f3ade45f9f3faa0eaed631f14fc851da6346f5a63d5e46252797924f4581c812f3e76c4d37bb3dab056c8178b65873811dc13ed165fc16142ac5f9c5784a3c11ed0dbf0af37244b341f65bfd741cad20e2548d85eb8e489e0cf5d83cc81e96b28289ec601bfe36a88f140fbbdc592196731e5f8cbaa589e55f440d443ef3427251810d1909da4526aeb42f4fba50d2503743aac9c19cefed5cd62c254a3d15bca5cecc5498c007282f2e5f5711e06b7dd25a0712c9405fa1e11c24bd503a7d3598a3298270445fd8dd70d65b3aa0fd1f6cfe1100a5a63904b6b28f0ee510b77e54baff8aea77c68b32edd8af94fe96793d889e554d1901a8fe093e3af871ec7710f6e22b233695b4a01b7b330fb8c47d33ca8a911dc9935b112dfc456c2b516f19cfeb484b309016db25bf363070b058d68122fe90bf40fffbed005773e572f758ba47811b5800f9e1923c38f3c66dcad30f43bb7e0f78525c4193a9f25c7caf19a9d183c9d1aeaef0fff3b0c2c21fe45b3ce59d46b89c87a54861dd13481ca18a5393ff504dec963250283c7aad838c9986448e071173c8c90824a9d8981fe540ff07ef5b7e339f7c0f7f6ed40ec02b1c9ecc8ccb59a47b0b7059580bdae9f2fdd1650ea1b99521f77c140eb8cb3f306857cc9e5ec3fd9af89b6aaa0d99638f165c6c2acac81e9877da3afbe153a042c7f4c83eb992ffb3fe46fd25ed428efb6c8f75b58df7f0acdf1b3a612909681aeb6f8686121ae47361900f7f05539f99471ad113a2301079e1b2677f0820414585e827f022314134667b4290ffda7501795b337d933c7d2b847d87978268bbe32132ae16ac5dce76acdb268ac8784b6178b76fe2fb291d27298d33e3714436dff50e500ee10ff7d645824e39328ad512cbc7891d598463a1f427c0173586c93962c925f9fc6661165b2b15a087b6be7199589038004bc4b4bf250598c586b90239cd84f37da41c4094544b478c6ac042b508ffe78b0202348f1a2c36b22d715c105d5e1fb32b9ef56505c15202fa3e91b17670d579a4e9ab4e28ea25fbdfea9bd3c0262ec7bab57a6ea3008438f6104611944961ffc0ba2fe25e9d0e0558bf615573a23ff6ec99d1c903d88a9ba73e01be15f2f6ca72f2c2e337ec491f02730b98591a77b9dc34c62c70c04c8fc09e96ff85721168e9bd74213f2bd68e9653b38a18b0809694e47c35c2b87f096edfccd9035ed14d42126e92280f36438df57e2b03488dab8e842f5425d3a00ec3b350aee0579c3f7226d3fb04b97ea9e3e3ac94eec519dc99845f8ef47e34fda87e22f3aa4b4051fc5f43a998640967f4819181dd130e47789e20f653cef8f54235d3ab0b514ec52c520c3f88050d0aac4f1b7e9ba546a02789a77cf1f83f7ececefcb0a45cae6d9fc1d0458e413cff8687d717f60477e6ec6cb3b473d1c3bd1ac52b9adbb081acfb593289ed11d493f8212ce5de2014baa33cc5a03bb7a8e9ee4bbd33bb8143f88b0e904edd129056dbd7a7588ab450b9c70cea5d4de2f9e3839289670484e53fd774aba1676ba1a02f02668ac8c32ba3689dbcba1f6419191d91bf4300ce3e778641c4976f24e2887189cb3b5f8971ec31b573ffa2a71489e2263d99fd16ebbdbc0865e1bca4dcc050083938d5d17acd81a68d4e3e95b9591fe45d07c76b585559c509dd158c019cb88c9f54a2c0f89e20730c1ed0232d81b255fa48f0bf0e37659fc7ae29363f3c2c212be1fb1a325dbd02988f8dc13798e0bf1ae207b8fecb03c97dce3d082ec5480831c6d59d5815ceb61cfc5b2fc8f3bdf7212fa72f05c3aaa02bd8ba0c974a771cfef91fce2e25c93bee87d5359e3e533ad734e4c6ac16bcd8cbe0cc7169d55b4b5c1a91da346f968173951030148b946c881dc9602df4a3735b124872ddd9ce1e654a8d334ba0f552e34fa1eca497b07614fad329c3ec5e977f1a582d6a72d97fe733e53fc42b10580ac76ffabf89c67247e12d5554e3def498abebecc717fceebf96b374d0c8f18335d6a109349c5ee607bfabe73a638bf6c8cc7a15234facd26f76b84802ed39d6facb9694956f7c8465a2b3740e3ab08f05352e0666ba763181fd917d6a9dbc94f4ed81c94503f07cd00c399859a48390fe9c490c6b1a7b8c5409a8209498506357714d7205d7446bfcdb1116ef54751160b4606497bd744f79fe43b6777d61cb967ea7b201d9804ac80a4a6d945a78d67a768ce33f4a8d6fb972d92b66d49f6455bcd80bf038a458fc00773f47d43067c602d74c309a126b837f22414719605627cee40c30f89efab941fa0fe046fa27dcd060757f9cb9dc5bf21be8e467282337bad2001759bd96b2a2b429385039a1a7e8d9ff509a606ecbd2957e0f1bf0c952e68de4cf4baa8555c31a99b4a83d9d249c4143a9649fc470cf82d78ba20047b0e731932e40e06b156f44f6bf892ffd6d69ef791d06f947c0c52c25603ff0238ea7dd438f49e1b4ca7e147c3a27a62176b0925e8a950b29b5a6ddb365da4b10df3d3202658affd8941c740175ee5d59406dfd4e0ebe63e4bf9e9c09b510c8813030d88ee549126f9769be52eedc1d2979c0b4e7ef2dfbab2cc4247dcb515d10650838c47b1f0aa852c02ad8f76a9d1c3392c506d13940d51ed29ecf55168a4d632131a03fee92349b2bae2704f2ba8c2fe2db7b56a8149df4d90f2935a982e8aeb106ffb4d3d7901040b8c7fea13ff403032c3cd673a41ab1437de998cfd1ad36b719ee8be406e98b9533c272b38f4cdc9a596bbe9e6910cfe3f7663aa9fa20edc689e5db5adab3bf44f846c4e93a806209159b0607c0c79efbae0821d0e23ac5dc64af03e3794129ee1b80093f3489cf7993a45a8b37a04a7ef3e4452caadbf718b9c6fae87b12e9618d1816f0d114dd59525551125d6e4e4d6477eeafc45725d70292be8a42c9867312aa44659fcdb75e363f485c7b946d28e629f0aa711216fb8afaeadfaacbb7655c7d224fe15cadaf15a4dff6ac5eb1fae1bf7147cdf58e8004cbdd15a43cb130e88e24ca28ea01c486c85db43d0b33dee125a566bd510ad694dc54d6f3dda73e47a483ad7ffd5f3b94454a41439003ea6b1e9b9e0594b1db0f1c747bcba11a2883c4bdc93698af0e0349889e4f8a68add67adcd309b71bc0a68a645c992351caf3d7ad34d1d6f14e3c0982953635a5da2cddadec0c723b34092df4c49e72695325e6595b7289239fdcb44964514514be6c2a9cf908866f5d5e63ef05118d646518a78c82cacf78395b632a9aadece16b3819ba173881fb0eed8196327d72de934424001ead32c115501f99b7d2038eb39873ea34892d7594a1"}, {0x60, 0x10f, 0x9, "96cbe8c2a959148ff50960729519c2586e60c099dfb17b2edecf417a26fb57aecea00e628ccf138941f964db4d3a9e9eec4c591bda526b127023d475f131d002c28f3711bfbd83094f821fa1ccbc12f5"}, {0xd8, 0x10b, 0xf9a0, "638838bb382776e2e055b550ea73b9f8d8db48169ab9e0ae43381bd2ebb516d5db6c96603999f63bfd3278fa8dfd61f328812f1c7f88f74df0dd592547755ea12b7eece110766770e0a099de4fb6e63cbeb62a08a9403c8d6799504dddda4780dfdd2c46e420c9c81c025915e1715bcb525086a2b795011f37bd054d6c31dab2fc02f5989a8b11aaf38856fa1c6e8c9b65f5e258720e25c4530313f9fbf2a934a1b21ebd58a70839fc52c0ca5bc50665eb4efb71c3007c7054fc0b07f2c1ffad2fb329"}], 0x14d8}}], 0x3, 0x2000c045) 18.793348339s ago: executing program 4 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xb0, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x9a, 0x3, 0x0, 0x1, [@generic="9e717292e16cd97adf13c84ccd87bd8acaff4e9154eb3eb705e84fab9df085e514ac9e7f8481d64221acdb5b1a2f4c6e3e75460bf69334d78b6288859803765a962e9538fffb75cc927394033dedf075cc6d6d196ffef0d8906e89d6159ca29a8115a6f78032149beca2e7981747f0f6b24e890136d9c798e70376e46ae7054b86403818053e10634ef0fe7670beb8b305f96c759b11"]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.205031861s ago: executing program 3 (id=1774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xa40, 0x8c0, 0x11, 0x148, 0x9a8, 0x0, 0x9a8, 0x2a8, 0x2a8, 0x9a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[], 0x29}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xaa0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x42, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x0, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="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", 0x317}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) accept4$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80c00) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x10102) 2.03415846s ago: executing program 2 (id=2564): epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000950000000000f900"/32], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_EVENT={0x8, 0x2c, 0xfffffffc}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0x0) listen(r5, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x98282, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'gre0\x00', @remote}) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r8, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) 1.285479315s ago: executing program 0 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r3, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001100)=[@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x17, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x4e24, @remote}], 0x64) 889.110917ms ago: executing program 0 (id=2721): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x2c, r2, 0x8083540e3272eb67, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 663.549348ms ago: executing program 0 (id=2722): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 581.202343ms ago: executing program 0 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x1, 0x80, 0x41f, 0x3, {{0x20, 0x4, 0x2, 0x4, 0x80, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_prespec={0x44, 0x34, 0x3d, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@private=0xa010102, 0xfff}, {@multicast1, 0xffffffba}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffb}]}, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0x9, [{@multicast1, 0x8}, {@multicast2, 0x80000001}]}, @lsrr={0x83, 0x23, 0xa3, [@multicast2, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}]}}}}}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_getneigh={0xc4, 0x1e, 0x300, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0xa0609c8365903138, 0x800}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8ec}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "57b2932586261ef3eff3c65f4ca06a15"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "32963f95437e2be22ac53124c6a2d729"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "f4179ca95212628fd7a8a46a0081f54f92533e8fb0"}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0xc4}}, 0x20040000) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @private2}}, 0x24) sendmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 449.264894ms ago: executing program 0 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newroute={0x12, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 0 (id=2725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r2, 0xa1) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): [ 295.925566][ T6464] bond_slave_0: left allmulticast mode [ 295.933336][ T6464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.942399][ T6464] bond_slave_1: left allmulticast mode [ 295.952862][ T6464] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 295.962847][ T6464] dummy0: left allmulticast mode [ 295.970978][ T6464] bond0 (unregistering): Released all slaves [ 295.986450][ T6464] bond1 (unregistering): Released all slaves [ 296.002543][ T6464] bond2 (unregistering): Released all slaves [ 296.093532][ T8621] srz1: Port: 1 Link DOWN [ 296.216938][ T6464] tipc: Disabling bearer [ 296.234187][ T6464] tipc: Left network mode [ 296.433892][ T5841] Bluetooth: hci2: command tx timeout [ 296.538809][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 296.589207][T11985] chnl_net:caif_netlink_parms(): no params data found [ 296.767257][T12070] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 297.027575][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.038266][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.055878][T11985] bridge_slave_0: entered allmulticast mode [ 297.102450][T11985] bridge_slave_0: entered promiscuous mode [ 297.123354][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.142172][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.169174][T11985] bridge_slave_1: entered allmulticast mode [ 297.192816][T11985] bridge_slave_1: entered promiscuous mode [ 297.375718][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 297.435546][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.516766][T12101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.615292][ T6464] hsr_slave_0: left promiscuous mode [ 297.622557][ T6464] hsr_slave_1: left promiscuous mode [ 297.628577][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.636634][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.659308][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.671332][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.695631][ T6464] veth1_macvtap: left promiscuous mode [ 297.701463][ T6464] veth0_macvtap: left promiscuous mode [ 297.713128][ T6464] veth1_vlan: left promiscuous mode [ 297.721468][ T6464] veth0_vlan: left promiscuous mode [ 297.843694][ T6464] pim6reg (unregistering): left allmulticast mode [ 298.484626][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.511702][ T5841] Bluetooth: hci2: command tx timeout [ 298.550789][T12110] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 298.602038][T11985] team0: Port device team_slave_0 added [ 298.636765][T11985] team0: Port device team_slave_1 added [ 298.723633][T12118] bond3: entered promiscuous mode [ 298.731000][T12118] bond3: entered allmulticast mode [ 298.736814][T12118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.840549][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.847562][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.874189][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.912285][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 298.918994][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.941243][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 298.950463][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.990663][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.072017][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1820'. [ 299.151803][T12140] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1822'. [ 299.183880][T11985] hsr_slave_0: entered promiscuous mode [ 299.193747][ T6464] IPVS: stop unused estimator thread 0... [ 299.202309][T11985] hsr_slave_1: entered promiscuous mode [ 299.214287][T11985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.222036][T11985] Cannot create hsr debugfs directory [ 299.371186][T12155] openvswitch: netlink: Key type 30 is not supported [ 299.392577][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 299.428861][T12151] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.487402][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1825'. [ 299.616513][T12168] netlink: 'syz.2.1830': attribute type 3 has an invalid length. [ 299.713835][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1829'. [ 299.900787][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'. [ 299.916412][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'. [ 300.063827][T11985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.107797][T11985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.142163][T11985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.143531][T12191] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1835'. [ 300.196008][T12191] gretap0: entered promiscuous mode [ 300.209872][T12191] gretap0: left allmulticast mode [ 300.215214][T11985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.255119][ T8621] gretap0 speed is unknown, defaulting to 1000 [ 300.494104][T12213] netlink: 'syz.4.1842': attribute type 7 has an invalid length. [ 300.495046][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.572783][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.589726][ T5841] Bluetooth: hci2: command tx timeout [ 300.636746][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.643992][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.670673][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.677921][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.203770][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.400643][T11985] veth0_vlan: entered promiscuous mode [ 301.440550][T11985] veth1_vlan: entered promiscuous mode [ 301.537310][T11985] veth0_macvtap: entered promiscuous mode [ 301.580641][T12267] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 301.601842][T11985] veth1_macvtap: entered promiscuous mode [ 301.612768][T12260] xt_CT: No such helper "snmp" [ 301.660207][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.713248][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.755332][T11985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.775203][T11985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.795369][T11985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.810372][T11985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.921325][T12278] netlink: 'syz.0.1860': attribute type 12 has an invalid length. [ 302.083364][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.115464][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.190740][ T6483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.199237][ T6483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.404658][T12297] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 302.506885][T12293] team_slave_0: left allmulticast mode [ 302.529440][T12293] team0 (unregistering): Port device team_slave_0 removed [ 302.536977][T12293] team_slave_1: left allmulticast mode [ 302.562658][T12293] team0 (unregistering): Port device team_slave_1 removed [ 303.225570][ T6483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.871335][ T6483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.006297][T12368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.036519][T12381] netlink: 'syz.2.1881': attribute type 39 has an invalid length. [ 304.257198][ T6483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.272200][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.281352][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.293126][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.301471][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.309804][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.320811][T12392] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 304.405562][T12399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.550681][ T6483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.672924][T12416] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 304.683146][T12399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.683439][T12416] netlink: 'syz.4.1890': attribute type 2 has an invalid length. [ 304.707707][T12416] ipt_REJECT: TCP_RESET invalid for non-tcp [ 304.721222][T12417] tipc: Started in network mode [ 304.728728][T12417] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 304.737889][T12417] tipc: Enabling of bearer rejected, failed to enable media [ 304.751224][T12396] lo speed is unknown, defaulting to 1000 [ 304.840394][T12399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.956319][T12399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.991191][T12428] __nla_validate_parse: 7 callbacks suppressed [ 304.991211][T12428] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1891'. [ 305.026292][T12428] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 305.036405][T12428] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1891'. [ 305.148974][ T6483] bridge_slave_1: left allmulticast mode [ 305.156958][ T6483] bridge_slave_1: left promiscuous mode [ 305.173457][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.203513][ T6483] bridge_slave_0: left allmulticast mode [ 305.228659][ T6483] bridge_slave_0: left promiscuous mode [ 305.244653][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.396309][T12443] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1895'. [ 305.496391][T12447] netlink: 'syz.2.1898': attribute type 3 has an invalid length. [ 305.527414][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 305.584382][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1895'. [ 305.593783][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 305.712770][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.723937][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.734455][ T6483] bond0 (unregistering): Released all slaves [ 305.748303][T12396] gretap0 speed is unknown, defaulting to 1000 [ 305.771753][T12446] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 305.789530][T12458] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 305.797295][T12458] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1900'. [ 305.887899][T12452] veth11: entered allmulticast mode [ 305.919842][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.981708][T12399] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.071447][T12469] bond0: entered allmulticast mode [ 306.117681][T12399] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.159734][T12399] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.251561][T12399] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.430090][ T5836] Bluetooth: hci2: command tx timeout [ 306.602965][T12488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1908'. [ 306.914588][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 307.074638][T12512] xt_l2tp: v2 tid > 0xffff: 150994944 [ 307.086270][T12500] tunl0: entered promiscuous mode [ 307.093602][T12500] netlink: 'syz.4.1914': attribute type 3 has an invalid length. [ 307.104294][T12500] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1914'. [ 307.128023][ T6483] hsr_slave_0: left promiscuous mode [ 307.142970][ T6483] hsr_slave_1: left promiscuous mode [ 307.163185][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.175723][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.189887][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.199834][T12516] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 307.212262][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.241126][ T6483] veth1_macvtap: left promiscuous mode [ 307.246727][ T6483] veth0_macvtap: left promiscuous mode [ 307.253509][ T6483] veth1_vlan: left promiscuous mode [ 307.259022][ T6483] veth0_vlan: left promiscuous mode [ 307.774691][ T6483] team0 (unregistering): Port device team_slave_1 removed [ 307.780907][T12529] unsupported nlmsg_type 40 [ 307.823113][ T6483] team0 (unregistering): Port device team_slave_0 removed [ 307.907624][T12531] netlink: zone id is out of range [ 307.916068][T12531] netlink: zone id is out of range [ 307.921382][T12531] netlink: zone id is out of range [ 307.926525][T12531] netlink: zone id is out of range [ 307.931703][T12531] netlink: zone id is out of range [ 307.936847][T12531] netlink: zone id is out of range [ 307.945352][T12531] netlink: zone id is out of range [ 307.952494][T12531] netlink: zone id is out of range [ 307.957731][T12531] netlink: zone id is out of range [ 307.968006][T12531] netlink: zone id is out of range [ 308.445396][T12396] chnl_net:caif_netlink_parms(): no params data found [ 308.519050][ T5836] Bluetooth: hci2: command tx timeout [ 308.847898][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.866584][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.877297][T12396] bridge_slave_0: entered allmulticast mode [ 308.894057][T12396] bridge_slave_0: entered promiscuous mode [ 308.911449][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.921116][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.928763][T12396] bridge_slave_1: entered allmulticast mode [ 308.936765][T12396] bridge_slave_1: entered promiscuous mode [ 308.948228][T12580] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 308.968480][T12581] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 309.056371][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.090206][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.366456][T12396] team0: Port device team_slave_0 added [ 309.378293][T12396] team0: Port device team_slave_1 added [ 309.447687][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.461577][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.511290][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.526744][T12604] gtp1: entered promiscuous mode [ 309.534160][T12604] gtp1: entered allmulticast mode [ 309.553804][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.562844][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.591439][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.766339][T12617] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 309.802941][T12396] hsr_slave_0: entered promiscuous mode [ 309.813348][T12621] netlink: 'syz.0.1942': attribute type 5 has an invalid length. [ 309.834533][T12396] hsr_slave_1: entered promiscuous mode [ 309.850025][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.868869][T12396] Cannot create hsr debugfs directory [ 310.159299][T12641] __nla_validate_parse: 9 callbacks suppressed [ 310.159320][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1949'. [ 310.177843][T12641] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 310.186111][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 310.502973][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 310.540842][T12396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.554279][T12396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.569478][T12396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.583070][T12396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.601646][ T5836] Bluetooth: hci2: command tx timeout [ 310.611642][T12667] lo: left allmulticast mode [ 310.616520][T12667] netlink: 'syz.2.1957': attribute type 2 has an invalid length. [ 310.815333][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.866239][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.905957][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.913194][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.983225][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.990467][ T6508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.133165][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 311.145502][T12693] C: entered promiscuous mode [ 311.158187][T12693] gre0: entered promiscuous mode [ 311.174382][T12693] gretap0: entered promiscuous mode [ 311.187580][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 311.191314][T12693] erspan0: entered promiscuous mode [ 311.209411][T12693] ip_vti0: entered promiscuous mode [ 311.222985][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 311.234625][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 311.244773][T12691] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 311.304295][T12691] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 311.312168][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 311.452640][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 311.505069][T12698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.625635][T12714] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1965'. [ 311.761068][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.884104][T12396] veth0_vlan: entered promiscuous mode [ 311.912115][T12396] veth1_vlan: entered promiscuous mode [ 311.984399][T12396] veth0_macvtap: entered promiscuous mode [ 312.013562][T12396] veth1_macvtap: entered promiscuous mode [ 312.097198][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.103868][T12741] netlink: 'syz.4.1973': attribute type 13 has an invalid length. [ 312.133873][T12741] macvtap0: entered allmulticast mode [ 312.150716][T12741] macvtap0: refused to change device tx_queue_len [ 312.175517][T12746] tc_dump_action: action bad kind [ 312.249784][T12741] netlink: 'syz.4.1973': attribute type 13 has an invalid length. [ 312.255087][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.268397][T12746] tc_dump_action: action bad kind [ 312.302940][T12741] macvtap0: refused to change device tx_queue_len [ 312.313721][T12396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.342037][T12396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.360119][T12396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.384006][T12396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.633339][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.659708][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.671339][ T5836] Bluetooth: hci2: command tx timeout [ 312.681336][T12773] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 312.708318][T12773] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 312.754277][ T8753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.772158][ T8753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.973291][T12794] sock: sock_timestamping_bind_phc: sock not bind to device [ 313.127659][T12803] netlink: 'syz.0.1989': attribute type 7 has an invalid length. [ 313.142555][T12803] netlink: 'syz.0.1989': attribute type 8 has an invalid length. [ 313.781674][ T6508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.369537][ T6508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.489875][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.510467][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.519044][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.528289][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.535921][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.597210][ T6508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.700440][ T6508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.747429][T12872] lo speed is unknown, defaulting to 1000 [ 314.757212][T12884] nft_compat: unsupported protocol 5 [ 314.924623][T12891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.345983][T12868] __nla_validate_parse: 6 callbacks suppressed [ 315.346002][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 315.365569][T12874] netlink: 'syz.1.2009': attribute type 3 has an invalid length. [ 315.368766][T12887] macvlan2: entered allmulticast mode [ 315.380082][T12887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.415000][ T6508] bridge_slave_1: left allmulticast mode [ 315.421052][ T6508] bridge_slave_1: left promiscuous mode [ 315.426765][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.437456][ T6508] bridge_slave_0: left allmulticast mode [ 315.443602][ T6508] bridge_slave_0: left promiscuous mode [ 315.449475][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.748551][T12894] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.813515][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.825769][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.835945][ T6508] bond0 (unregistering): Released all slaves [ 315.851039][T12872] gretap0 speed is unknown, defaulting to 1000 [ 316.216823][T12909] tipc: Enabling of bearer rejected, failed to enable media [ 316.315668][T12921] net_ratelimit: 323 callbacks suppressed [ 316.315689][T12921] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.398003][T12928] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2021'. [ 316.526361][T12931] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2022'. [ 316.598271][ T5841] Bluetooth: hci2: command tx timeout [ 316.625623][T12933] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2023'. [ 316.656119][T12933] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2023'. [ 316.732380][T12936] xt_bpf: check failed: parse error [ 316.763320][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2023'. [ 316.817917][T12942] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2023'. [ 317.073725][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332664][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 317.342493][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 317.619539][ T6508] hsr_slave_0: left promiscuous mode [ 317.632906][T12967] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2033'. [ 317.643382][ T6508] hsr_slave_1: left promiscuous mode [ 317.656362][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.678153][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.686254][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.718917][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.774944][ T6508] veth1_macvtap: left promiscuous mode [ 317.798291][ T6508] veth0_macvtap: left promiscuous mode [ 317.804018][ T6508] veth1_vlan: left promiscuous mode [ 317.817413][ T6508] veth0_vlan: left promiscuous mode [ 318.234964][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 318.272989][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 318.626552][T12969] veth0: entered promiscuous mode [ 318.632264][T12969] veth0: left promiscuous mode [ 318.668169][ T5841] Bluetooth: hci2: command tx timeout [ 318.694873][T12872] chnl_net:caif_netlink_parms(): no params data found [ 318.976593][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.007855][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.027206][T12872] bridge_slave_0: entered allmulticast mode [ 319.040683][T12872] bridge_slave_0: entered promiscuous mode [ 319.053677][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.063183][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.070891][T12872] bridge_slave_1: entered allmulticast mode [ 319.084160][T12872] bridge_slave_1: entered promiscuous mode [ 319.092158][T13008] netlink: 'syz.0.2043': attribute type 21 has an invalid length. [ 319.133964][T13005] team_slave_0: entered allmulticast mode [ 319.240891][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.273518][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.345804][T13018] sctp: [Deprecated]: syz.2.2047 (pid 13018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.345804][T13018] Use struct sctp_sack_info instead [ 319.442031][T12872] team0: Port device team_slave_0 added [ 319.473156][T12872] team0: Port device team_slave_1 added [ 319.615543][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.628647][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.665315][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.681447][T13034] netlink: 'syz.1.2052': attribute type 12 has an invalid length. [ 319.709662][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.717105][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.772606][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.789378][ T1340] wlan1: Trigger new scan to find an IBSS to join [ 319.818611][T13053] x_tables: unsorted entry at hook 2 [ 319.874321][T13044] netlink: 'syz.4.2051': attribute type 4 has an invalid length. [ 319.878008][T12872] hsr_slave_0: entered promiscuous mode [ 319.893794][T12872] hsr_slave_1: entered promiscuous mode [ 319.900941][T12872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.909327][T12872] Cannot create hsr debugfs directory [ 320.024750][T13060] netlink: 'syz.0.2059': attribute type 2 has an invalid length. [ 320.597712][T12872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.673681][T12872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.713507][T13098] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 320.728521][T13098] __nla_validate_parse: 7 callbacks suppressed [ 320.728537][T13098] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2071'. [ 320.755122][ T5836] Bluetooth: hci2: command tx timeout [ 320.761631][T12872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.772306][T13098] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 320.787339][T13098] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 320.791404][T12872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.928229][T13115] netlink: 'syz.4.2075': attribute type 4 has an invalid length. [ 320.937437][T13115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.944725][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 320.952018][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 320.959292][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 320.974479][T13115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.130333][T12872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.175496][T12872] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.204355][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.211582][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.284093][T13132] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 321.352247][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.359535][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.808791][T12872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.889567][T12872] veth0_vlan: entered promiscuous mode [ 321.907910][T12872] veth1_vlan: entered promiscuous mode [ 321.956832][T12872] veth0_macvtap: entered promiscuous mode [ 321.971409][T12872] veth1_macvtap: entered promiscuous mode [ 322.006228][T12872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.027061][T12872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.043454][T12872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.053279][T12872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.062886][T12872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.072627][T12872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.828299][ T5836] Bluetooth: hci2: command 0x0419 tx timeout [ 323.790360][ T8753] wlan1: Trigger new scan to find an IBSS to join [ 323.930588][ T1340] wlan1: Creating new IBSS network, BSSID 0e:fb:f8:b2:bb:7b [ 324.097671][T13161] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2086'. [ 324.178868][T13165] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 324.210418][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 324.326438][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.352604][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.461429][ T6508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.479847][ T6508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.687333][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 324.777596][T13198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2095'. [ 324.985948][T13208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2099'. [ 325.018650][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2099'. [ 325.041747][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 325.057017][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 325.209684][ T6508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.251029][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'. [ 325.375367][ T6508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.081016][ T6508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.302721][ T6508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.318551][T13244] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 326.344904][T13251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'. [ 326.551444][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'. [ 326.588638][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 326.642030][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.653151][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.660439][ T6508] bridge_slave_1: left allmulticast mode [ 326.666251][ T6508] bridge_slave_1: left promiscuous mode [ 326.672923][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.681494][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.689954][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.718597][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.739871][ T6508] bridge_slave_0: left allmulticast mode [ 326.745554][ T6508] bridge_slave_0: left promiscuous mode [ 326.754306][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.804138][T13267] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2117'. [ 326.984965][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 326.994485][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'. [ 327.081898][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 327.168318][T13290] block nbd0: server does not support multiple connections per device. [ 327.176899][T13290] block nbd0: shutting down sockets [ 327.319622][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.330946][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.341249][ T6508] bond0 (unregistering): Released all slaves [ 327.368555][T13286] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2121'. [ 327.385827][T13267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.395946][T13286] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2121'. [ 327.482349][T13260] lo speed is unknown, defaulting to 1000 [ 327.676011][T13296] xfrm1: entered promiscuous mode [ 327.689872][T13296] xfrm1: entered allmulticast mode [ 327.831928][T13315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.039092][T13260] gretap0 speed is unknown, defaulting to 1000 [ 328.145708][T13329] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 328.147129][T13328] veth0: entered promiscuous mode [ 328.203091][T13327] veth0: left promiscuous mode [ 328.378428][T13331] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 328.489114][T13338] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 328.654384][T13338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.707354][T13338] vlan4: entered allmulticast mode [ 328.715508][T13338] bond6: entered allmulticast mode [ 328.748229][ T5841] Bluetooth: hci2: command tx timeout [ 328.756204][T13341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.764680][T13341] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 328.777728][T13341] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 328.806487][T13340] ip6gre1: entered allmulticast mode [ 328.856583][T13345] veth11: entered promiscuous mode [ 328.865600][T13345] bond6: (slave veth11): Enslaving as an active interface with a down link [ 328.915736][ T6508] hsr_slave_0: left promiscuous mode [ 328.925058][ T6508] hsr_slave_1: left promiscuous mode [ 328.933316][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.950774][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.979069][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.986884][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.042631][ T6508] veth1_macvtap: left promiscuous mode [ 329.051589][ T6508] veth0_macvtap: left promiscuous mode [ 329.059330][ T6508] veth1_vlan: left promiscuous mode [ 329.064681][ T6508] veth0_vlan: left promiscuous mode [ 329.704391][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 329.742533][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 330.104210][T13366] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 330.149067][T13387] syzkaller1: entered promiscuous mode [ 330.158236][T13387] syzkaller1: entered allmulticast mode [ 330.262089][T13396] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 330.344089][T13401] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 330.435940][T13401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.684350][T13260] chnl_net:caif_netlink_parms(): no params data found [ 330.737780][T13417] lo speed is unknown, defaulting to 1000 [ 330.829585][ T5841] Bluetooth: hci2: command tx timeout [ 330.892371][T13423] geneve2: entered promiscuous mode [ 330.914317][T13423] geneve2: entered allmulticast mode [ 331.010598][T13430] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 331.164656][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.174637][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.183692][T13260] bridge_slave_0: entered allmulticast mode [ 331.194070][T13260] bridge_slave_0: entered promiscuous mode [ 331.204709][T13417] gretap0 speed is unknown, defaulting to 1000 [ 331.214065][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.233191][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.250391][T13260] bridge_slave_1: entered allmulticast mode [ 331.265181][T13260] bridge_slave_1: entered promiscuous mode [ 331.320193][T13440] x_tables: duplicate underflow at hook 2 [ 331.391524][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.414019][T13443] __nla_validate_parse: 8 callbacks suppressed [ 331.414037][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2162'. [ 331.421859][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.529572][T13260] team0: Port device team_slave_0 added [ 331.535999][T13448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2162'. [ 331.552930][T13260] team0: Port device team_slave_1 added [ 331.662494][T13453] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 331.687460][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.700493][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.755551][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.777094][T13455] netlink: 'syz.1.2164': attribute type 1 has an invalid length. [ 331.791998][T13455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2164'. [ 331.813688][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.823103][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.860798][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.982158][T13463] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2165'. [ 332.060532][T13260] hsr_slave_0: entered promiscuous mode [ 332.067137][T13260] hsr_slave_1: entered promiscuous mode [ 332.086602][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2167'. [ 332.124470][T13260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.138098][T13260] Cannot create hsr debugfs directory [ 332.324083][T13476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2170'. [ 332.506134][T13483] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2172'. [ 332.908719][ T5836] Bluetooth: hci2: command tx timeout [ 332.936844][T13493] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 332.971214][T13493] veth1_vlan: entered allmulticast mode [ 332.977065][T13493] veth1_vlan: left promiscuous mode [ 333.002990][T13493] team0: Device veth1_vlan failed to register rx_handler [ 333.169567][T13498] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 333.311816][T13507] delete_channel: no stack [ 333.395287][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2177'. [ 333.490360][T13260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.512839][T13260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.534660][T13260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.552287][T13260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.734483][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.757579][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.772078][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.779487][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.832887][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.840097][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.001774][T13551] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 334.032914][T13551] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2189'. [ 334.048878][T13551] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 334.062564][T13551] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 334.082145][T13551] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2189'. [ 334.099643][T13551] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 334.151448][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.176371][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.239532][T13563] tipc: Enabled bearer , priority 0 [ 334.247059][T13563] tipc: Enabling of bearer rejected, already enabled [ 334.272993][T13563] tipc: Enabling of bearer rejected, already enabled [ 334.300851][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.312283][T13563] tipc: Enabling of bearer rejected, already enabled [ 334.347401][T13563] tipc: Disabling bearer [ 334.444514][T13260] veth0_vlan: entered promiscuous mode [ 334.466778][T13260] veth1_vlan: entered promiscuous mode [ 334.479987][T13575] C: renamed from lo (while UP) [ 334.539734][T13260] veth0_macvtap: entered promiscuous mode [ 334.570561][T13260] veth1_macvtap: entered promiscuous mode [ 334.601783][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.611591][T13584] openvswitch: netlink: Flow key attr not present in new flow. [ 334.629282][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.644033][T13260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.658477][T13260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.667223][T13260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.698451][T13260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.731136][T13586] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 334.853657][ T8751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.875943][ T8751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.932269][ T6464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.944038][ T6464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.995323][ T5836] Bluetooth: hci2: command 0x0419 tx timeout [ 335.068585][T13599] netlink: 'syz.4.2205': attribute type 14 has an invalid length. [ 335.099085][T13599] netlink: 'syz.4.2205': attribute type 13 has an invalid length. [ 335.265412][T13607] bond0: option mode: unable to set because the bond device has slaves [ 335.377431][T13614] macvlan4: entered allmulticast mode [ 335.383558][T13614] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 335.436408][T13617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 335.483653][T13620] netlink: 'syz.2.2211': attribute type 39 has an invalid length. [ 335.540224][T13624] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 335.584568][T13620] bond5: entered promiscuous mode [ 335.594009][T13620] bond5: entered allmulticast mode [ 335.602105][T13620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.703912][T13620] bond5 (unregistering): Released all slaves [ 336.264776][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.341940][ T8753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.020083][T13670] __nla_validate_parse: 11 callbacks suppressed [ 337.020104][T13670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2224'. [ 337.064399][ T8753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.313495][T13689] x_tables: duplicate underflow at hook 3 [ 337.329691][T13688] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2231'. [ 337.349329][T13689] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 337.357107][T13689] netlink: 'syz.1.2230': attribute type 2 has an invalid length. [ 337.365228][T13689] netlink: 'syz.1.2230': attribute type 1 has an invalid length. [ 337.374408][T13692] xt_hashlimit: size too large, truncated to 1048576 [ 337.421572][T13689] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.2230'. [ 337.477324][ T8753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.720240][ T8753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.767972][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.777631][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.790558][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.801747][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.811500][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.917086][ T8753] bridge_slave_1: left allmulticast mode [ 337.923098][ T8753] bridge_slave_1: left promiscuous mode [ 337.929237][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.945610][ T8753] bridge_slave_0: left allmulticast mode [ 337.953490][ T8753] bridge_slave_0: left promiscuous mode [ 337.959697][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.983525][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2235'. [ 338.480669][ T8753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.492135][ T8753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.502224][ T8753] bond0 (unregistering): Released all slaves [ 338.592611][T13707] C speed is unknown, defaulting to 1000 [ 338.813939][T13749] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2240'. [ 338.827866][T13745] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2240'. [ 338.853524][T13736] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2240'. [ 338.869104][T13750] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2243'. [ 338.903903][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 338.916610][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2244'. [ 339.201053][T13762] 8021q: VLANs not supported on ip_vti0 [ 339.207366][T13707] gretap0 speed is unknown, defaulting to 1000 [ 339.235554][T13763] C speed is unknown, defaulting to 1000 [ 339.865322][T13763] gretap0 speed is unknown, defaulting to 1000 [ 339.869327][ T5841] Bluetooth: hci2: command tx timeout [ 341.317835][T13810] "syz.4.2258" (13810) uses obsolete ecb(arc4) skcipher [ 341.331397][T13810] "syz.4.2258" (13810) uses obsolete ecb(arc4) skcipher [ 341.961240][ T5841] Bluetooth: hci2: command tx timeout [ 342.791666][ T8753] hsr_slave_0: left promiscuous mode [ 342.808821][ T8753] hsr_slave_1: left promiscuous mode [ 342.814855][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.846648][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.867603][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.880761][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.933892][ T8753] veth1_macvtap: left promiscuous mode [ 342.958403][ T8753] veth0_macvtap: left promiscuous mode [ 342.964859][T13840] __nla_validate_parse: 3 callbacks suppressed [ 342.964874][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 342.965679][ T8753] veth1_vlan: left promiscuous mode [ 343.038348][ T8753] veth0_vlan: left promiscuous mode [ 343.187288][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 343.259070][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2266'. [ 343.523096][ T8753] team0 (unregistering): Port device team_slave_1 removed [ 343.557824][ T8753] team0 (unregistering): Port device team_slave_0 removed [ 343.906877][T13829] syz.4.2262 (13829) used obsolete PPPIOCDETACH ioctl [ 344.038406][ T5841] Bluetooth: hci2: command tx timeout [ 344.393224][T13857] C speed is unknown, defaulting to 1000 [ 344.463960][T13707] chnl_net:caif_netlink_parms(): no params data found [ 344.932207][T13892] validate_nla: 1 callbacks suppressed [ 344.932225][T13892] netlink: 'syz.1.2276': attribute type 24 has an invalid length. [ 344.945789][T13891] netlink: 'syz.1.2276': attribute type 24 has an invalid length. [ 345.098364][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 345.107455][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2278'. [ 345.129850][T13707] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.169174][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.176440][T13707] bridge_slave_0: entered allmulticast mode [ 345.187683][T13707] bridge_slave_0: entered promiscuous mode [ 345.215981][T13707] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.225442][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.233153][T13707] bridge_slave_1: entered allmulticast mode [ 345.254617][T13707] bridge_slave_1: entered promiscuous mode [ 345.380512][T13857] gretap0 speed is unknown, defaulting to 1000 [ 345.383895][T13707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.435001][T13707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.600699][T13707] team0: Port device team_slave_0 added [ 345.630093][T13707] team0: Port device team_slave_1 added [ 345.636704][T13923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2285'. [ 345.697731][T13924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2285'. [ 345.758404][T13707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.775647][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.828437][T13707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.850844][T13707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.857873][T13707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.939634][T13707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.116325][T13707] hsr_slave_0: entered promiscuous mode [ 346.118101][ T5841] Bluetooth: hci2: command tx timeout [ 346.131833][T13707] hsr_slave_1: entered promiscuous mode [ 346.142261][T13707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.168254][T13707] Cannot create hsr debugfs directory [ 346.560547][T13957] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2293'. [ 346.619585][T13957] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 346.648403][T13957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2293'. [ 346.768476][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2294'. [ 347.027428][T13973] netlink: 'syz.4.2297': attribute type 11 has an invalid length. [ 347.053698][T13973] netlink: 'syz.4.2297': attribute type 11 has an invalid length. [ 347.224186][T13981] IPVS: fo: UDP 224.0.0.2:20004 - no destination available [ 347.400778][T13990] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 347.411710][T13990] netlink: 'syz.0.2303': attribute type 2 has an invalid length. [ 347.623632][T13707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.675998][T14004] team0: Device vti1 is up. Set it down before adding it as a team port [ 347.823667][T13707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.849771][T14013] veth0: entered promiscuous mode [ 347.855501][T13707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.876254][T13707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.931435][T14009] veth0: left promiscuous mode [ 348.117280][T13707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.131193][T14035] netlink: 'syz.0.2312': attribute type 5 has an invalid length. [ 348.183096][T13707] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.218607][T14042] sctp: [Deprecated]: syz.2.2315 (pid 14042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.218607][T14042] Use struct sctp_sack_info instead [ 348.272497][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.279706][ T6483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.338978][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.346197][ T6466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.390226][T14051] netlink: 'syz.0.2318': attribute type 1 has an invalid length. [ 348.746284][T13707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.836815][T13707] veth0_vlan: entered promiscuous mode [ 348.871777][T13707] veth1_vlan: entered promiscuous mode [ 348.951689][T13707] veth0_macvtap: entered promiscuous mode [ 348.973553][T13707] veth1_macvtap: entered promiscuous mode [ 349.014685][T13707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.064501][T13707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.075627][T14091] netlink: 'syz.2.2331': attribute type 21 has an invalid length. [ 349.089870][T13707] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.102615][T13707] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.111642][T13707] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.121013][T13707] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.162665][T14089] C speed is unknown, defaulting to 1000 [ 349.191488][T14095] __nla_validate_parse: 9 callbacks suppressed [ 349.191504][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 349.373150][T14089] gretap0 speed is unknown, defaulting to 1000 [ 349.533180][T14107] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 349.602868][T14107] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 349.640450][T14107] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2334'. [ 349.713043][T14110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2334'. [ 349.798308][ T6464] wlan1: Trigger new scan to find an IBSS to join [ 349.864037][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.896518][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.038198][ T6466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.046077][ T6466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.183078][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2341'. [ 350.384594][T14144] validate_nla: 1 callbacks suppressed [ 350.384612][T14144] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 350.467847][T14144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.511435][T14148] gretap1: entered promiscuous mode [ 350.554630][T14148] bond5: (slave gretap1): making interface the new active one [ 350.566231][T14148] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 350.712334][T14148] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 350.806012][T14155] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.040453][T14166] x_tables: duplicate underflow at hook 1 [ 351.056191][T14166] x_tables: duplicate underflow at hook 1 [ 351.163862][T14173] rdma_op ffff8880780e81f0 conn xmit_rdma 0000000000000000 [ 351.293728][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2359'. [ 351.321093][T14191] siw: device registration error -23 [ 351.597152][ T8753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.213421][ T8753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.271306][ T8753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.319662][ T8753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.423156][ T8753] bridge_slave_1: left allmulticast mode [ 352.429346][ T8753] bridge_slave_1: left promiscuous mode [ 352.435036][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.444162][ T8753] bridge_slave_0: left allmulticast mode [ 352.450529][ T8753] bridge_slave_0: left promiscuous mode [ 352.456234][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.557571][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'. [ 352.597469][T14220] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2365'. [ 353.074108][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.083264][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.096831][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.110478][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.123690][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.175948][ T8753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.188637][ T8753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.199387][ T8753] bond0 (unregistering): Released all slaves [ 353.300910][T14228] C speed is unknown, defaulting to 1000 [ 353.466274][T14232] C: renamed from team_slave_0 [ 353.495717][T14232] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 353.529249][T14232] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.802163][ T36] wlan1: Trigger new scan to find an IBSS to join [ 353.826715][T14228] gretap0 speed is unknown, defaulting to 1000 [ 354.109012][T14258] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 354.268964][T14268] xt_SECMARK: invalid mode: 0 [ 354.572376][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 354.741712][T14285] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 354.758577][T14285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2386'. [ 355.149077][ T5841] Bluetooth: hci2: command tx timeout [ 355.152755][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2390'. [ 355.164657][T14303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2389'. [ 355.224601][T14306] sctp: [Deprecated]: syz.4.2389 (pid 14306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.224601][T14306] Use struct sctp_sack_info instead [ 355.487044][T14326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2395'. [ 355.507408][T14320] netlink: 'syz.0.2394': attribute type 4 has an invalid length. [ 355.531200][T14320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2394'. [ 355.545535][ T8753] hsr_slave_0: left promiscuous mode [ 355.560458][T14330] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2395'. [ 355.570914][ T8753] hsr_slave_1: left promiscuous mode [ 355.581344][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.589487][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.597888][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.605761][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.639016][ T8753] veth1_macvtap: left promiscuous mode [ 355.644873][ T8753] veth0_macvtap: left promiscuous mode [ 355.651140][ T8753] veth1_vlan: left promiscuous mode [ 355.656690][ T8753] veth0_vlan: left promiscuous mode [ 356.049983][T14335] openvswitch: netlink: Missing valid actions attribute. [ 356.057342][T14335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.161844][ T8753] team0 (unregistering): Port device team_slave_1 removed [ 356.197957][ T8753] team0 (unregistering): Port device team_slave_0 removed [ 356.212811][T14340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2398'. [ 356.235786][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2398'. [ 356.566862][T14228] chnl_net:caif_netlink_parms(): no params data found [ 356.751252][ T6508] wlan1: Trigger new scan to find an IBSS to join [ 356.804539][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 356.874137][ T6508] wlan1: Creating new IBSS network, BSSID f6:32:23:7e:09:f5 [ 356.949892][T14228] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.979224][T14228] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.996233][T14228] bridge_slave_0: entered allmulticast mode [ 357.009775][T14228] bridge_slave_0: entered promiscuous mode [ 357.033857][T14228] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.045371][T14228] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.053385][T14228] bridge_slave_1: entered allmulticast mode [ 357.065681][T14228] bridge_slave_1: entered promiscuous mode [ 357.176356][T14228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.201740][T14228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.228166][ T5841] Bluetooth: hci2: command tx timeout [ 357.261441][T14228] team0: Port device team_slave_0 added [ 357.271683][T14377] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 357.280057][T14228] team0: Port device team_slave_1 added [ 357.354315][T14228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.373309][T14228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.425417][T14228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.441248][T14228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.452715][T14228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.488778][T14392] netlink: 'syz.1.2411': attribute type 64 has an invalid length. [ 357.501156][T14228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.689277][T14228] hsr_slave_0: entered promiscuous mode [ 357.710401][T14228] hsr_slave_1: entered promiscuous mode [ 357.717947][T14228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.734098][T14228] Cannot create hsr debugfs directory [ 358.038986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.110231][T14413] netlink: 'syz.2.2417': attribute type 2 has an invalid length. [ 358.205754][T14421] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.666286][T14228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.679122][T14228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.695228][T14228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.717002][T14228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.897843][T14228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.983746][T14228] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.025437][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.032726][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.062294][T14473] netlink: 'syz.2.2432': attribute type 6 has an invalid length. [ 359.093849][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.101102][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.309748][ T5836] Bluetooth: hci2: command tx timeout [ 359.583037][T14499] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 359.636356][T14228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.853076][T14228] veth0_vlan: entered promiscuous mode [ 359.910726][T14228] veth1_vlan: entered promiscuous mode [ 360.104498][T14523] __nla_validate_parse: 13 callbacks suppressed [ 360.104518][T14523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2443'. [ 360.131506][T14228] veth0_macvtap: entered promiscuous mode [ 360.177647][T14228] veth1_macvtap: entered promiscuous mode [ 360.250971][T14228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.299351][T14228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.341663][T14228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.380309][T14228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.418220][T14228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.439053][T14228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.497422][T14540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2448'. [ 360.506485][T14542] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2447'. [ 360.629586][ T8751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.646121][ T8751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.678920][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'. [ 360.692884][ T8751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.703496][ T8751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.042631][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 361.043611][T14559] C speed is unknown, defaulting to 1000 [ 361.059060][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 361.213054][T14571] pimreg: left allmulticast mode [ 361.332656][T14578] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 361.345329][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 361.388546][ T5836] Bluetooth: hci2: command 0x0419 tx timeout [ 361.484320][T14582] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2460'. [ 361.497041][T14583] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2460'. [ 361.581679][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 361.658811][T14591] bond0: Device is already in use. [ 361.793485][T14559] gretap0 speed is unknown, defaulting to 1000 [ 362.783438][T14628] veth13: entered promiscuous mode [ 362.808158][T14633] IPVS: Unknown mcast interface: vcan0 [ 363.034478][ T6483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.141952][ T6483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.211877][ T6483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.276609][ T6483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.364546][ T6483] bridge_slave_1: left allmulticast mode [ 363.372054][ T6483] bridge_slave_1: left promiscuous mode [ 363.377738][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.386672][ T6483] bridge_slave_0: left allmulticast mode [ 363.392632][ T6483] bridge_slave_0: left promiscuous mode [ 363.398568][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.692287][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.703747][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.714077][ T6483] bond0 (unregistering): Released all slaves [ 363.938361][T14640] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 364.186142][T14654] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 364.211478][T14654] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 364.232001][T14656] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 364.267114][T14656] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 364.481427][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.498253][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.517128][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.557152][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.572320][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.784827][T14663] C speed is unknown, defaulting to 1000 [ 365.014022][ T6483] hsr_slave_0: left promiscuous mode [ 365.027416][ T6483] hsr_slave_1: left promiscuous mode [ 365.038509][T14690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 365.045259][T14690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 365.062113][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.072663][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.086769][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.094519][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.109573][T14689] block nbd0: server does not support multiple connections per device. [ 365.118338][T14689] block nbd0: shutting down sockets [ 365.157281][ T6483] veth1_macvtap: left promiscuous mode [ 365.169882][ T6483] veth0_macvtap: left promiscuous mode [ 365.194679][ T6483] veth1_vlan: left promiscuous mode [ 365.216059][ T6483] veth0_vlan: left promiscuous mode [ 365.694541][ T6483] team0 (unregistering): Port device team_slave_1 removed [ 365.733996][ T6483] team0 (unregistering): Port device team_slave_0 removed [ 366.135330][T14663] gretap0 speed is unknown, defaulting to 1000 [ 366.201918][T14710] : entered promiscuous mode [ 366.292356][T14712] __nla_validate_parse: 7 callbacks suppressed [ 366.292374][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 366.539290][T14733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 366.579691][T14734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2504'. [ 366.596126][ T8620] IPVS: starting estimator thread 0... [ 366.601522][ T5836] Bluetooth: hci2: command tx timeout [ 366.698522][T14737] IPVS: using max 36 ests per chain, 86400 per kthread [ 366.794820][T14743] veth0: entered promiscuous mode [ 366.815640][T14742] veth0: left promiscuous mode [ 366.906631][T14753] nbd: must specify at least one socket [ 367.020715][T14753] gtp2: entered promiscuous mode [ 367.025729][T14753] gtp2: entered allmulticast mode [ 367.261332][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2517'. [ 367.400381][T14663] chnl_net:caif_netlink_parms(): no params data found [ 367.416480][T14792] netlink: 'syz.2.2519': attribute type 4 has an invalid length. [ 367.520051][T14797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2521'. [ 367.797752][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.805046][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.817707][T14663] bridge_slave_0: entered allmulticast mode [ 367.831794][T14663] bridge_slave_0: entered promiscuous mode [ 367.850068][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.862787][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.878370][T14663] bridge_slave_1: entered allmulticast mode [ 367.886287][T14663] bridge_slave_1: entered promiscuous mode [ 368.021357][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'. [ 368.037062][T14825] sit0: Master is either lo or non-ether device [ 368.054837][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.077287][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.203806][T14837] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 368.220791][T14837] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 368.232723][T14842] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 368.237965][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'. [ 368.274094][T14663] team0: Port device team_slave_0 added [ 368.285579][T14663] team0: Port device team_slave_1 added [ 368.392751][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.412707][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.438914][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.462572][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.469697][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.518229][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.654082][T14663] hsr_slave_0: entered promiscuous mode [ 368.665774][T14663] hsr_slave_1: entered promiscuous mode [ 368.672126][ T5836] Bluetooth: hci2: command tx timeout [ 368.680628][T14663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.688577][T14663] Cannot create hsr debugfs directory [ 368.744401][T14862] C: entered promiscuous mode [ 368.760850][T14862] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 368.763235][T14870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2542'. [ 368.805288][ T5907] C speed is unknown, defaulting to 1000 [ 368.811311][ T5907] syz0: Port: 1 Link DOWN [ 368.834336][ T5907] C speed is unknown, defaulting to 1000 [ 368.987582][T14875] syz_tun: entered allmulticast mode [ 369.153662][T14876] C speed is unknown, defaulting to 1000 [ 369.180951][T14874] syz_tun: left allmulticast mode [ 369.331856][T14885] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 369.372030][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2546'. [ 369.438232][T14663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.460907][T14663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.497337][T14663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.523915][T14876] gretap0 speed is unknown, defaulting to 1000 [ 369.536041][T14663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.773712][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.834095][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.848905][T14907] openvswitch: netlink: Flow key attr not present in new flow. [ 369.864365][ T4109] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.871656][ T4109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.911957][ T4109] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.919254][ T4109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.185572][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'. [ 370.443681][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.470325][T14936] netlink: 'syz.2.2560': attribute type 1 has an invalid length. [ 370.542651][T14663] veth0_vlan: entered promiscuous mode [ 370.577574][T14663] veth1_vlan: entered promiscuous mode [ 370.692489][T14663] veth0_macvtap: entered promiscuous mode [ 370.739736][T14663] veth1_macvtap: entered promiscuous mode [ 370.758403][ T5841] Bluetooth: hci2: command tx timeout [ 370.816452][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.860722][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.911793][T14663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.944824][T14663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.972052][T14663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.980880][T14663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.199760][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.224048][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.325515][T14954] __nla_validate_parse: 3 callbacks suppressed [ 371.325533][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'. [ 371.344518][ T8751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.372820][ T8751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.567645][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 371.585124][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 371.635174][T14961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 371.757229][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.768477][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.779001][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.798685][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.809158][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.916179][T14969] C speed is unknown, defaulting to 1000 [ 372.033306][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2577'. [ 372.076693][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2577'. [ 372.277148][T14969] gretap0 speed is unknown, defaulting to 1000 [ 372.770208][T15014] ipt_REJECT: ECHOREPLY no longer supported. [ 372.832239][ T5154] Bluetooth: hci2: command 0x0419 tx timeout [ 372.863514][T15018] Bluetooth: MGMT ver 1.23 [ 373.131168][T14969] chnl_net:caif_netlink_parms(): no params data found [ 373.234725][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'. [ 373.303933][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.317405][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.324762][T14969] bridge_slave_0: entered allmulticast mode [ 373.337475][T14969] bridge_slave_0: entered promiscuous mode [ 373.356852][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.364758][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.378590][T14969] bridge_slave_1: entered allmulticast mode [ 373.386528][T14969] bridge_slave_1: entered promiscuous mode [ 373.487152][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 373.495371][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.520245][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.585379][T14969] team0: Port device team_slave_0 added [ 373.618976][T14969] team0: Port device team_slave_1 added [ 373.687594][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.709038][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.757240][T15052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2596'. [ 373.788494][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.814668][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.828094][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.863081][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.874788][ T5836] Bluetooth: hci0: command tx timeout [ 373.927581][ T6508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.016237][ T6508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.037860][T14969] hsr_slave_0: entered promiscuous mode [ 374.045771][T14969] hsr_slave_1: entered promiscuous mode [ 374.052968][T14969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.060645][T14969] Cannot create hsr debugfs directory [ 374.095440][ T6508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.168871][ T6508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.239552][T14969] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.290550][T14969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.327606][ T6508] bridge_slave_1: left allmulticast mode [ 374.333928][ T6508] bridge_slave_1: left promiscuous mode [ 374.343321][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.352696][ T6508] bridge_slave_0: left allmulticast mode [ 374.359471][ T6508] bridge_slave_0: left promiscuous mode [ 374.365240][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.683527][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.697085][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.707093][ T6508] bond0 (unregistering): Released all slaves [ 374.725936][T14969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.861226][T14969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.987458][T15061] netlink: 'syz.4.2600': attribute type 10 has an invalid length. [ 375.022202][T15061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2600'. [ 375.061729][T15061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.108164][T15061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.125638][T15061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.134572][T15061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.172699][T15061] team0: Port device geneve0 added [ 375.326318][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.334779][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.348504][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.357560][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.368623][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.685473][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 375.933301][T14969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.957920][ T5836] Bluetooth: hci0: command tx timeout [ 375.980460][T15073] C speed is unknown, defaulting to 1000 [ 375.999884][T14969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.069149][T14969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.112032][T15102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.135915][T14969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.285132][ T6508] hsr_slave_0: left promiscuous mode [ 376.300532][ T6508] hsr_slave_1: left promiscuous mode [ 376.306533][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.328397][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.336577][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2611'. [ 376.359073][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.366531][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.439474][ T6508] veth1_macvtap: left promiscuous mode [ 376.451798][ T6508] veth0_macvtap: left promiscuous mode [ 376.464841][ T6508] veth1_vlan: left promiscuous mode [ 376.470800][ T6508] veth0_vlan: left promiscuous mode [ 376.927870][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 376.967267][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 377.340831][T15073] gretap0 speed is unknown, defaulting to 1000 [ 377.478142][ T5154] Bluetooth: hci2: command tx timeout [ 377.552242][T15133] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 377.603086][T15133] netlink: 'syz.1.2614': attribute type 2 has an invalid length. [ 377.613923][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.681809][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.730693][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.737892][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.773600][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.780800][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.817054][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2619'. [ 377.835574][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2619'. [ 378.028628][ T5154] Bluetooth: hci0: command tx timeout [ 378.225182][T15159] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2621'. [ 378.278305][T15159] netlink: zone id is out of range [ 378.283608][T15159] netlink: get zone limit has 8 unknown bytes [ 378.336592][T15073] chnl_net:caif_netlink_parms(): no params data found [ 378.504401][T15171] netlink: 'syz.0.2626': attribute type 5 has an invalid length. [ 378.518330][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.606274][T15176] netlink: 'syz.0.2628': attribute type 1 has an invalid length. [ 378.678683][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.686003][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.705534][T15073] bridge_slave_0: entered allmulticast mode [ 378.714924][T15073] bridge_slave_0: entered promiscuous mode [ 378.724838][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.732213][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.740004][T15073] bridge_slave_1: entered allmulticast mode [ 378.749198][T15073] bridge_slave_1: entered promiscuous mode [ 378.761960][T15185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2628'. [ 378.916997][T15073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.951625][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.962413][T15073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.056490][T15073] team0: Port device team_slave_0 added [ 379.127260][T15073] team0: Port device team_slave_1 added [ 379.346317][T15073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.369716][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.414554][T15073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.427830][T15073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.441694][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.472211][T15073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.554699][ T5154] Bluetooth: hci2: command tx timeout [ 379.565073][T15226] openvswitch: netlink: Actions may not be safe on all matching packets [ 379.656279][T15073] hsr_slave_0: entered promiscuous mode [ 379.663464][T15073] hsr_slave_1: entered promiscuous mode [ 379.669955][T15073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.677937][T15073] Cannot create hsr debugfs directory [ 379.712132][T14969] veth0_vlan: entered promiscuous mode [ 379.722105][T15230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 379.745434][T14969] veth1_vlan: entered promiscuous mode [ 380.111392][ T5154] Bluetooth: hci0: command tx timeout [ 380.130561][T14969] veth0_macvtap: entered promiscuous mode [ 380.170798][T14969] veth1_macvtap: entered promiscuous mode [ 380.260235][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.316184][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.342550][T14969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.353741][T14969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.366857][T14969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.376672][T14969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.584674][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.597323][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.770456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.774986][T15073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.788457][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.827389][T15073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.852589][T15073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.903413][T15073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.935525][T15279] wg1: entered promiscuous mode [ 381.242195][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2659'. [ 381.307158][ T6483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.420370][ T6483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.461098][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.507718][ T6483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.530495][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.543764][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.551007][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.591617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.598927][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.634348][ T5154] Bluetooth: hci2: command tx timeout [ 381.657792][T15313] netlink: 'syz.4.2661': attribute type 33 has an invalid length. [ 381.885064][ T6483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.160868][ T6483] bridge_slave_1: left allmulticast mode [ 382.184049][ T6483] bridge_slave_1: left promiscuous mode [ 382.196587][T15338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2670'. [ 382.206358][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.216797][ T6483] bridge_slave_0: left allmulticast mode [ 382.223201][ T6483] bridge_slave_0: left promiscuous mode [ 382.232445][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.250873][T15340] x_tables: duplicate entry at hook 3 [ 382.320713][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.331534][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.341642][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.351156][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.359791][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.609090][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.621815][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.632586][ T6483] bond0 (unregistering): Released all slaves [ 382.647460][T15338] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 382.675060][T15336] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 382.727777][T15343] C speed is unknown, defaulting to 1000 [ 382.774707][T15073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.929624][T15349] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2671'. [ 383.033957][T15348] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2671'. [ 383.083301][T15343] gretap0 speed is unknown, defaulting to 1000 [ 383.084046][T15073] veth0_vlan: entered promiscuous mode [ 383.133276][T15351] tipc: Enabled bearer , priority 0 [ 383.185318][T15352] syzkaller0: entered promiscuous mode [ 383.208574][T15352] syzkaller0: entered allmulticast mode [ 383.222406][T15073] veth1_vlan: entered promiscuous mode [ 383.254882][T15351] tipc: Resetting bearer [ 383.313007][T15350] tipc: Resetting bearer [ 383.349136][T15350] tipc: Disabling bearer [ 383.415936][T15073] veth0_macvtap: entered promiscuous mode [ 383.443079][T15073] veth1_macvtap: entered promiscuous mode [ 383.496646][T15073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.534424][T15073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.553687][T15360] siw: device registration error -23 [ 383.675444][T15073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.700923][T15073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.710556][ T5154] Bluetooth: hci2: command tx timeout [ 383.726329][T15073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.735237][T15073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.063162][T15366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2681'. [ 384.084351][T15366] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2681'. [ 384.131447][T15366] netlink: 'syz.0.2681': attribute type 5 has an invalid length. [ 384.152034][T15366] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2681'. [ 384.278524][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.289826][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.297501][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.309122][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.316948][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.424231][ T6483] hsr_slave_0: left promiscuous mode [ 384.442411][ T5154] Bluetooth: hci0: command tx timeout [ 384.448858][ T6483] hsr_slave_1: left promiscuous mode [ 384.461133][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.478468][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.496825][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.518620][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.583013][ T6483] veth1_macvtap: left promiscuous mode [ 384.598384][ T6483] veth0_macvtap: left promiscuous mode [ 384.616329][ T6483] veth1_vlan: left promiscuous mode [ 384.626152][ T6483] veth0_vlan: left promiscuous mode [ 384.862147][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.872271][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.880321][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.891017][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.898894][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.143309][ T6483] team0 (unregistering): Port device team_slave_1 removed [ 385.178885][ T6483] team0 (unregistering): Port device team_slave_0 removed [ 385.619170][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.627053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.642224][T15369] C speed is unknown, defaulting to 1000 [ 385.700645][T15386] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2683'. [ 385.732354][T15386] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2683'. [ 385.744595][ T4109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.753887][ T4109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.845833][T15343] chnl_net:caif_netlink_parms(): no params data found [ 386.060068][T15369] gretap0 speed is unknown, defaulting to 1000 [ 386.062908][T15381] C speed is unknown, defaulting to 1000 [ 386.220220][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.238219][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.258266][T15343] bridge_slave_0: entered allmulticast mode [ 386.266821][T15343] bridge_slave_0: entered promiscuous mode [ 386.299198][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.306355][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.328506][T15343] bridge_slave_1: entered allmulticast mode [ 386.336576][T15343] bridge_slave_1: entered promiscuous mode [ 386.428828][ T5836] Bluetooth: hci3: command tx timeout [ 386.435127][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.461472][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.508350][ T5836] Bluetooth: hci0: command tx timeout [ 386.554603][T15381] gretap0 speed is unknown, defaulting to 1000 [ 386.588471][ T6483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.633604][T15343] team0: Port device team_slave_0 added [ 386.694957][T15343] team0: Port device team_slave_1 added [ 386.820121][ T6483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.976832][ T6483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.990031][ T5836] Bluetooth: hci4: command tx timeout [ 387.004038][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.012167][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.038704][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.052510][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.059913][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.086526][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.121893][ T6483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.225118][T15343] hsr_slave_0: entered promiscuous mode [ 387.232442][T15343] hsr_slave_1: entered promiscuous mode [ 387.238652][T15343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.246230][T15343] Cannot create hsr debugfs directory [ 387.493721][T15369] chnl_net:caif_netlink_parms(): no params data found [ 387.642828][T15381] chnl_net:caif_netlink_parms(): no params data found [ 387.747920][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.755186][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.766042][T15369] bridge_slave_0: entered allmulticast mode [ 387.774283][T15369] bridge_slave_0: entered promiscuous mode [ 387.822949][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.833821][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.842106][T15369] bridge_slave_1: entered allmulticast mode [ 387.850234][T15369] bridge_slave_1: entered promiscuous mode [ 388.006750][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.071768][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.088388][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.095993][T15381] bridge_slave_0: entered allmulticast mode [ 388.119245][T15381] bridge_slave_0: entered promiscuous mode [ 388.165740][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 388.174880][T15431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2689'. [ 388.196906][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.248522][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.255743][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.277657][T15381] bridge_slave_1: entered allmulticast mode [ 388.303157][T15381] bridge_slave_1: entered promiscuous mode [ 388.343922][T15369] team0: Port device team_slave_0 added [ 388.356160][T15433] netlink: 'syz.0.2690': attribute type 1 has an invalid length. [ 388.372465][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.375368][T15369] team0: Port device team_slave_1 added [ 388.396233][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.405363][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.417624][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.425997][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.474621][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 388.485304][T15440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2691'. [ 388.508452][ T5841] Bluetooth: hci3: command tx timeout [ 388.537544][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.566893][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.580818][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.587794][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.614002][ T5841] Bluetooth: hci0: command tx timeout [ 388.622288][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.635136][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.645550][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.673430][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.747406][T15446] dvmrp1: entered allmulticast mode [ 388.780176][T15381] team0: Port device team_slave_0 added [ 388.790674][T15381] team0: Port device team_slave_1 added [ 388.801556][ T6483] bond1: left allmulticast mode [ 388.806447][ T6483] bond1: left promiscuous mode [ 388.823171][ T6483] bridge0: port 1(bond1) entered disabled state [ 389.068626][ T5841] Bluetooth: hci4: command tx timeout [ 389.082682][ T6483] team0: Port device geneve0 removed [ 389.573087][ T6483] . (unregistering): (slave wlan1): Releasing backup interface [ 389.582024][ T6483] . (unregistering): Released all slaves [ 389.703386][ T6483] bond0 (unregistering): (slave veth3): Releasing active interface [ 389.713335][ T6483] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 389.724762][ T6483] bond0 (unregistering): Released all slaves [ 389.815263][ T6483] bond1 (unregistering): Released all slaves [ 389.911618][ T6483] bond2 (unregistering): Released all slaves [ 390.005434][ T6483] bond3 (unregistering): (slave veth7): Releasing active interface [ 390.016518][ T6483] bond3 (unregistering): Released all slaves [ 390.110227][ T6483] bond4 (unregistering): Released all slaves [ 390.195002][ T6483] bond5 (unregistering): Released all slaves [ 390.281434][ T6483] bond6 (unregistering): (slave veth11): Releasing active interface [ 390.292728][ T6483] bond6 (unregistering): Released all slaves [ 390.396651][ T6483] erspan0 (unregistering): left promiscuous mode [ 390.417981][ T6483] gretap0 (unregistering): left promiscuous mode [ 390.444401][ T6483] bond5 (unregistering): (slave gretap1): Releasing active interface [ 390.485245][ T6483] dvmrp0 (unregistering): left allmulticast mode [ 390.527024][ T5841] Bluetooth: hci2: command tx timeout [ 390.588488][ T5841] Bluetooth: hci3: command tx timeout [ 390.668567][ T5841] Bluetooth: hci0: command tx timeout [ 391.098406][ T6483] bond0 (unregistering): Released all slaves [ 391.148338][ T5841] Bluetooth: hci4: command 0x040f tx timeout [ 391.213124][ T6483] bond1 (unregistering): Released all slaves [ 391.301832][ T6483] bond2 (unregistering): Released all slaves [ 391.397838][ T6483] bond3 (unregistering): Released all slaves [ 391.414645][ T6483] bond4 (unregistering): Released all slaves [ 391.509620][ T6483] bond5 (unregistering): Released all slaves [ 391.523436][ T6483] bond6 (unregistering): Released all slaves [ 391.536589][ T6483] bond7 (unregistering): Released all slaves [ 391.654346][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.663514][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.692251][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.715365][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.726778][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.758593][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.846295][T15435] C speed is unknown, defaulting to 1000 [ 391.884521][ T6483] : left promiscuous mode [ 391.953563][T15369] hsr_slave_0: entered promiscuous mode [ 391.970902][T15369] hsr_slave_1: entered promiscuous mode [ 391.977212][T15369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.996246][T15369] Cannot create hsr debugfs directory [ 392.055581][T15457] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 392.073729][T15457] netlink: 'syz.0.2695': attribute type 2 has an invalid length. [ 392.076726][T15343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.099472][ T6483] tipc: Disabling bearer [ 392.104743][ T6483] tipc: Left network mode [ 392.223537][T15343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.263203][T15343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.307124][T15435] gretap0 speed is unknown, defaulting to 1000 [ 392.314041][T15381] hsr_slave_0: entered promiscuous mode [ 392.322398][T15381] hsr_slave_1: entered promiscuous mode [ 392.329003][T15381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.336587][T15381] Cannot create hsr debugfs directory [ 392.347714][T15343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.595859][ T5836] Bluetooth: hci2: command tx timeout [ 392.603789][T15472] openvswitch: netlink: Unknown key attributes 2 [ 392.670569][ T5836] Bluetooth: hci3: command tx timeout [ 392.957475][T15477] IPv6: Can't replace route, no match found [ 393.145275][T15485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2701'. [ 393.174876][T15485] IPVS: Unknown mcast interface: vcan0 [ 393.228676][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 393.237234][T15488] netlink: 'syz.0.2702': attribute type 1 has an invalid length. [ 393.291209][T15343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.413200][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.455310][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.462520][ T8753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.475118][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.482293][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.571853][T15435] chnl_net:caif_netlink_parms(): no params data found [ 394.111062][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 394.120527][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'. [ 394.403233][T15369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.584761][ T6483] hsr_slave_0: left promiscuous mode [ 394.606008][ T6483] hsr_slave_1: left promiscuous mode [ 394.673909][ T5836] Bluetooth: hci2: command tx timeout [ 395.308141][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 395.390342][ T6483] C (unregistering): left allmulticast mode [ 396.073784][T15435] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.081157][T15435] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.092306][T15435] bridge_slave_0: entered allmulticast mode [ 396.100790][T15435] bridge_slave_0: entered promiscuous mode [ 396.144472][T15369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 396.168059][T15435] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.175290][T15435] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.193788][T15435] bridge_slave_1: entered allmulticast mode [ 396.202834][T15435] bridge_slave_1: entered promiscuous mode [ 396.226014][T15369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 396.242529][T15369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 396.377940][T15435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.396637][T15435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.506277][T15435] team0: Port device team_slave_0 added [ 396.533618][T15435] team0: Port device team_slave_1 added [ 396.621649][T15435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.628870][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.655318][T15435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.691552][T15435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.700956][T15435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.728331][T15435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.754900][ T5836] Bluetooth: hci2: command tx timeout [ 396.784883][T15343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.899408][T15435] hsr_slave_0: entered promiscuous mode [ 396.905826][T15435] hsr_slave_1: entered promiscuous mode [ 396.913382][T15435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.921367][T15435] Cannot create hsr debugfs directory [ 397.019048][T15381] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.025587][ T6483] IPVS: stop unused estimator thread 0... [ 397.036331][ T6483] IPVS: stop unused estimator thread 0... [ 397.072937][T15381] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.092317][T15381] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.117432][T15381] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.270835][T15435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.293945][T15343] veth0_vlan: entered promiscuous mode [ 397.317086][T15343] veth1_vlan: entered promiscuous mode [ 397.359255][T15435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.382153][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.431322][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.466029][T15435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.491594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.498782][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.516068][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.523189][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.565933][T15435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.600607][T15343] veth0_macvtap: entered promiscuous mode [ 397.625365][T15343] veth1_macvtap: entered promiscuous mode [ 397.646729][T15381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.677203][T15381] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.712606][ T6483] bridge_slave_1: left allmulticast mode [ 397.718681][ T6483] bridge_slave_1: left promiscuous mode [ 397.724459][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.744328][ T6483] bridge_slave_0: left allmulticast mode [ 397.755302][ T6483] bridge_slave_0: left promiscuous mode [ 397.761358][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.096535][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.107607][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.118698][ T6483] bond0 (unregistering): Released all slaves [ 398.136438][T15343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.165919][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.173146][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.190664][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.197855][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.227086][T15343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.391706][T15343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.412687][T15343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.433786][T15343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.443363][T15343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.591967][T15555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2714'. [ 398.610943][T15435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.627024][T15435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.652812][T15435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.709772][T15435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.766161][T15559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2715'. [ 398.778975][T15559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2715'. [ 398.885984][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.079005][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.086878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.286662][ T6483] hsr_slave_0: left promiscuous mode [ 399.306699][ T6483] hsr_slave_1: left promiscuous mode [ 399.315196][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.322906][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.334442][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.344493][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.367460][ T6483] veth1_macvtap: left promiscuous mode [ 399.373373][ T6483] veth0_macvtap: left promiscuous mode [ 399.379351][ T6483] veth1_vlan: left promiscuous mode [ 399.384804][ T6483] veth0_vlan: left promiscuous mode [ 399.774825][ T6483] team0 (unregistering): Port device team_slave_1 removed [ 399.810240][ T6483] team0 (unregistering): Port device team_slave_0 removed [ 400.173872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.202981][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.306696][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.342930][T15578] netlink: 'syz.0.2718': attribute type 1 has an invalid length. [ 400.464364][T15369] veth0_vlan: entered promiscuous mode [ 400.486507][T15435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.530077][T15369] veth1_vlan: entered promiscuous mode [ 400.555949][T15435] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.597920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.605119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.620942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.628113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.729748][T15369] veth0_macvtap: entered promiscuous mode [ 400.772552][T15369] veth1_macvtap: entered promiscuous mode [ 400.898981][ T6483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.947045][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.031736][ T6483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.055533][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.180743][ T6483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.246056][T15369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.269006][T15369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.277831][T15369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.303198][T15369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.443355][ T6483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.571403][T15381] veth0_vlan: entered promiscuous mode [ 401.592679][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.602691][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.611142][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.624595][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.637949][T15381] veth1_vlan: entered promiscuous mode [ 401.645636][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.653594][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 401.701787][T15435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.767764][T15603] C speed is unknown, defaulting to 1000 [ 401.778303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.786147][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.915737][T15381] veth0_macvtap: entered promiscuous mode [ 401.945940][T15610] gre3: entered promiscuous mode [ 401.961764][T15610] gre3: entered allmulticast mode [ 402.001162][T15381] veth1_macvtap: entered promiscuous mode [ 402.041658][ T6508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.067979][ T6508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.073065][T15435] veth0_vlan: entered promiscuous mode [ 402.099206][ T6483] bridge_slave_1: left allmulticast mode [ 402.104885][ T6483] bridge_slave_1: left promiscuous mode [ 402.128999][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.142920][ T6483] bridge_slave_0: left allmulticast mode [ 402.152707][ T6483] bridge_slave_0: left promiscuous mode [ 402.159702][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.303380][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 402.313210][T15616] netlink: 'syz.0.2724': attribute type 5 has an invalid length. [ 402.321001][T15616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2724'. [ 402.535578][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.548182][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.558464][ T6483] bond0 (unregistering): Released all slaves [ 402.582501][T15603] gretap0 speed is unknown, defaulting to 1000 [ 402.593984][T15616] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 402.628104][T15616] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 402.637368][T15616] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 402.653124][T15616] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 402.662237][T15616] geneve2: entered promiscuous mode [ 402.667580][T15616] geneve2: entered allmulticast mode [ 402.702645][T15381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.740949][T15435] veth1_vlan: entered promiscuous mode [ 402.833901][ T8751] wlan1: Trigger new scan to find an IBSS to join [ 402.860720][ T8751] ------------[ cut here ]------------ [ 402.868987][T15381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.876373][ T8751] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.895209][ T8751] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 402.921369][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: kworker/u8:24 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 402.921398][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.921412][ T8751] Workqueue: events_unbound cfg80211_wiphy_work [ 402.921448][ T8751] Call Trace: [ 402.921461][ T8751] [ 402.921470][ T8751] dump_stack_lvl+0x189/0x250 [ 402.921514][ T8751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.921545][ T8751] ? __pfx__printk+0x10/0x10 [ 402.921582][ T8751] ubsan_epilogue+0xa/0x40 [ 402.921604][ T8751] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 402.921644][ T8751] ieee80211_request_ibss_scan+0x600/0x8b0 [ 402.921691][ T8751] ieee80211_ibss_work+0xde7/0x1060 [ 402.921730][ T8751] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 402.921773][ T8751] ? ieee80211_iface_work+0xf39/0xfe0 [ 402.921806][ T8751] ? rcu_is_watching+0x15/0xb0 [ 402.921843][ T8751] cfg80211_wiphy_work+0x2dc/0x460 [ 402.921866][ T8751] ? process_scheduled_works+0x9ef/0x17b0 [ 402.921899][ T8751] process_scheduled_works+0xae1/0x17b0 [ 402.921962][ T8751] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.922006][ T8751] worker_thread+0x8a0/0xda0 [ 402.922046][ T8751] kthread+0x70e/0x8a0 [ 402.922068][ T8751] ? __pfx_worker_thread+0x10/0x10 [ 402.922093][ T8751] ? __pfx_kthread+0x10/0x10 [ 402.922113][ T8751] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.922137][ T8751] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.922159][ T8751] ? __pfx_kthread+0x10/0x10 [ 402.922178][ T8751] ret_from_fork+0x3f9/0x770 [ 402.922204][ T8751] ? __pfx_ret_from_fork+0x10/0x10 [ 402.922238][ T8751] ? __switch_to_asm+0x39/0x70 [ 402.922257][ T8751] ? __switch_to_asm+0x33/0x70 [ 402.922274][ T8751] ? __pfx_kthread+0x10/0x10 [ 402.922293][ T8751] ret_from_fork_asm+0x1a/0x30 [ 402.922322][ T8751] [ 402.922330][ T8751] ---[ end trace ]--- [ 403.150240][ T8751] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 403.157495][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: kworker/u8:24 Not tainted 6.16.0-rc2-syzkaller-00161-g714db279942b #0 PREEMPT(full) [ 403.169760][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.179829][ T8751] Workqueue: events_unbound cfg80211_wiphy_work [ 403.186100][ T8751] Call Trace: [ 403.189391][ T8751] [ 403.192331][ T8751] dump_stack_lvl+0x99/0x250 [ 403.196943][ T8751] ? __asan_memcpy+0x40/0x70 [ 403.201552][ T8751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.206766][ T8751] ? __pfx__printk+0x10/0x10 [ 403.211380][ T8751] panic+0x2db/0x790 [ 403.215378][ T8751] ? __pfx_panic+0x10/0x10 [ 403.219809][ T8751] ? _printk+0xcf/0x120 [ 403.223984][ T8751] ? __pfx__printk+0x10/0x10 [ 403.228598][ T8751] check_panic_on_warn+0x89/0xb0 [ 403.233558][ T8751] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 403.239308][ T8751] ieee80211_request_ibss_scan+0x600/0x8b0 [ 403.245144][ T8751] ieee80211_ibss_work+0xde7/0x1060 [ 403.250359][ T8751] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 403.256018][ T8751] ? ieee80211_iface_work+0xf39/0xfe0 [ 403.261411][ T8751] ? rcu_is_watching+0x15/0xb0 [ 403.266198][ T8751] cfg80211_wiphy_work+0x2dc/0x460 [ 403.271362][ T8751] ? process_scheduled_works+0x9ef/0x17b0 [ 403.277125][ T8751] process_scheduled_works+0xae1/0x17b0 [ 403.282822][ T8751] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.288844][ T8751] worker_thread+0x8a0/0xda0 [ 403.293471][ T8751] kthread+0x70e/0x8a0 [ 403.297850][ T8751] ? __pfx_worker_thread+0x10/0x10 [ 403.302992][ T8751] ? __pfx_kthread+0x10/0x10 [ 403.307592][ T8751] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.312803][ T8751] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.318103][ T8751] ? __pfx_kthread+0x10/0x10 [ 403.322702][ T8751] ret_from_fork+0x3f9/0x770 [ 403.327304][ T8751] ? __pfx_ret_from_fork+0x10/0x10 [ 403.332516][ T8751] ? __switch_to_asm+0x39/0x70 [ 403.337288][ T8751] ? __switch_to_asm+0x33/0x70 [ 403.342062][ T8751] ? __pfx_kthread+0x10/0x10 [ 403.346661][ T8751] ret_from_fork_asm+0x1a/0x30 [ 403.351461][ T8751] [ 403.354815][ T8751] Kernel Offset: disabled [ 403.359210][ T8751] Rebooting in 86400 seconds..