last executing test programs: 1m32.077952727s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 1m20.834830583s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d4045839", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 1m19.054530814s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 1m9.795032173s ago: executing program 3 (id=1535): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x12, r4, 0x75350000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x1c00000, 0x18}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x8, 0x5, 0xffff, 0x1000, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000180)='GPL\x00', 0x5, 0xfb, &(0x7f00000001c0)=""/251, 0x40f00, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0xffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r5, r6, r7, 0xffffffffffffffff, r8, r9, r10, r11], 0x0, 0x10, 0x8, @void, @value}, 0x94) 1m9.643366909s ago: executing program 3 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m5.333453376s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 1m3.610876075s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 53.721435641s ago: executing program 3 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.098202592s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 47.587558402s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 37.981616097s ago: executing program 3 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.498636651s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 26.756753103s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 21.082018861s ago: executing program 3 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.730539407s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 9.262922149s ago: executing program 1 (id=851): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x800) 4.995581319s ago: executing program 3 (id=1536): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.972705306s ago: executing program 2 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x9, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@remote, @remote, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x5, 0x18}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49b9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x6, 0x1}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x30, &(0x7f0000000480)=""/48, 0x41000, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x10, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r7], &(0x7f00000005c0)=[{0x100005, 0x80001, 0x1, 0x5}, {0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x4, 0xc}], 0x10, 0x407ff, @void, @value}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = socket$inet6(0xa, 0x3, 0x3c) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) listen(r10, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x0, @mcast1, 0x7ff}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f0000000040)="05437c98b91b1455046f57b5fc9138a114bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e8463b47c77869819496de358d8105647e4e4712a2a6aa9c0e6d5685fb373dc1756b90de601a5ee2373b21d9f30410222f52d51a32f277d639a812209fdd50dcfa9d63173afa7062a3f1d8a524017581b58baa528120eb6d725e82ea2d2cbe162db620e4e6e3b7fa757911d3cb4359bbfab6b4480357022", 0xab}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x2c, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xfff3, 0xe}, {0x0, 0x3}}, [{0x8, 0xb, 0x3}]}, 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r12, 0x4, 0x2, 0x6, 0x192, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x5, 0xffff15a0}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 2.273169791s ago: executing program 0 (id=1841): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x3104}], 0x1, &(0x7f0000000100)={r2, r3+60000000}, &(0x7f0000000180)={[0x3]}, 0x8) ppoll(&(0x7f0000000200)=[{r1, 0x825f}, {r1, 0x8005}], 0x2, 0x0, 0x0, 0x0) 2.213158317s ago: executing program 4 (id=1842): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x100}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r1, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @loopback}}, [0xfffffffffffffff9, 0x200, 0x7fff, 0x7d9, 0x7, 0xfffffffffffffffc, 0x400, 0xfffffffffffffff9, 0x2, 0x80000001, 0x8000000000000000, 0x3ff, 0x1000, 0x4, 0x5]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={r2, 0x1ff}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={r1, 0x2, 0x3d4e, 0x9, 0x7, 0xfe000000}, 0x14) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0x7d, &(0x7f00000004c0)=""/125, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x6, 0x3, 0x9}, 0x10, 0x1d71a, 0xffffffffffffffff, 0x9, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x4, 0x1, 0xb, 0x7}, {0x0, 0x4, 0x5, 0xb}, {0x1, 0x5, 0x2, 0x2}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x5, 0xb, 0x6}, {0x2, 0x3, 0x3, 0xa}, {0x2, 0x2, 0x1}, {0x4, 0x2, 0x3, 0x7}, {0x5, 0x2}], 0x10, 0x4f12, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000380), &(0x7f0000000780)=r4}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "f7a4adad31c26b044cbe0837f2f551b5c88a1fe43e9c6aa2da6e40a660c6e35ab22817c281622862dfa8b1d78d5d7ee25feedf1d8a7571dedbf49361140f6c7f1c33d9aca79e711dbe108e67598cc9de67b8ff4068d33424dc2304b77bedd120df0caa4006099785cafc4eef30f660f6d09e28cc4ce127842445450e07de340dd1208641bf1144965a03bd213ce97c17c560bf0d466dc7ddb17743c3e484c092b0282d4f7a7136ca6f27c445e3c9f70641bcc759fcbe709c4e01508725e05832714c0c5f66847d0cbceeb58cb4ac7ef4af1c946934eab4805e6c77187828c6ed2637db55e6d3c588fe3d85f6d4fa6b05e687bc18dc4e185d8e7c32c937a2c124", "691c8f53cc4a6b162f20498da9c097b2c439e7eb8eeffaa997ea9a425335ff3551c5ad2a4fbcd25edda2e4eb6bdfffe3dadb0ddae621df1720fba0610c86bad771597f4d1372863d741f64350e86b51fa4b31bf75c9cc8c44fa7c607aa3c80505d8f4a834471de16135291a7d2bdf0dc0db8d3df1d06abf8a98884d69cdca519ab420697654d6f055325dbef1a6ffc3d037c8d560ce1eff3718014c0b194ff172481e74490f3933d1d882fe23fbae36eb988720bd2b446d99562589cb69d57531bd7fc7febb8fa409984839265daf8a9aab3eb9687236360cf2599f316ce11aade5d406f3f8ffb023df9a42314c8d7217b16440acd46c33a1a55e69a2811d7d6d8513769658eed94cb3e051085f0dd2c80b701ce64af76945c6bb57a684aafa562f8ea3dac654435bd1131c9565c571fd4956b13787110bc0bcabe75d11cc82170e77ebc0bc9bee3eaa5fa4036966a8e9e5e5c836010448a2d8f13292db3336251661e1f441aa4ffb644f97ccf345b648ff9faec5eb3b28477da35ec59fad4b25e70e136bec6b88285060766368bbbc3a320b3e47359e1d11962915b0b4e49a9e4a2eeaa141d6f574dfe4af3286994407ff7b60b21b3f74bb80b594fc24c652374c21ff8d5cf02350a8cc34e6c55c623a0fcfe81a430fd084778b9906486603a68bcf882f18be1849cb8a2b1b8778e1ff04b241e20b6d2bee7c2b937d33df6279bed4d0e79f40b081ee44deddce5d830d396c1d3b866df75baab963881d2fc3c9205350d8b5264024908eaaa2985de18da4dac6b9b18dd5daee5d81ef08d37ac05a75af412b5f607910635c45b58d8e0febeffdc4a87fc871a8c671e33aa8cd4aa2eb228cecb2774aa771dbde9c465f89c3852ac0f3ec43ce951864cb2ce6aad2a3d2349a830128f265cc5a1cb59deae8d6c4ac8579eddd87e266713edf1622c1d236ec757f99755f17e98a0e1c06ded5cff994a47dde1bffe1405f52fa8baf1d0c97bfa7dffca0b9d4ab22c0db22872dc48a13cfe80c7abbe8e62602b126e7166a69464ce1436502e2367d30061c364b7f6130563e17e5205b1795446b78eb2a0d790b511b4f4f04716a5f8f1b6abafaf0ef820c2c0cea06b7680038a3339f408d016ad8cb2a779fa3d3efc127a7ba7f07e9cbc31eeb23428e2fb00783b2fbd761bbcecfa961a1b565308ede7c8aeb3c349b2273ad5f0115d78a05dd5332fb1313528656b381cc7c5209cec0f10d60d8bacfd16d7445f83e060f18507996ac8f08776fe115374824e1a1adda809ee3e4295519bbbb9ed1d59e4d197bd937b4e950c2856911581c77e78669eaa5780018b79a7ced79c83c5e504a8c5541523be547a1fdd65ecdc9703f791d4298a0c4aebcab6d9ad2f8341e5d3370b27e16487e3bd7e6002b7034db2c5f599ebe7d512911a8b07beb0e550b3c07f7221490aa806a5a02822d338cc5050a4a1bddaf80eaa56e3b26809ffadfba166674456d92071cf06cdefc5f6d92c2ec5ec585057d9f00651bade8abbeff2b3cea28273b5e464e9008d4813734fedcb93b477075a20099b39dda3cc5502dd0f8adc2addef4aa011572c1c46de0ff5aa657d43ae640348f309e1cc4badd6735c581ebe0c4d6912c0b988683c47a88cca0a1a0be5b244159df21116efb1226826390a6be0b6f3e69c8a6351b1c17f238ea82df09673790d95e973dd8e9d9c53e5979949362c2a2f3da2759aff112e3c02c1928aba0dc0f7a6272e1c2928c6e88a4343a3933737870e145f0abfbea99dab7402650590f2f32d85d5fedf8f81731ad8e38a4e14f23600e1e3005505d6ce4b6161338f3766a8a0efe805039236e05645d34978ccc8d8265161b132159df8adcd731a6dc9b668120b054eb771b4688f8ff1ffc7c1bd7f846b20ce14dbe9135986ce0446d76cda77ee636ec6667900661fd96b06bafbf79a504b9197bc9d1983087c93d68c9f5899311aecebe6498575aef0b07ca26cd35ea0959473c5a714b1586b993ab43de7ae7deb771b71708a88cb83563aa3285fd289eda8310a0776711321d31994793d98c3c43942c21ff7c4ec7e601f47a5ae36fb54abfa5563bcf0d2a7aa2043b7d62c537abaf982f28e2d88c82bf482fe476da4398290ac76e00368ec4c91d279ccd8a9cf18f7dd188e6f423296e05426ff1b8317eb80a60ef9dab8823b0a4f9f6cddcfb97f841aeada7710b577574e8be1c77e54d4e19b962e712b6f5e56c3b7938ffffe903574fa702fb9f5557ff4ac73e7730ebc5104237a5e287bd8d4d953d80a8b29d0b4648ea992cca8170eefde117b9f1137a693b6c9a408ddb464156452db4cb9559045b83e7feb4dd26df7fe6e5f6720dfe2c413784b6207410856937324187e204f62b75ae254dbde4e1e1827e73cc5feeb6a5e3c1e3c428ab05aacc499af2cb9fe33e716004d3efec264358a94c5e00b1751b8ca5d42302dc4229098b817c79f59d0c8bf140f91b3f889567890b5bcb602a20ebd994893aedd38989b397fba2833b3149d1a0ed3cd0385b816573cfb81da7601a6379c32c80a5961bce88f61a5881cfaf4917402b967357edd0e5369b891b357ec9c099b6f8417453108f69a7efca7842172b4ce03968d4bc6a8ee0abe4fdf12a6e5321efbe671e7d9f9bc71ed4bd3783d5341b2c9edc71054b9ed8c7fd58b33da0af400384f75977e0163a515cadd740d0f785256812ded8ba33cfeec6a2d3d650cf305ba9b2360117a64b6d751972da2073c61cf02c6d518de44e792fb397611e1b05822b5bbf890164bab8c64646ac55bf8a84944ab524614e440c4769b4c6b1f7de0148b62bdcebcafb1cbf161d62d784df2acd030f6ee384eac3b6401e47a1880a8cb67357104f57c2dd827722d96881c9ecd5106986a252727ec323b2985b03be1ed617dc251da1c763d44f96ec592b6fd5210af0897b73c3a5bfbecd8ebc6381e22fd1f0cab31880d633a8342847464358ff2835eb3d542782b2a738888895e0160d5105a246f7707029b676d82e817c9fe4f0c71035d11a7f1945acd52f6d67dbc188d34ed23736d119ac066aaebc06b5886da575efc563786b1610ce6387ed6a91939c07d8aa1cd3360659e6c1e014984af48974784882008dc74118bca821536a9569ee0a308159bf789e208de8ac8671194cd73302783511f1b2e0fcd39ad0c5ea9fe2d92cd39d1092edacc566c4f4e0b89d11c36dc8e949004da2190808efb0363a31a07b76efb9e1c5cc7cef45ef7e9805c5940bb7a184286ae4bd2caa64f27fdca311952e026201a522ad3ef3aa45197075716ba278e8efcc3cb07c2e3c174a048c0af7edc942cc4acedfa58eb16ab53979c60ee3f0f054940dbcc081213c88b1f9832906aacde3f10a2965c2c04e58e26b1606bf9e1789c0da51e1ae0d357b1c95992bfb7300d8f4e5ec7f88fe4f2966a42418d2bffc4f1ac02b3862ff06fcc0b605597d5342e36827e9a06816c3665ff686b95601c12730b849f3cfd2ff697219103f5766cdb55b264cc7d4c03fdb9aa57ce3087ea262a64edfddec317dda912ced7d53d4d2f93283d87208f2e394c34a16a90b9a4fe4794e6c05c27eb716b9a4b81ecb4df2bbda7e25ef24f91c1d87b815fee4a6935142d3e78271714b2e11072a5eb47df7dad4b0a447b13ebfb7a43df165a1657c16d8571a7b403c5070e66c406c88518ef652a3c18fa6fb4f16b8f800e5bba4195113ec56da223534c1d578d198ec6668232e0c8f76bd5631961f644bf5a7d9ce708c4c1de784a8d81a8e000ced6a83ddae762a05b1b6cf08360488096cd1bb31ce67a1596e51a8c03fe429ccb4ef0668206752166e8152273ce80e1a2cec200a8b6be0cdd9c67577d91896fe07297fc8380f5f39c683b4d3c679b7fa2abe70ac6a8a8a83b493a649031a7ceca3b4221aa8cd44fad683749f134080f250e5cefaf3b7960bb5ec9a968fac9bf4337c41a099db3b3e80ae1d73308b31fd4a1f491543d4872657428f8e75fb91f8a748a41f3181c0bc8418f29a88055409a283d67faabbd1943f1877294f9a7d6ac502b20869b3adcddf7020f4fd82b9ca1955c151dca87babda7f67217958596387c57585df1d90db9cc9a0dd3a976984893a609ec317eb3939ebafd60e4931096a0809db7393298b0181c9b2589fff6bbf56437399eb26a633fdde190cb20f8ff73624877c8d4756d82fcc6df9b9ba38a0a5ef5b0c3e2422a79fcdeae9367b3710c7aa13fb959556909a14de6a343e9dad95310999125140e7c3b93fe05c12e3f5adbf59a14076fa1ca2e2cfbfb74e85bf63a0612578e88d6dd59a616fd945da6fa438a2531ba14673dcb000e67633454a353d68d142253f0e539d86e5599b6144a0ed0e606a215efb17726b292b78750115fb16b57051aea8b586cd2bb4e2c16d8766dfb22e84439d320c1bec99a116766f42a671a82fa3905e3737bea24ac89557588d2c5ade5ad0c38b74b9317e58582e58c6c8a2f5135d1e04cefe31c1b84907223b7383cc22ea789b577a4c3a96aadf8420a3dabda4cb4de23aa8b4e06bf410d549c63daca65d3f3cf4d1f4c2f53b9b4f75ab68d411891d649e33728b4315071e128908cd9aeffdc153fa4d7260eeea962a9047a37cdb39723f5c6a411c083172ef7fc3280307b6cbff3478658fc5b0df8db152a9e55bb57312a3d9740374c5dbd0d8879f571ec00cc7597de372b69faeb40e33e97b1cf95489197d644a7eb9fd7578308bebb2b33763f0ad53c62fc55d5788eafdd5e29150858596182c392330a3e3fa7b38221d54aa1daca733b72c725a97583a3a3027d89bb8788dd492b80fec71bcd6a051bdc177c2e09f84e7de7c9c61b371259d505201705b3a15a10c3d9a48996f892c4fa88cc4524b743c2f86dce74527fb4b51a1eae1f7a6ffa95cd7ede441989d14ec32efcd528ef9b1c572b1f231e97725b450a64d3b684abab1211e933c4470db29ea9f359cf7147d75a5e13a743207768fd3df9d2b46ec78e8c609cdb9c2b50ea4fbcadf5bc600625ba50cca96695bf0d5dfd8a133f86cb5ea385c1af8a9720528237ccc5e0224b95420d81efcba36e6dcaae60dc4a5043a60a39a49a38a7a1531c7becd581b11efafb38697c97163af7be317c013815963ef1efea7ffe50a88d551103cd41bc79fe994561cdc87d91dbc8ec483637706e7efcec57648aebe16e038cf01fbcdc809c020e12e96ebd503ef34b6d16e41e425c4eced0693026c4d1fcb8b2cf8c03b3b9c12e30aaa38184eb31cc431b713b90ba2ff390b6b98b53d577d8e74831e1d5efbf3599603f538eb5c13f192082b14411a429f0cc09cba4aa13919e7cb83c0691377e9c1884fa18edff8e8d10745401bafa11974f6971c8001e75e2bc7c1e1bbfd1979d47b6e8e02f0ef947fbfb"}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000001840)={r7}) syz_genetlink_get_family_id$l2tp(&(0x7f0000002840), 0xffffffffffffffff) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000002880)={0x3, 'ip6gre0\x00', {0xffff}, 0xf}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), r9) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f00000029c0)={0x11c, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x975, 0x4, 0x27c5, 0x7, 0x1, 0xffff, 0x4, 0x4]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x35, 0x7, 0x5a, 0x2, 0x30, 0x60, 0x3, 0x12, 0x0, 0x6c, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x5, 0x3, 0x4, 0xe, 0x7, 0x2, 0x2571]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x779, 0x5af, 0x83, 0x4, 0x5, 0x0, 0x19]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8, 0xf, 0x0, 0x1e67, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc, 0x2, 0x7, 0x9, 0x6, 0x3ff, 0x3e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x5, 0x8, 0x5, 0xff, 0x2d5, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4080840}, 0x4094) r12 = accept(r0, 0x0, &(0x7f0000002b80)) ioctl$SIOCX25SFACILITIES(r12, 0x89e3, &(0x7f0000002bc0)={0x26, 0x6, 0x7, 0xc, 0x3, 0x81}) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r12, 0x84, 0x65, &(0x7f0000002c00)=[@in6={0xa, 0x4e20, 0xfffffff8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x40, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @multicast1}], 0x5c) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002c80), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003080)={r13, 0x0, 0x8a, 0xc7, &(0x7f0000002cc0)="1c35284266dc6e869cd6d1b4e4e78028fd3110c7647ba1f6c405a61a99e6e70d81ebb627ba78cd0041cb29f031263f509d3c7c542aaa90c7b42d191ee7beb158dcb7b4581adba3546b26666a683589db2586496f9480c017f4c0b3c2981c274a3d08a3c11e09d7bf8fa32590278f37dfd921683e1f4dfb0ab5536bc89bd5911f687a7b8ab2fc0b214368", &(0x7f0000002d80)=""/199, 0x8, 0x0, 0xd9, 0xc5, &(0x7f0000002e80)="9dc9d4d2c237b6cc6348741c45f48a5d4bcb16659550a22438c2e2595bbc526c2e64f5e4dc80438aa2dba050cd54307ddda6e81addf1d962fb04ac15692385d98315ffcfaaa01e076ecdc060f0505c2da111ca8e1a9466e2730768344dc9a0785aad1b0af2b32834c4ce37444fae73e244aabe89cb898bb14ea3d57600ec6480f8618b5bdaf20371e9774ffd0cdbe4ea43b773e3f7db71e073bea772c6e3d6a36d7da420fee40847f3abb94133e4761766924400794fee322733885541ee1dfac74cb0d99660cce829a8669f61db0996cfa9a33d413252f3df", &(0x7f0000002f80)="5cd5e8d06b2ea1adc478d659e20f3dee6691afe111101184e20f81a0555f9d1fdb4306abef60d9fafc68a16146943cbbcef5ddb6680d89557c6b025b42a5a1dab12e0956977b84c7e7bcd1b9dab9d7a9e4c4b26d861772931d708cc0323c3794af11ab5c99e1446627d0656baf6ff163a57689f9be536df0076d25e77e5f686fb310a829083c15bde1ecafdc1db554c0874938e053bb27e5142804c279e71e92c8f815cb282bea4ce532603a8d97ff006153c5c5eac51a4cbff91be3d9d621b2a1ba3f8092", 0x0, 0x0, 0xfb1}, 0x50) r14 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r14, 0x50009417, &(0x7f0000003140)={{r5}, 0x0, 0xc, @unused=[0x1ff, 0x6d1a3104, 0xe8, 0x1000], @subvolid=0x3}) 2.012077042s ago: executing program 0 (id=1843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x8, 0x43b, 0x1, @private1, @private2, 0x1, 0x8000, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4, 0x0, 0x15, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8088, 0x8, 0x5167, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=@deltfilter={0x8d0, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0xb}, {0xe, 0x1}, {0x2, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x898, 0x2, [@TCA_ROUTE4_ACT={0x428, 0x6, [@m_sample={0xf0, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9bc}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0xa9, 0x6, "c8cb72f2a2250b364480a8b443522c3482edc766f7d87053de88dd06f57bdff54b72961c4eef993d6e20bafd2a67dffe015e108d64f831a84874c656a0aee6cbf0d0f8ee3988e4723c9ff4a29a872bbc722b1068e576b37e804dada3c08ea18765ba0e3208b60ebd6da612f6c9c2c2c3f546d038912624912fcf39b29c11d87181504a85d1a5838ec43d567ff0ccfea20f0f259d73fc6481832c91a32459eace37097a06db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_connmark={0x1ec, 0x16, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0xfffffffe, 0x1, 0x4, 0x101}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x3, 0xffffff35, 0x7b97}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x1, 0x4, 0xfffffffb, 0x7fff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xbba, 0xffffffffffffffff, 0x4, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x8, 0xffffffff, 0x80000001}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x4, 0x2e, 0x8}, 0xff00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x401, 0x20000000, 0x3, 0x401}, 0x7ff}}]}, {0xf8, 0x6, "652b2b45e2542e6991ad67d311f71de417e7866d1a437f78462c4dfd6bce17f47b6d58466a151d045e0ebbc586a70cfca29f9d0e3dd45e3c32b6a67154b958a6b6a1083337815aba3ff66aec74e2f0cd8012c415328461874145b2f4ef63f87085b2b2ac154515b0f6b46e02dcc0bdb6a994dc8c37f5876883921b4fd0b56aff93c2821f2f288201b8f6e6ba47c5fd9653b660efd344db121424d655f78a99b889632cdbc98be10ba1dd390c78d730bac7f66d08d551547af8aa6f57d1cb95559ea6c3c2b620992ade508fb3e6d66c9d438361e3ece207e182b3ac37929ef2bbfa3d28cb8f12a4819457d9f4eadbc380c0e27ca8"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x148, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x10000000, 0x3, 0x2}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xe77, 0x6322ff4384107661, 0x1, 0xd}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x329, 0xc, 0x3, 0x66d}, 0x3, r8}}]}, {0xbc, 0x6, "d7cb14e036bbf2cd4807d82fd57d1fec3635e42fa6230fffce1a9d5b0a2437d0822b758cbbb23ac83ae427ff2c051523951ea27807e0ae462f5c19df0ab8bf584cd06ed777d024c7767584077b433ba59330228ab5965d44709305072e02c6c3bb3c5d48c03f9e54a62ea8f1619d6278514240a698a024311bd764ced92cf8d29f788a8fc51b4b049c5b0a1449f31ce5f4dceb1f05e024949c2bf387a8c950f8679c4b2b9e428e82ea1ab42ea1c029241c08ea2284876fe2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2789, 0x5, 0x429758a9, 0xb8, 0x5, {0xc4, 0x0, 0x4, 0x3, 0xbd0, 0x10000}, {0x5, 0x0, 0x8, 0x2, 0xffff, 0xffff}, 0x2, 0x401, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_ROUTE4_ACT={0x418, 0x6, [@m_ct={0x90, 0xe, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000000, 0x800, 0x6, 0x2, 0x1}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7ff}, @TCA_CT_MARK={0x8, 0x5, 0x37}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4104445fdccab9cbcdc08c0a72046fc3"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x7, 0x6, "ffbc86"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x12, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0xa354}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xa3, 0x6, {0x5, 'filter\x00', 0xe, 0x1000, "a2ad07b84a8791cc347800244d4b54a560d2715b92a67c2f5ae5bd55bfb6ee3bca561bb9668265c8a9d70edd5c94884195adf00a2e17bf1cdaaa135be12d4e192fddbbe5a54a223be6f6fedacc7cfceabc7a9bfc981222c0aac04a42d35a7f3bfba86228d5388ac584fe3071e873bf22296ceb56b103c99b1d"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xa9, 0x6, "c3d18f5e09d1cfba03f9a502a4696688cbf8c3b60fbbfd65b0efceeae4482691e9631d752b5a74de5b9b3357426e709e6892378c5056ccb65d3ef41fc72943d3728c9a3f3eb892e42566b1d1a4d7bbf791d023504dad1626d7f9b992a63d0c113b3cf4e841913d11768b4cdc83211a0dc1b73dba72fa316b0c43ea234cc05e1b98e798b482bd15afc7ed2c2c591fd2e7dc4cd54ed7d72fb1708f4f4dc2c8d4a10d0761a56e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1c8, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xc6, 0xfffff207, 0x7, 0xff, 0x4}, @rand_addr=0x64010100, @loopback, 0x100000100, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x4, 0x81, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x9, 0x7, 0x1, 0xfffffffa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x800, 0xffffffffeffffffa, 0x3, 0x3}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x590}, @broadcast, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1800, 0x8, 0x1, 0x1ff, 0x7}, @empty, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x4, 0x10000}, @empty, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x4, 0x9, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0xffffffffffffffff, 0x7, 0x81ea}, @multicast2, @rand_addr=0x64010101, 0xffffffff, 0x1}}]}, {0x35, 0x6, "da5f424341b16fa1cac79ef094d5485a274f5b5a0a3c2121311b2b644e81f823e9c2864e94d93e299e0dda9a25154f5531"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x60, 0xde}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x20040090}, 0x20000000) 1.943446371s ago: executing program 4 (id=1844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1252b415e4f9c8fa6acc60c585cb439a84648b4b0b82b1d5", "dea09ee7e84a19a512e6190f4ed29d7b8d98cd2da139c812fb04a7f2fa87287a"}}}}}}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x82, &(0x7f00000001c0)={r10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000540)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.900105877s ago: executing program 0 (id=1845): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0x2, 0x0, 0x45, @local, @mcast1, 0x20, 0x8000, 0x9, 0x1}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x7}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xffd9) 1.863077976s ago: executing program 4 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002"], 0x24}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x2000140d) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8, 0xfffffffc}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x40, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x78, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.763162545s ago: executing program 4 (id=1847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013d0000000000e2b597f500000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r4, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080004000200000008000500e0000002"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x10, 0x20, 0x3, 0x1, {{0x21, 0x4, 0x2, 0x9, 0x84, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x1b, 0x7f, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @loopback, @rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0x7f, [@multicast2, @multicast2]}, @cipso={0x86, 0x49, 0xfffffffffffffffc, [{0x1, 0x5, "49f3a0"}, {0x1, 0x2}, {0x5, 0x9, "c786e62cfa2dd7"}, {0x1, 0x5, "a96dee"}, {0x4, 0x8, "c1ce9e0b3bc7"}, {0x1, 0xd, "9ca142537d965a41a2d80f"}, {0x1, 0x9, "710796e2148890"}, {0x0, 0x10, "5d2939c92dcf13aa6c6685f19de1"}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000b00008cffffff1700000079a6ca7f6c55a97d2aa6f21c6314439875ea11f2bc3f233ab7ef959644ed3bd313b6aaf42cf1a61bc05e", @ANYRES32=r8, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000fcffffff0500"/28], 0x50) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r10, &(0x7f00000000c0), 0x0) accept4$unix(r9, 0x0, 0x0, 0x0) 1.759078853s ago: executing program 0 (id=1848): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x13c, r1, 0x802, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x11}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x600c000) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x13c, r1, 0x802, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x11}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x600c000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x44) 565.819207ms ago: executing program 4 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x38}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) 197.805173ms ago: executing program 0 (id=1850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r1, 0x917, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x400c5) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) close(r2) 39.631375ms ago: executing program 0 (id=1851): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000440)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x6000000, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000881}, 0x40010) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): mac addresses unique to avoid problems! [ 190.378422][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.394830][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.406392][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.429196][T10445] team0: Port device team_slave_0 added [ 190.442946][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.444611][ T6435] IPVS: stop unused estimator thread 0... [ 190.465452][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.479381][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.492145][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.502152][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.512988][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.523314][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.534003][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.545266][T10231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.558727][T10445] team0: Port device team_slave_1 added [ 190.568006][ T5243] Bluetooth: hci4: command tx timeout [ 190.576801][T10231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.588386][T10231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.597109][T10231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.606681][T10231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.660695][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.673328][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.708923][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.729431][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.736423][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.765959][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.818130][T10445] hsr_slave_0: entered promiscuous mode [ 190.824334][T10445] hsr_slave_1: entered promiscuous mode [ 190.833681][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.842592][T10445] Cannot create hsr debugfs directory [ 190.909649][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.034207][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.057910][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.114477][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.267355][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.279053][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.288353][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.300592][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.304122][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.322888][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.330827][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.378993][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.393902][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.456626][T10508] xt_l2tp: unknown flags: 18 [ 191.463838][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.586875][T10510] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 191.679113][T10298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.931740][ T6435] bridge_slave_1: left allmulticast mode [ 191.938645][ T6435] bridge_slave_1: left promiscuous mode [ 191.944565][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.999181][ T6435] bridge_slave_0: left allmulticast mode [ 192.004871][ T6435] bridge_slave_0: left promiscuous mode [ 192.027364][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.459342][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.470740][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.481842][ T6435] bond0 (unregistering): Released all slaves [ 192.649875][ T54] Bluetooth: hci4: command tx timeout [ 192.686881][T10504] chnl_net:caif_netlink_parms(): no params data found [ 192.884639][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.916439][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.946909][T10504] bridge_slave_0: entered allmulticast mode [ 192.954306][T10504] bridge_slave_0: entered promiscuous mode [ 192.979894][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.987029][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.026792][T10504] bridge_slave_1: entered allmulticast mode [ 193.043807][T10504] bridge_slave_1: entered promiscuous mode [ 193.058306][T10298] veth0_vlan: entered promiscuous mode [ 193.068742][T10445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.089911][T10445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.113072][ T6435] hsr_slave_0: left promiscuous mode [ 193.130353][ T6435] hsr_slave_1: left promiscuous mode [ 193.153372][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.177391][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.198772][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.207104][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.208995][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.225129][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.240984][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.252658][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.262313][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.270028][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.274673][ T6435] veth1_macvtap: left promiscuous mode [ 193.295085][ T6435] veth0_macvtap: left promiscuous mode [ 193.306907][ T6435] veth1_vlan: left promiscuous mode [ 193.312505][ T6435] veth0_vlan: left promiscuous mode [ 193.369519][ T5243] Bluetooth: hci0: command tx timeout [ 193.787558][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 193.831223][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 194.285704][T10445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.334265][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.357587][T10445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.388513][T10298] veth1_vlan: entered promiscuous mode [ 194.417018][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.447255][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 194.456309][T10539] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 194.573688][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581581][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.618850][T10504] team0: Port device team_slave_0 added [ 194.692470][T10298] veth0_macvtap: entered promiscuous mode [ 194.710476][T10504] team0: Port device team_slave_1 added [ 194.727563][ T5243] Bluetooth: hci4: command tx timeout [ 194.802695][T10298] veth1_macvtap: entered promiscuous mode [ 194.885231][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.907567][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.959563][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.002433][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.027849][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.049081][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.065949][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.080422][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.092543][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.104287][T10298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.113527][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.124341][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.151957][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.180822][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.198262][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.227443][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.247240][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.257117][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.279509][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.289958][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.301113][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.313570][T10298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.356765][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.367376][ T5243] Bluetooth: hci2: command tx timeout [ 195.428147][ T6435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.448400][ T5243] Bluetooth: hci0: command tx timeout [ 195.481172][T10298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.507476][T10298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.520681][T10298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.529960][T10298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.559065][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.600251][T10555] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1556'. [ 195.611541][T10555] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 195.670032][ T6435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.707960][T10504] hsr_slave_0: entered promiscuous mode [ 195.723032][T10504] hsr_slave_1: entered promiscuous mode [ 195.733290][T10504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.741354][T10504] Cannot create hsr debugfs directory [ 195.787263][ T6435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.818656][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.825773][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.886518][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.893715][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.966308][ T6435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.008873][T10557] infiniband syz1: set active [ 196.015419][T10557] infiniband syz1: added team_slave_0 [ 196.028235][T10536] chnl_net:caif_netlink_parms(): no params data found [ 196.059806][T10557] RDS/IB: syz1: added [ 196.064186][T10557] smc: adding ib device syz1 with port count 1 [ 196.072165][T10557] smc: ib device syz1 port 1 has pnetid [ 196.237431][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.248992][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.410881][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.434287][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.449420][ T6435] bridge_slave_1: left allmulticast mode [ 196.455149][ T6435] bridge_slave_1: left promiscuous mode [ 196.461571][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.471793][ T6435] bridge_slave_0: left allmulticast mode [ 196.478175][ T6435] bridge_slave_0: left promiscuous mode [ 196.484027][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.895110][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.906212][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.917319][ T6435] bond0 (unregistering): Released all slaves [ 196.942532][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.962991][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.977776][T10536] bridge_slave_0: entered allmulticast mode [ 197.012327][T10536] bridge_slave_0: entered promiscuous mode [ 197.028581][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.036777][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.045051][T10536] bridge_slave_1: entered allmulticast mode [ 197.052781][T10536] bridge_slave_1: entered promiscuous mode [ 197.317371][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.430313][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.448175][ T5243] Bluetooth: hci2: command tx timeout [ 197.530282][T10536] team0: Port device team_slave_0 added [ 197.537335][ T5243] Bluetooth: hci0: command tx timeout [ 197.566682][T10536] team0: Port device team_slave_1 added [ 197.605849][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.708991][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.715983][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.748410][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.762303][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.776090][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.803349][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.922935][T10536] hsr_slave_0: entered promiscuous mode [ 197.938858][T10536] hsr_slave_1: entered promiscuous mode [ 197.956409][T10536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.975343][T10536] Cannot create hsr debugfs directory [ 198.179899][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 198.197256][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 198.221034][T10504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.251497][T10504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.290080][T10504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.312111][T10504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.345376][T10445] veth0_vlan: entered promiscuous mode [ 198.443704][T10445] veth1_vlan: entered promiscuous mode [ 198.669457][T10445] veth0_macvtap: entered promiscuous mode [ 198.731049][T10445] veth1_macvtap: entered promiscuous mode [ 198.886187][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.910160][T10609] netlink: 'syz.0.1566': attribute type 9 has an invalid length. [ 198.921241][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.947420][T10609] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1566'. [ 198.956823][T10609] openvswitch: netlink: Message has 8 unknown bytes. [ 198.964123][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.985353][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.997923][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.015745][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.027752][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.038958][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.049814][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.061528][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.075048][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 199.091279][T10605] macsec0: entered promiscuous mode [ 199.135421][ T6435] hsr_slave_0: left promiscuous mode [ 199.150480][ T6435] hsr_slave_1: left promiscuous mode [ 199.186725][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.209352][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.228647][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.236391][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.269177][ T6435] veth1_macvtap: left promiscuous mode [ 199.274732][ T6435] veth0_macvtap: left promiscuous mode [ 199.281127][ T6435] veth1_vlan: left promiscuous mode [ 199.286819][ T6435] veth0_vlan: left promiscuous mode [ 199.528004][ T5243] Bluetooth: hci2: command tx timeout [ 199.607774][ T5243] Bluetooth: hci0: command tx timeout [ 199.904281][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 199.961837][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 200.490665][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.504800][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.511976][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.582463][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.589677][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.599527][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.610618][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.622203][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.633186][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.643178][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.653787][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.663979][T10445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.674684][T10445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.685937][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.697591][T10445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.706417][T10445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.715320][T10445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.724689][T10445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.799153][T10630] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1571'. [ 200.815077][T10630] openvswitch: netlink: Key type 29 is not supported [ 200.918871][T10536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.952098][T10641] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 200.986502][T10536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.017558][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 201.050356][T10536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.091114][T10536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.191250][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.215786][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.319861][T10536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.340445][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.357573][ T4044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.369645][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.376884][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.385241][ T4044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.415762][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.422898][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.536772][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.608071][ T5243] Bluetooth: hci2: command tx timeout [ 201.711083][T10661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.744634][T10504] veth0_vlan: entered promiscuous mode [ 201.907213][ T6438] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.965722][T10504] veth1_vlan: entered promiscuous mode [ 201.999018][T10536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.044967][ T6438] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.069404][T10669] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.078483][T10669] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.087776][T10669] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.096634][T10669] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.127466][T10669] vxlan0: entered promiscuous mode [ 202.137318][T10669] vxlan0: entered allmulticast mode [ 202.174909][T10669] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.184373][T10669] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.193871][T10669] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.203450][T10669] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.266000][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.283942][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.305038][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.316196][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.326934][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.337912][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.356295][ T6438] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.372460][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 202.493666][ T6438] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.548360][T10504] veth0_macvtap: entered promiscuous mode [ 202.699404][T10504] veth1_macvtap: entered promiscuous mode [ 202.751230][T10536] veth0_vlan: entered promiscuous mode [ 202.804902][T10536] veth1_vlan: entered promiscuous mode [ 202.834169][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.849194][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.861857][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.874590][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.885331][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.897396][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.909908][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.921431][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.933902][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.026881][T10536] veth0_macvtap: entered promiscuous mode [ 203.080331][T10536] veth1_macvtap: entered promiscuous mode [ 203.116049][ T6438] bridge_slave_1: left allmulticast mode [ 203.128329][ T6438] bridge_slave_1: left promiscuous mode [ 203.134126][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.145455][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 203.175693][ T6438] bridge_slave_0: left allmulticast mode [ 203.201096][ T6438] bridge_slave_0: left promiscuous mode [ 203.206966][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.763267][ T6438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.786455][ T6438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.799042][ T6438] bond0 (unregistering): Released all slaves [ 203.812308][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.829353][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.844026][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.856911][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.871552][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.884497][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.899838][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.913677][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.926682][T10504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.944989][T10504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.956398][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.982051][T10711] hsr0: entered promiscuous mode [ 204.135985][T10504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.155938][T10504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.184769][T10504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.202280][T10504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.233030][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.251636][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.263728][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.274691][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.284816][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.296724][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.311290][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.311637][T10724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.321904][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.341862][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.352427][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.366881][T10536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.416801][ T54] Bluetooth: hci4: command tx timeout [ 204.519640][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.537953][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.553931][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.564589][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.574811][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.585512][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.595468][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.611858][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.622668][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.633360][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.643256][T10536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.655101][T10536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.675066][T10536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.726521][T10536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.737167][T10536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.745988][T10536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.755023][T10536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.815827][T10731] FAULT_INJECTION: forcing a failure. [ 204.815827][T10731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.835676][T10731] CPU: 0 UID: 0 PID: 10731 Comm: syz.4.1598 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 204.846487][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.856538][T10731] Call Trace: [ 204.859812][T10731] [ 204.862736][T10731] dump_stack_lvl+0x241/0x360 [ 204.867413][T10731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.872601][T10731] ? __pfx__printk+0x10/0x10 [ 204.877191][T10731] ? __pfx_lock_release+0x10/0x10 [ 204.882217][T10731] should_fail_ex+0x3b0/0x4e0 [ 204.886894][T10731] _copy_from_user+0x2f/0xe0 [ 204.891490][T10731] copy_msghdr_from_user+0xae/0x680 [ 204.896697][T10731] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 204.902514][T10731] __sys_sendmmsg+0x36d/0x730 [ 204.907194][T10731] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.912399][T10731] ? __pfx_lock_release+0x10/0x10 [ 204.917421][T10731] ? kstrtouint_from_user+0x128/0x190 [ 204.922803][T10731] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 204.928694][T10731] ? ksys_write+0x229/0x2b0 [ 204.933190][T10731] ? __pfx_lock_release+0x10/0x10 [ 204.938222][T10731] ? vfs_write+0x7bf/0xc90 [ 204.942630][T10731] ? kmem_cache_free+0x1a2/0x420 [ 204.947575][T10731] ? __mutex_unlock_slowpath+0x21d/0x750 [ 204.953204][T10731] ? __fget_files+0x3f3/0x470 [ 204.957882][T10731] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.963859][T10731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.970185][T10731] ? do_syscall_64+0x100/0x230 [ 204.974945][T10731] __x64_sys_sendmmsg+0xa0/0xb0 [ 204.979791][T10731] do_syscall_64+0xf3/0x230 [ 204.984286][T10731] ? clear_bhb_loop+0x35/0x90 [ 204.988957][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.994848][T10731] RIP: 0033:0x7f3bfe37dff9 [ 204.999256][T10731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.018875][T10731] RSP: 002b:00007f3bff1fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.027299][T10731] RAX: ffffffffffffffda RBX: 00007f3bfe535f80 RCX: 00007f3bfe37dff9 [ 205.035266][T10731] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 205.043238][T10731] RBP: 00007f3bff1fb090 R08: 0000000000000000 R09: 0000000000000000 [ 205.051397][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.059368][T10731] R13: 0000000000000000 R14: 00007f3bfe535f80 R15: 00007fff127040d8 [ 205.067350][T10731] [ 205.215441][T10672] chnl_net:caif_netlink_parms(): no params data found [ 205.418105][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.425937][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.440543][ T6438] hsr_slave_0: left promiscuous mode [ 205.446529][ T6438] hsr_slave_1: left promiscuous mode [ 205.461626][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.469465][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.478405][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.485958][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.509747][ T6438] veth1_macvtap: left promiscuous mode [ 205.515300][ T6438] veth0_macvtap: left promiscuous mode [ 205.521262][ T6438] veth1_vlan: left promiscuous mode [ 205.526634][ T6438] veth0_vlan: left promiscuous mode [ 206.035854][ T6438] team0 (unregistering): Port device team_slave_1 removed [ 206.086147][ T6438] team0 (unregistering): Port device team_slave_0 removed [ 206.487849][ T54] Bluetooth: hci4: command tx timeout [ 206.672543][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.682121][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.689629][T10672] bridge_slave_0: entered allmulticast mode [ 206.697561][T10672] bridge_slave_0: entered promiscuous mode [ 206.722991][T10747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.773119][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.781638][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.797762][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.808692][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.830100][T10672] bridge_slave_1: entered allmulticast mode [ 206.841226][T10672] bridge_slave_1: entered promiscuous mode [ 206.866581][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.874896][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.985242][T10754] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1604'. [ 206.997060][T10754] openvswitch: netlink: Multiple metadata blocks provided [ 207.007993][T10672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.049732][T10672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.194390][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.203530][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.220215][T10672] team0: Port device team_slave_0 added [ 207.264429][T10672] team0: Port device team_slave_1 added [ 207.340365][T10672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.352766][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.432068][T10672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.483373][T10769] xt_recent: Unsupported userspace flags (00000042) [ 207.577096][ T2468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.594423][T10672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.601821][T10672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.629364][T10672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.641248][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1609'. [ 207.658212][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 207.668653][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 207.771760][ T2468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.899685][ T2468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.972906][T10672] hsr_slave_0: entered promiscuous mode [ 207.989332][T10672] hsr_slave_1: entered promiscuous mode [ 208.017637][T10672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.025255][T10672] Cannot create hsr debugfs directory [ 208.085953][ T2468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.135323][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.156841][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.166570][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.190148][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.205932][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.214080][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.357482][ T2468] bridge_slave_1: left allmulticast mode [ 208.363170][ T2468] bridge_slave_1: left promiscuous mode [ 208.370803][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.384888][ T2468] bridge_slave_0: left allmulticast mode [ 208.391017][ T2468] bridge_slave_0: left promiscuous mode [ 208.396737][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.567378][ T5243] Bluetooth: hci4: command tx timeout [ 208.770062][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.781482][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.793899][ T2468] bond0 (unregistering): Released all slaves [ 209.158679][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 209.260050][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.274660][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.305860][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.317425][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.327094][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.335380][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.678303][T10815] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 209.737879][ T2468] hsr_slave_0: left promiscuous mode [ 209.777276][ T2468] hsr_slave_1: left promiscuous mode [ 209.788502][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.796171][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.818072][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.834689][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.870902][ T2468] veth1_macvtap: left promiscuous mode [ 209.876433][ T2468] veth0_macvtap: left promiscuous mode [ 209.882103][ T2468] veth1_vlan: left promiscuous mode [ 209.888202][ T2468] veth0_vlan: left promiscuous mode [ 210.250141][ T5243] Bluetooth: hci0: command tx timeout [ 210.365968][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 210.420110][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 210.667726][ T5243] Bluetooth: hci4: command tx timeout [ 210.887460][T10672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.896325][T10672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.910290][T10672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.929644][T10672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.073654][T10780] chnl_net:caif_netlink_parms(): no params data found [ 211.200924][T10672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.236225][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 211.282297][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 211.336517][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 211.343028][T10672] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.386607][ T5243] Bluetooth: hci2: command tx timeout [ 211.414049][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.421246][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.430840][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.438082][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.466289][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.477773][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.501193][T10780] bridge_slave_0: entered allmulticast mode [ 211.518742][T10780] bridge_slave_0: entered promiscuous mode [ 211.543755][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 211.580887][T10672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.592868][T10672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.605555][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.619295][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.626574][T10780] bridge_slave_1: entered allmulticast mode [ 211.644040][T10780] bridge_slave_1: entered promiscuous mode [ 211.682688][T10828] infiniband syz0: set active [ 211.704369][T10828] infiniband syz0: added ip6tnl0 [ 211.723107][ T46] ip6tnl0 speed is unknown, defaulting to 1000 [ 211.726272][T10780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.755793][T10780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.811428][T10828] RDS/IB: syz0: added [ 211.843763][T10828] smc: adding ib device syz0 with port count 1 [ 211.865227][T10828] smc: ib device syz0 port 1 has pnetid [ 211.906274][ T2468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.936141][T10780] team0: Port device team_slave_0 added [ 211.943794][ T5339] ip6tnl0 speed is unknown, defaulting to 1000 [ 211.945831][T10780] team0: Port device team_slave_1 added [ 212.015090][ T2468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.036720][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 212.082783][T10780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.097356][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.135989][T10780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.154382][T10780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.168346][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.197497][T10780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.251179][ T2468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.287343][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 212.337931][ T5243] Bluetooth: hci0: command tx timeout [ 212.352769][ T2468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.416926][T10780] hsr_slave_0: entered promiscuous mode [ 212.434571][T10780] hsr_slave_1: entered promiscuous mode [ 212.445921][T10780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.453827][T10780] Cannot create hsr debugfs directory [ 212.465016][T10672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.473714][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 212.548380][T10801] chnl_net:caif_netlink_parms(): no params data found [ 212.712557][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 212.813088][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.821694][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.829451][T10801] bridge_slave_0: entered allmulticast mode [ 212.836562][T10801] bridge_slave_0: entered promiscuous mode [ 212.861088][T10672] veth0_vlan: entered promiscuous mode [ 212.879472][ T2468] bridge_slave_1: left allmulticast mode [ 212.885156][ T2468] bridge_slave_1: left promiscuous mode [ 212.891363][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.903626][ T2468] bridge_slave_0: left allmulticast mode [ 212.911336][ T2468] bridge_slave_0: left promiscuous mode [ 212.917074][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.278716][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.290526][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.302158][ T2468] bond0 (unregistering): Released all slaves [ 213.328342][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.335471][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.343379][T10801] bridge_slave_1: entered allmulticast mode [ 213.350522][T10801] bridge_slave_1: entered promiscuous mode [ 213.383384][T10672] veth1_vlan: entered promiscuous mode [ 213.412317][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 213.422224][T10864] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 213.443646][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 213.464849][ T5243] Bluetooth: hci2: command tx timeout [ 213.699695][T10801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.712697][T10801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.733675][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 213.881223][T10801] team0: Port device team_slave_0 added [ 213.939624][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 213.948026][T10801] team0: Port device team_slave_1 added [ 213.955266][T10672] veth0_macvtap: entered promiscuous mode [ 214.041740][T10672] veth1_macvtap: entered promiscuous mode [ 214.059441][T10801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.066409][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.112061][T10801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.144979][T10801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.161206][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.204728][T10801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.237724][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.261628][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.282735][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.297212][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.307635][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.318410][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.329909][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.342863][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.355219][T10672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.373752][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 214.408400][ T5243] Bluetooth: hci0: command tx timeout [ 214.437821][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.457207][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.477224][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.497309][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.517249][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.537322][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.567381][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.585598][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.596051][T10672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.606657][T10672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.619086][T10672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.648248][T10801] hsr_slave_0: entered promiscuous mode [ 214.654625][T10801] hsr_slave_1: entered promiscuous mode [ 214.661112][T10893] openvswitch: netlink: Missing key (keys=44, expected=2000) [ 214.669222][T10801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.676802][T10801] Cannot create hsr debugfs directory [ 214.685743][T10672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.696329][T10828] ip6tnl0 speed is unknown, defaulting to 1000 [ 214.707379][T10672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.728579][T10672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.747412][T10672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.834135][T10895] netlink: 'syz.0.1636': attribute type 21 has an invalid length. [ 214.867450][T10895] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1636'. [ 214.928104][T10780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.976419][T10780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.072328][T10780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.107088][T10780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.237375][T10910] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1641'. [ 215.290896][T10910] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 215.413487][ T2468] hsr_slave_0: left promiscuous mode [ 215.435585][ T2468] hsr_slave_1: left promiscuous mode [ 215.444237][T10915] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1643'. [ 215.463851][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.482290][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.498535][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.505991][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.528054][ T54] Bluetooth: hci2: command tx timeout [ 215.540270][ T2468] veth1_macvtap: left promiscuous mode [ 215.545833][ T2468] veth0_macvtap: left promiscuous mode [ 215.552274][ T2468] veth1_vlan: left promiscuous mode [ 215.559063][ T2468] veth0_vlan: left promiscuous mode [ 216.065318][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 216.116746][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 216.490171][ T54] Bluetooth: hci0: command tx timeout [ 216.593409][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1640'. [ 216.679378][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.717584][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.823261][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.847710][T10780] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.860755][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.867984][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.917483][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.950117][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.957297][ T4044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.961675][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.122064][T10780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.132918][T10780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.473138][T10780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.523245][T10801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.552954][T10801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.608268][ T54] Bluetooth: hci2: command tx timeout [ 217.631338][T10801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.703917][ T2468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.746404][T10780] veth0_vlan: entered promiscuous mode [ 217.763716][T10801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.854898][ T2468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.898895][T10780] veth1_vlan: entered promiscuous mode [ 217.962564][ T2468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.988414][T10969] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 218.017982][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1657'. [ 218.135044][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.161934][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.172320][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.181420][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.189380][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.196686][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.209452][ T2468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.281546][T10780] veth0_macvtap: entered promiscuous mode [ 218.341194][T10979] syzkaller1: entered promiscuous mode [ 218.346779][T10979] syzkaller1: entered allmulticast mode [ 218.376860][T10780] veth1_macvtap: entered promiscuous mode [ 218.508943][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.527666][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.550533][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.574160][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.597198][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.617749][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.638805][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.666301][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.678112][T10780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.721157][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.734080][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.745199][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.756348][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.768316][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.778839][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.789041][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.799912][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.810385][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.820950][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.833540][T10780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.856376][T10780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.865500][T10780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.874593][T10780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.885611][T10780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.922214][T10801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.961237][ T2468] bridge_slave_1: left allmulticast mode [ 218.966935][ T2468] bridge_slave_1: left promiscuous mode [ 218.990434][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.018603][ T2468] bridge_slave_0: left allmulticast mode [ 219.024391][ T2468] bridge_slave_0: left promiscuous mode [ 219.046376][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.514030][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.525472][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.538107][ T2468] bond0 (unregistering): Released all slaves [ 219.554141][T10973] ip6tnl0 speed is unknown, defaulting to 1000 [ 219.563545][T11014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 219.682887][T10801] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.908976][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 219.921337][T11025] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1674'. [ 219.933570][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 219.946292][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.967442][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.977022][T11025] netlink: 189 bytes leftover after parsing attributes in process `syz.0.1674'. [ 219.999150][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.014687][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.021863][ T6438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.029861][T11025] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.040009][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.050004][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.057210][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.068982][T11025] netlink: 189 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.212421][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.257950][ T5243] Bluetooth: hci4: command tx timeout [ 220.284628][T11025] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.309238][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.317016][T11025] netlink: 189 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.374156][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.388470][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.408086][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.415862][T11025] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.444641][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.457849][T11025] netlink: 189 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.467754][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.475782][T11025] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.1674'. [ 220.497372][T11025] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 220.562934][T11038] bridge0: port 3(dummy0) entered blocking state [ 220.597387][T11038] bridge0: port 3(dummy0) entered disabled state [ 220.604001][T11038] dummy0: entered allmulticast mode [ 220.659699][T11038] dummy0: entered promiscuous mode [ 220.665448][T11038] bridge0: port 3(dummy0) entered blocking state [ 220.671980][T11038] bridge0: port 3(dummy0) entered forwarding state [ 220.894026][ T2468] hsr_slave_0: left promiscuous mode [ 220.909792][ T2468] hsr_slave_1: left promiscuous mode [ 220.928564][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.937032][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.949300][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.956835][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.027617][ T2468] veth1_macvtap: left promiscuous mode [ 221.033163][ T2468] veth0_macvtap: left promiscuous mode [ 221.047558][ T2468] veth1_vlan: left promiscuous mode [ 221.052944][ T2468] veth0_vlan: left promiscuous mode [ 221.578694][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 221.629228][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 222.195627][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.210635][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.220817][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.239827][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.254362][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.261867][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.272620][T10973] chnl_net:caif_netlink_parms(): no params data found [ 222.327576][ T5243] Bluetooth: hci4: command tx timeout [ 222.395999][T10801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.576918][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.584677][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.592685][T10973] bridge_slave_0: entered allmulticast mode [ 222.600819][T10973] bridge_slave_0: entered promiscuous mode [ 222.623503][T11069] batadv1: entered allmulticast mode [ 222.678417][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.685772][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.700895][T10973] bridge_slave_1: entered allmulticast mode [ 222.716567][T10973] bridge_slave_1: entered promiscuous mode [ 222.782010][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.837966][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.932339][T10801] veth0_vlan: entered promiscuous mode [ 222.959868][T11072] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 222.994327][T10973] team0: Port device team_slave_0 added [ 223.023993][T11061] ip6tnl0 speed is unknown, defaulting to 1000 [ 223.028571][T10973] team0: Port device team_slave_1 added [ 223.098385][T11072] macsec0: entered promiscuous mode [ 223.109678][T11072] macsec0: left promiscuous mode [ 223.170208][T10801] veth1_vlan: entered promiscuous mode [ 223.279055][ T2468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.302002][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.309896][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.342663][T11083] unsupported nla_type 21166 [ 223.344447][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.366982][T11081] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 223.466456][ T2468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.491459][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.507412][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.534583][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.610580][T11087] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.672673][ T2468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.782878][ T2468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.809648][T10973] hsr_slave_0: entered promiscuous mode [ 223.816125][T10973] hsr_slave_1: entered promiscuous mode [ 223.828086][T10973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.835710][T10973] Cannot create hsr debugfs directory [ 224.083226][T10801] veth0_macvtap: entered promiscuous mode [ 224.106713][ T2468] bridge_slave_1: left allmulticast mode [ 224.114391][ T2468] bridge_slave_1: left promiscuous mode [ 224.121621][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.138906][ T2468] bridge_slave_0: left allmulticast mode [ 224.144613][ T2468] bridge_slave_0: left promiscuous mode [ 224.151137][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.244002][T11109] FAULT_INJECTION: forcing a failure. [ 224.244002][T11109] name failslab, interval 1, probability 0, space 0, times 0 [ 224.258233][T11109] CPU: 1 UID: 0 PID: 11109 Comm: syz.4.1698 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 224.269047][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.279115][T11109] Call Trace: [ 224.282384][T11109] [ 224.285314][T11109] dump_stack_lvl+0x241/0x360 [ 224.290004][T11109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.295229][T11109] ? __pfx__printk+0x10/0x10 [ 224.299833][T11109] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 224.305803][T11109] ? __pfx___might_resched+0x10/0x10 [ 224.311094][T11109] ? aa_label_sk_perm+0x4f3/0x6c0 [ 224.316135][T11109] should_fail_ex+0x3b0/0x4e0 [ 224.320859][T11109] should_failslab+0xac/0x100 [ 224.325525][T11109] ? __alloc_skb+0x1c3/0x440 [ 224.330119][T11109] kmem_cache_alloc_node_noprof+0x71/0x320 [ 224.335954][T11109] __alloc_skb+0x1c3/0x440 [ 224.340396][T11109] ? __pfx___alloc_skb+0x10/0x10 [ 224.345346][T11109] netlink_sendmsg+0x638/0xcb0 [ 224.350122][T11109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.355409][T11109] ? aa_sock_msg_perm+0x91/0x160 [ 224.360350][T11109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.365628][T11109] __sock_sendmsg+0x221/0x270 [ 224.370306][T11109] ____sys_sendmsg+0x52a/0x7e0 [ 224.375084][T11109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.380397][T11109] ? rcu_is_watching+0x15/0xb0 [ 224.385257][T11109] ? __might_fault+0xaa/0x120 [ 224.389933][T11109] __sys_sendmmsg+0x3ab/0x730 [ 224.394610][T11109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.399813][T11109] ? __pfx_lock_release+0x10/0x10 [ 224.404836][T11109] ? kstrtouint_from_user+0x128/0x190 [ 224.410223][T11109] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 224.416126][T11109] ? ksys_write+0x229/0x2b0 [ 224.420624][T11109] ? __pfx_lock_release+0x10/0x10 [ 224.425656][T11109] ? vfs_write+0x7bf/0xc90 [ 224.430070][T11109] ? kmem_cache_free+0x1a2/0x420 [ 224.435012][T11109] ? __mutex_unlock_slowpath+0x21d/0x750 [ 224.440646][T11109] ? __fget_files+0x3f3/0x470 [ 224.445337][T11109] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.451330][T11109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.457658][T11109] ? do_syscall_64+0x100/0x230 [ 224.462422][T11109] __x64_sys_sendmmsg+0xa0/0xb0 [ 224.467275][T11109] do_syscall_64+0xf3/0x230 [ 224.471774][T11109] ? clear_bhb_loop+0x35/0x90 [ 224.476446][T11109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.482344][T11109] RIP: 0033:0x7f3bfe37dff9 [ 224.486757][T11109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.506381][T11109] RSP: 002b:00007f3bff1fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.514833][T11109] RAX: ffffffffffffffda RBX: 00007f3bfe535f80 RCX: 00007f3bfe37dff9 [ 224.522810][T11109] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 224.530807][T11109] RBP: 00007f3bff1fb090 R08: 0000000000000000 R09: 0000000000000000 [ 224.538773][T11109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.546737][T11109] R13: 0000000000000000 R14: 00007f3bfe535f80 R15: 00007fff127040d8 [ 224.554717][T11109] [ 224.560378][ T5243] Bluetooth: hci0: command tx timeout [ 224.566790][ T5243] Bluetooth: hci4: command tx timeout [ 224.634683][T11111] __nla_validate_parse: 126 callbacks suppressed [ 224.634704][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 224.652373][T11111] block nbd0: not configured, cannot reconfigure [ 224.975153][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.986403][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.001501][ T2468] bond0 (unregistering): Released all slaves [ 225.035348][T10801] veth1_macvtap: entered promiscuous mode [ 225.068503][T11120] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1702'. [ 225.078991][T11120] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 225.090415][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 225.324305][T11126] ebt_limit: overflow, try lower: 570423552/2483027968 [ 225.394379][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.405491][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.415683][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.426180][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.436457][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.446984][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.457002][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.467956][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.479274][T10801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.540132][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.580137][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.607977][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.647319][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.667273][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.687770][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.707854][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.727775][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.747349][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.767925][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.799346][T10801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.977070][T11061] chnl_net:caif_netlink_parms(): no params data found [ 226.026426][ T2468] hsr_slave_0: left promiscuous mode [ 226.032618][ T2468] hsr_slave_1: left promiscuous mode [ 226.039679][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.048492][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.062490][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.187696][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.253582][ T2468] veth1_macvtap: left promiscuous mode [ 226.259617][ T2468] veth0_macvtap: left promiscuous mode [ 226.265332][ T2468] veth1_vlan: left promiscuous mode [ 226.271476][ T2468] veth0_vlan: left promiscuous mode [ 226.650744][ T54] Bluetooth: hci4: command tx timeout [ 226.654734][ T5243] Bluetooth: hci0: command tx timeout [ 226.793572][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 226.841764][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 227.265754][T11143] tipc: Started in network mode [ 227.272879][T11143] tipc: Node identity 2007ff, cluster identity 4711 [ 227.280540][T11143] tipc: Node number set to 2099199 [ 227.393612][T11158] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1714'. [ 227.419120][T10801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.437576][T10801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.455993][T10801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.465087][T10801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.594936][T11061] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.611460][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.632934][T11061] bridge_slave_0: entered allmulticast mode [ 227.640011][T11061] bridge_slave_0: entered promiscuous mode [ 227.656023][T11163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 227.678422][T11163] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.686271][T11163] gretap1: entered promiscuous mode [ 227.709707][T11163] gretap1: entered allmulticast mode [ 227.716706][T11061] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.727644][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.734991][T11061] bridge_slave_1: entered allmulticast mode [ 227.743025][T11061] bridge_slave_1: entered promiscuous mode [ 227.847085][T11061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.885154][T11061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.906421][T11171] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1717'. [ 227.970773][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.997253][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.030779][T11061] team0: Port device team_slave_0 added [ 228.039560][T11061] team0: Port device team_slave_1 added [ 228.096023][T10973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.115620][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 228.157597][T10973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.175219][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.184200][T10973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.187166][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.208327][T11061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.223657][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.253345][T11061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.303648][T10973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.330033][T11182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'. [ 228.388510][T11061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.395487][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.444297][T11061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.595523][T11061] hsr_slave_0: entered promiscuous mode [ 228.609955][T11061] hsr_slave_1: entered promiscuous mode [ 228.616367][T11061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.624934][T11061] Cannot create hsr debugfs directory [ 228.634486][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1723'. [ 228.727845][ T5243] Bluetooth: hci0: command tx timeout [ 228.911615][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.048464][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.143567][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.158225][T11187] ip6tnl0 speed is unknown, defaulting to 1000 [ 229.216574][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.320451][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.350107][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.395063][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.402239][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.470054][ T2468] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.477218][ T2468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.528693][ T63] bridge_slave_1: left allmulticast mode [ 229.534475][ T63] bridge_slave_1: left promiscuous mode [ 229.547055][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.559668][ T63] bridge_slave_0: left allmulticast mode [ 229.565341][ T63] bridge_slave_0: left promiscuous mode [ 229.571755][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.935807][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.946718][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.957879][ T63] bond0 (unregistering): Released all slaves [ 230.203106][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1726'. [ 230.212924][T11199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1726'. [ 230.223587][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1726'. [ 230.355676][T11207] sctp: [Deprecated]: syz.4.1728 (pid 11207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.355676][T11207] Use struct sctp_sack_info instead [ 230.445458][T11061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.515090][T11061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.549038][T11061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.589941][T11061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.728270][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.739339][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.748532][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.762954][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.770971][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.784922][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.807774][ T54] Bluetooth: hci0: command tx timeout [ 230.873916][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 230.920535][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.181735][T11061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.296591][T10973] veth0_vlan: entered promiscuous mode [ 231.360122][T11061] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.433141][T10973] veth1_vlan: entered promiscuous mode [ 231.461307][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.468570][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.512603][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.519802][ T4044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.600832][ T63] hsr_slave_0: left promiscuous mode [ 231.606930][ T63] hsr_slave_1: left promiscuous mode [ 231.616740][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.631863][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.658596][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.666037][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.692257][ T63] veth1_macvtap: left promiscuous mode [ 231.698073][ T63] veth0_macvtap: left promiscuous mode [ 231.705672][ T63] veth1_vlan: left promiscuous mode [ 231.711216][ T63] veth0_vlan: left promiscuous mode [ 232.202456][ T63] team0 (unregistering): Port device team_slave_1 removed [ 232.255745][ T63] team0 (unregistering): Port device team_slave_0 removed [ 232.713074][T10973] veth0_macvtap: entered promiscuous mode [ 232.760893][T10973] veth1_macvtap: entered promiscuous mode [ 232.884676][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.896281][ T54] Bluetooth: hci2: command tx timeout [ 232.897246][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.937089][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.950284][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.966332][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.977408][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.990018][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.001189][T11217] ip6tnl0 speed is unknown, defaulting to 1000 [ 233.006874][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.037452][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.057258][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.079833][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.099674][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.112078][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.122529][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.133932][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.165840][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.239867][T10973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.269750][T10973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.314507][T10973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.332316][T10973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.402877][T11061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.618941][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.637082][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.659863][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 233.837799][T11061] veth0_vlan: entered promiscuous mode [ 233.874461][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.898384][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.908257][T11061] veth1_vlan: entered promiscuous mode [ 233.949007][T11259] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1741'. [ 233.963878][T11217] chnl_net:caif_netlink_parms(): no params data found [ 234.034532][T11061] veth0_macvtap: entered promiscuous mode [ 234.172168][T11061] veth1_macvtap: entered promiscuous mode [ 234.220458][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.232018][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.240246][T11217] bridge_slave_0: entered allmulticast mode [ 234.248828][T11217] bridge_slave_0: entered promiscuous mode [ 234.262523][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.273757][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.284077][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.294958][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.305626][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.318579][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.330122][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.340732][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.352077][T11061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.370722][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.386350][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.395760][T11217] bridge_slave_1: entered allmulticast mode [ 234.403645][T11217] bridge_slave_1: entered promiscuous mode [ 234.438476][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.457238][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.467089][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.504102][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.521625][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.537151][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.557410][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.568337][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.578268][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.589100][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.600442][T11061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.648250][ T6435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.675844][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 234.690202][T11061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.713942][T11061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.724208][T11061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.733684][T11061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.774326][ T6435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.802258][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.823844][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.856050][ T6435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.925556][ T6435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.943737][T11217] team0: Port device team_slave_0 added [ 234.955796][T11217] team0: Port device team_slave_1 added [ 234.974879][ T54] Bluetooth: hci2: command tx timeout [ 235.119679][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.140956][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.170255][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.202426][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.213782][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.251457][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.284030][T11296] validate_nla: 124 callbacks suppressed [ 235.284056][T11296] netlink: 'syz.4.1751': attribute type 21 has an invalid length. [ 235.309671][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 235.322823][T11296] netlink: 'syz.4.1751': attribute type 10 has an invalid length. [ 235.343119][T11296] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1751'. [ 235.355491][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.368406][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.375140][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.388651][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.398578][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.407863][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.417803][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.425134][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.496818][T11217] hsr_slave_0: entered promiscuous mode [ 235.503599][T11217] hsr_slave_1: entered promiscuous mode [ 235.515414][T11217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.524595][T11217] Cannot create hsr debugfs directory [ 235.553398][ T6435] bridge_slave_1: left allmulticast mode [ 235.559554][ T6435] bridge_slave_1: left promiscuous mode [ 235.565508][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.576201][ T6435] bridge_slave_0: left allmulticast mode [ 235.582523][ T6435] bridge_slave_0: left promiscuous mode [ 235.589073][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.927967][T11305] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 235.940594][T11306] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 236.065470][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.078098][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.093933][ T6435] bond0 (unregistering): Released all slaves [ 236.127649][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 236.251788][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.261560][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.446688][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 236.784189][T11299] ip6tnl0 speed is unknown, defaulting to 1000 [ 236.936643][T11217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.975538][T11217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.014209][T11217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.049361][ T5240] Bluetooth: hci2: command tx timeout [ 237.062432][T11217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.408621][ T6435] hsr_slave_0: left promiscuous mode [ 237.422510][ T6435] hsr_slave_1: left promiscuous mode [ 237.429855][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.443303][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.453719][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.461684][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.484184][ T6435] veth1_macvtap: left promiscuous mode [ 237.490007][ T6435] veth0_macvtap: left promiscuous mode [ 237.495553][ T6435] veth1_vlan: left promiscuous mode [ 237.501128][ T6435] veth0_vlan: left promiscuous mode [ 237.527619][ T5240] Bluetooth: hci4: command tx timeout [ 238.116141][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 238.242742][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 238.284381][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.297776][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.308439][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.324069][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.341339][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.351320][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.854300][T11299] chnl_net:caif_netlink_parms(): no params data found [ 239.000240][T11217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.132684][ T5240] Bluetooth: hci2: command tx timeout [ 239.527912][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.557277][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.564632][T11299] bridge_slave_0: entered allmulticast mode [ 239.578441][T11299] bridge_slave_0: entered promiscuous mode [ 239.597355][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.604674][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.617777][ T5240] Bluetooth: hci4: command tx timeout [ 239.636577][T11299] bridge_slave_1: entered allmulticast mode [ 239.657954][T11299] bridge_slave_1: entered promiscuous mode [ 239.699910][T11217] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.765075][T11342] ip6tnl0 speed is unknown, defaulting to 1000 [ 239.765759][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 239.781359][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 239.809284][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 239.830545][T11299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.888089][T11299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.917871][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 239.937941][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1768'. [ 240.011689][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.018879][T11381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.092503][T11299] team0: Port device team_slave_0 added [ 240.109968][T11299] team0: Port device team_slave_1 added [ 240.243762][ T6435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.252762][T11406] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 240.294794][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.301971][T11386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.341676][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1773'. [ 240.367566][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.375049][T11417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.385174][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.392958][T11417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.444222][ T6435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.459089][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.466079][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.492745][ T5240] Bluetooth: hci0: command tx timeout [ 240.512759][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.526677][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.534653][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.573096][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.672034][ T6435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.734690][T11431] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.796501][ T6435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.826767][T11299] hsr_slave_0: entered promiscuous mode [ 240.839472][T11299] hsr_slave_1: entered promiscuous mode [ 240.845860][T11299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.858285][T11299] Cannot create hsr debugfs directory [ 241.159493][ T6435] bridge_slave_1: left allmulticast mode [ 241.165369][ T6435] bridge_slave_1: left promiscuous mode [ 241.173845][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.195289][ T6435] bridge_slave_0: left allmulticast mode [ 241.201950][ T6435] bridge_slave_0: left promiscuous mode [ 241.209718][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.690022][ T5240] Bluetooth: hci4: command 0x040f tx timeout [ 241.744220][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.757567][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.772493][ T6435] bond0 (unregistering): Released all slaves [ 241.899357][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.922878][T11342] chnl_net:caif_netlink_parms(): no params data found [ 241.994900][T11463] macvtap0: mtu less than device minimum [ 242.179456][T11471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.459970][T11478] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.475160][T11478] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.488712][T11478] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.500021][T11478] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.509485][T11478] geneve2: entered promiscuous mode [ 242.514694][T11478] geneve2: entered allmulticast mode [ 242.522641][T11478] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.532085][T11478] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.541528][T11478] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.550552][T11478] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.567653][ T5243] Bluetooth: hci0: command tx timeout [ 242.577302][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.584445][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.594700][T11342] bridge_slave_0: entered allmulticast mode [ 242.603538][T11342] bridge_slave_0: entered promiscuous mode [ 242.632984][T11217] veth0_vlan: entered promiscuous mode [ 242.654495][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.685997][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.729662][T11342] bridge_slave_1: entered allmulticast mode [ 242.920952][T11342] bridge_slave_1: entered promiscuous mode [ 243.010327][T11342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.045745][ T6435] hsr_slave_0: left promiscuous mode [ 243.053644][ T6435] hsr_slave_1: left promiscuous mode [ 243.062291][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.074223][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.085870][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.095830][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.116331][ T6435] veth1_macvtap: left promiscuous mode [ 243.122488][ T6435] veth0_macvtap: left promiscuous mode [ 243.129249][ T6435] veth1_vlan: left promiscuous mode [ 243.135166][ T6435] veth0_vlan: left promiscuous mode [ 243.651109][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 243.706774][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 243.767594][ T5243] Bluetooth: hci4: command 0x040f tx timeout [ 244.186231][T11342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.249165][T11217] veth1_vlan: entered promiscuous mode [ 244.291028][T11342] team0: Port device team_slave_0 added [ 244.373699][T11342] team0: Port device team_slave_1 added [ 244.407880][T11217] veth0_macvtap: entered promiscuous mode [ 244.413592][T11500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1795'. [ 244.470944][T11342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.478370][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.504949][T11342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.528481][T11507] ªªªªª»: renamed from bond_slave_1 (while UP) [ 244.538903][T11509] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1796'. [ 244.549265][T11509] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 244.558418][T11342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.565448][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.592908][T11342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.617893][T11217] veth1_macvtap: entered promiscuous mode [ 244.647852][ T5243] Bluetooth: hci0: command tx timeout [ 244.681514][T11511] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1797'. [ 244.729299][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 244.753296][T11342] hsr_slave_0: entered promiscuous mode [ 244.783173][T11342] hsr_slave_1: entered promiscuous mode [ 244.793099][T11342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.801469][T11342] Cannot create hsr debugfs directory [ 244.823344][T11516] vlan0: entered promiscuous mode [ 244.838903][T11516] team0: Port device vlan0 added [ 244.902610][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.914028][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.925134][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.936592][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.951548][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1800'. [ 244.962577][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1800'. [ 244.974329][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.985351][T11299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.011530][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.042273][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.067381][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.079557][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.089933][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.103137][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.114865][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.123088][T11299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.144774][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 245.157745][T11299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.173835][T11299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.196200][T11217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.228682][T11217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.256871][T11217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.270144][T11217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.372569][T11536] tipc: New replicast peer: 255.255.255.255 [ 245.386448][T11536] tipc: Enabled bearer , priority 10 [ 245.655714][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.665372][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.706763][T11386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.720954][T11386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.731275][T11546] netlink: zone id is out of range [ 245.754783][T11546] netlink: zone id is out of range [ 245.761597][T11299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.779950][T11299] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.799453][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.806573][T11386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.819886][T11546] netlink: zone id is out of range [ 245.825051][T11546] netlink: zone id is out of range [ 245.835663][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.842802][T11386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.850300][ T5243] Bluetooth: hci4: command 0x040f tx timeout [ 245.857023][T11546] netlink: zone id is out of range [ 245.864857][T11546] netlink: zone id is out of range [ 245.870532][T11546] netlink: zone id is out of range [ 245.875674][T11546] netlink: zone id is out of range [ 245.882157][T11546] netlink: zone id is out of range [ 245.887892][T11546] netlink: zone id is out of range [ 245.893424][T11546] netlink: zone id is out of range [ 245.946652][T11299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.032156][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'. [ 246.203612][T11342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.292568][ T2468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.339450][T11342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.362192][T11342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.438980][ T2468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.464987][T11342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.487595][T11299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.527046][ T2468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.599943][T11299] veth0_vlan: entered promiscuous mode [ 246.629868][ T2468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.662309][T11299] veth1_vlan: entered promiscuous mode [ 246.725380][T11342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.739813][ T5243] Bluetooth: hci0: command tx timeout [ 246.755832][T11299] veth0_macvtap: entered promiscuous mode [ 246.769350][T11299] veth1_macvtap: entered promiscuous mode [ 246.790406][T11342] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.825831][ T3885] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.833007][ T3885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.861536][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.868754][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.896624][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.908989][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.919305][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.930648][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.941014][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.951862][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.963627][T11299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.982353][ T2468] bridge_slave_1: left allmulticast mode [ 246.988784][ T2468] bridge_slave_1: left promiscuous mode [ 246.994524][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.004556][ T2468] bridge_slave_0: left allmulticast mode [ 247.011366][ T2468] bridge_slave_0: left promiscuous mode [ 247.017501][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.378619][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.395296][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.406945][ T2468] bond0 (unregistering): Released all slaves [ 247.437674][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.449104][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.460137][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.471230][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.481669][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.492677][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.502599][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.513344][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.525318][T11299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.539242][T11299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.548525][T11299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.558135][T11299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.566887][T11299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.677022][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 247.796433][T11578] veth0_to_bond: entered promiscuous mode [ 247.811312][T11577] veth0_to_bond: left promiscuous mode [ 247.919869][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.946113][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.952796][T11580] netlink: 'syz.4.1818': attribute type 16 has an invalid length. [ 247.969366][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.987456][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.994660][T11580] netlink: 'syz.4.1818': attribute type 17 has an invalid length. [ 248.025982][T11580] infiniband syz0: set active [ 248.038587][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 248.043639][T11580] infiniband syz0: set active [ 248.064110][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.106527][ T8] ip6tnl0 speed is unknown, defaulting to 1000 [ 248.188814][ T5334] ip6tnl0 speed is unknown, defaulting to 1000 [ 248.351693][T11342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.368761][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.377350][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.542786][T11381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.587019][T11381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.646931][T11342] veth0_vlan: entered promiscuous mode [ 248.715968][T11342] veth1_vlan: entered promiscuous mode [ 248.832360][T11342] veth0_macvtap: entered promiscuous mode [ 248.910607][ T2468] hsr_slave_0: left promiscuous mode [ 248.919927][T11614] xt_bpf: check failed: parse error [ 248.939806][ T2468] hsr_slave_1: left promiscuous mode [ 248.977524][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.990941][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.008448][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.022719][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.061701][ T2468] veth1_macvtap: left promiscuous mode [ 249.067628][ T2468] veth0_macvtap: left promiscuous mode [ 249.073380][ T2468] veth1_vlan: left promiscuous mode [ 249.080670][ T2468] veth0_vlan: left promiscuous mode [ 249.105015][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 249.249118][T11623] netlink: 'syz.0.1829': attribute type 9 has an invalid length. [ 249.262478][T11623] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1829'. [ 249.644032][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 249.695905][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 250.104731][ T5243] Bluetooth: hci2: command tx timeout [ 250.203777][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 250.269304][T11342] veth1_macvtap: entered promiscuous mode [ 250.275967][T11626] veth0_to_hsr: invalid flags given to default FDB implementation [ 250.292047][T11581] ip6tnl0 speed is unknown, defaulting to 1000 [ 250.316232][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.337502][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.357243][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.376701][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.388530][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.411860][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.429602][T11342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.492622][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.522501][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.563162][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.584625][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.607875][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.637185][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.667267][T11342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.678113][T11342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.689924][T11342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.748382][T11342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.760038][T11342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.769722][T11342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.779166][T11342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.953404][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.973268][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.015191][T11381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.023707][T11381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.067018][ T2468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.092215][T11581] chnl_net:caif_netlink_parms(): no params data found [ 251.171306][ T2468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.246034][ T2468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.443733][ T2468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.509098][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.518647][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 251.529374][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.536742][T11581] bridge_slave_0: entered allmulticast mode [ 251.548356][T11581] bridge_slave_0: entered promiscuous mode [ 251.575979][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 251.596570][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.620696][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.636966][T11581] bridge_slave_1: entered allmulticast mode [ 251.647701][T11581] bridge_slave_1: entered promiscuous mode [ 251.683345][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.696146][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.706142][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.724800][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.733803][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.741961][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.774771][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.789999][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.821563][ T2468] bridge_slave_1: left allmulticast mode [ 251.833035][ T2468] bridge_slave_1: left promiscuous mode [ 251.840068][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.850505][ T2468] bridge_slave_0: left allmulticast mode [ 251.856178][ T2468] bridge_slave_0: left promiscuous mode [ 251.862384][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.178824][ T5240] Bluetooth: hci2: command tx timeout [ 252.224898][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.237284][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.253288][ T2468] bond0 (unregistering): Released all slaves [ 252.277910][T11581] team0: Port device team_slave_0 added [ 252.304741][T11581] team0: Port device team_slave_1 added [ 252.439156][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.446148][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.473110][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.485624][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.495986][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.522978][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.625891][T11581] hsr_slave_0: entered promiscuous mode [ 252.649343][T11581] hsr_slave_1: entered promiscuous mode [ 252.664963][T11581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.674180][T11581] Cannot create hsr debugfs directory [ 252.680155][T11653] ip6tnl0 speed is unknown, defaulting to 1000 [ 252.989839][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 253.010266][T11659] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1837'. [ 253.050120][T11664] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.1839'. [ 253.183425][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.194253][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.213956][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.322717][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.331018][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.340042][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.477484][ T2468] hsr_slave_0: left promiscuous mode [ 253.501839][ T2468] hsr_slave_1: left promiscuous mode [ 253.510295][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.524489][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.538632][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.555720][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.623042][ T2468] veth1_macvtap: left promiscuous mode [ 253.633868][ T2468] veth0_macvtap: left promiscuous mode [ 253.647288][ T2468] veth1_vlan: left promiscuous mode [ 253.652636][ T2468] veth0_vlan: left promiscuous mode [ 253.768139][ T5240] Bluetooth: hci0: command tx timeout [ 254.098743][ C1] net_ratelimit: 72 callbacks suppressed [ 254.098763][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.257027][ T5240] Bluetooth: hci2: command tx timeout [ 254.544650][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 254.665914][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 255.368186][ T5240] Bluetooth: hci4: command tx timeout [ 255.495457][T11707] ------------[ cut here ]------------ [ 255.501825][T11707] hook not found, pf 2 num 0 [ 255.505287][T11707] WARNING: CPU: 0 PID: 11707 at net/netfilter/core.c:517 __nf_unregister_net_hook+0x482/0x800 [ 255.520547][T11707] Modules linked in: [ 255.524480][T11707] CPU: 0 UID: 0 PID: 11707 Comm: syz.4.1852 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 255.535500][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.545660][T11707] RIP: 0010:__nf_unregister_net_hook+0x482/0x800 [ 255.552133][T11707] Code: 01 90 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 6d 03 00 00 48 8b 04 24 8b 10 48 c7 c7 a0 3f 13 8d 8b 74 24 1c e8 5f ff 7b f7 90 <0f> 0b 90 90 e9 39 01 00 00 e8 f0 02 bb f7 e9 5e fc ff ff e8 e6 02 [ 255.572106][T11707] RSP: 0018:ffffc9000486ef00 EFLAGS: 00010246 [ 255.578411][T11707] RAX: 789495961ce19900 RBX: ffff888069756a00 RCX: 0000000000040000 [ 255.587681][T11707] RDX: ffffc9000c6f5000 RSI: 00000000000026ab RDI: 00000000000026ac [ 255.595795][T11707] RBP: dffffc0000000000 R08: ffffffff8155daa2 R09: 1ffff110170c519a [ 255.604188][T11707] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802715d940 [ 255.612883][T11707] R13: ffff88802715ea50 R14: 0000000000000004 R15: ffff888067836800 [ 255.622111][T11707] FS: 00007f3bff1fb6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 255.631248][T11707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.637949][T11707] CR2: 00007f3bff1faf98 CR3: 000000007f7ca000 CR4: 00000000003526f0 [ 255.646048][T11707] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.654162][T11707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.662266][T11707] Call Trace: [ 255.665578][T11707] [ 255.668837][T11707] ? __warn+0x168/0x4e0 [ 255.673042][T11707] ? __nf_unregister_net_hook+0x482/0x800 [ 255.678959][T11707] ? report_bug+0x2b3/0x500 [ 255.683494][T11707] ? __nf_unregister_net_hook+0x482/0x800 [ 255.689650][T11707] ? handle_bug+0x60/0x90 [ 255.694024][T11707] ? exc_invalid_op+0x1a/0x50 [ 255.698949][T11707] ? asm_exc_invalid_op+0x1a/0x20 [ 255.704046][T11707] ? __warn_printk+0x292/0x360 [ 255.709484][T11707] ? __nf_unregister_net_hook+0x482/0x800 [ 255.715270][T11707] nf_unregister_net_hook+0x98/0xe0 [ 255.721043][T11707] nft_table_disable+0x305/0x3c0 [ 255.726040][T11707] nf_tables_commit+0x4e7e/0x91e0 [ 255.731262][T11707] ? __pfx_nf_tables_commit+0x10/0x10 [ 255.736680][T11707] ? do_syscall_64+0xf3/0x230 [ 255.741487][T11707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.747687][T11707] ? nfnetlink_rcv+0x1265/0x2ab0 [ 255.752651][T11707] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 255.757839][T11707] nfnetlink_rcv+0xc77/0x2ab0 [ 255.762577][T11707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.767877][T11707] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.773106][T11707] ? skb_clone+0x240/0x390 [ 255.777622][T11707] ? __pfx_lock_release+0x10/0x10 [ 255.782697][T11707] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.788010][T11707] netlink_unicast+0x7f6/0x990 [ 255.792827][T11707] ? __pfx_netlink_unicast+0x10/0x10 [ 255.798217][T11707] ? __virt_addr_valid+0x183/0x530 [ 255.803449][T11707] ? __check_object_size+0x48e/0x900 [ 255.808862][T11707] netlink_sendmsg+0x8e4/0xcb0 [ 255.814171][T11707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.820045][T11707] ? aa_sock_msg_perm+0x91/0x160 [ 255.825054][T11707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.830457][T11707] __sock_sendmsg+0x221/0x270 [ 255.835177][T11707] ____sys_sendmsg+0x52a/0x7e0 [ 255.840181][T11707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.845516][T11707] __sys_sendmsg+0x292/0x380 [ 255.850264][T11707] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.855446][T11707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.861891][T11707] ? do_syscall_64+0x100/0x230 [ 255.866685][T11707] ? do_syscall_64+0xb6/0x230 [ 255.871488][T11707] do_syscall_64+0xf3/0x230 [ 255.876017][T11707] ? clear_bhb_loop+0x35/0x90 [ 255.880866][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.886965][T11707] RIP: 0033:0x7f3bfe37dff9 [ 255.891485][T11707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.897592][ T5243] Bluetooth: hci0: command tx timeout [ 255.911522][T11707] RSP: 002b:00007f3bff1fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.911613][T11707] RAX: ffffffffffffffda RBX: 00007f3bfe535f80 RCX: 00007f3bfe37dff9 [ 255.911631][T11707] RDX: 0000000000040010 RSI: 0000000020000240 RDI: 0000000000000003 [ 255.911646][T11707] RBP: 00007f3bfe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 255.911659][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.911672][T11707] R13: 0000000000000000 R14: 00007f3bfe535f80 R15: 00007fff127040d8 [ 255.911704][T11707] [ 255.911725][T11707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.911737][T11707] CPU: 0 UID: 0 PID: 11707 Comm: syz.4.1852 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 255.911758][T11707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.911770][T11707] Call Trace: [ 255.911778][T11707] [ 255.911786][T11707] dump_stack_lvl+0x241/0x360 [ 255.911810][T11707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.911828][T11707] ? __pfx__printk+0x10/0x10 [ 255.911860][T11707] ? vscnprintf+0x5d/0x90 [ 255.911883][T11707] panic+0x349/0x880 [ 255.911910][T11707] ? __warn+0x177/0x4e0 [ 255.911930][T11707] ? __pfx_panic+0x10/0x10 [ 255.911972][T11707] __warn+0x34b/0x4e0 [ 255.911991][T11707] ? __nf_unregister_net_hook+0x482/0x800 [ 255.912018][T11707] report_bug+0x2b3/0x500 [ 255.912049][T11707] ? __nf_unregister_net_hook+0x482/0x800 [ 255.912077][T11707] handle_bug+0x60/0x90 [ 255.912095][T11707] exc_invalid_op+0x1a/0x50 [ 255.912114][T11707] asm_exc_invalid_op+0x1a/0x20 [ 255.912140][T11707] RIP: 0010:__nf_unregister_net_hook+0x482/0x800 [ 255.912166][T11707] Code: 01 90 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 6d 03 00 00 48 8b 04 24 8b 10 48 c7 c7 a0 3f 13 8d 8b 74 24 1c e8 5f ff 7b f7 90 <0f> 0b 90 90 e9 39 01 00 00 e8 f0 02 bb f7 e9 5e fc ff ff e8 e6 02 [ 255.912182][T11707] RSP: 0018:ffffc9000486ef00 EFLAGS: 00010246 [ 255.912199][T11707] RAX: 789495961ce19900 RBX: ffff888069756a00 RCX: 0000000000040000 [ 255.912214][T11707] RDX: ffffc9000c6f5000 RSI: 00000000000026ab RDI: 00000000000026ac [ 255.912228][T11707] RBP: dffffc0000000000 R08: ffffffff8155daa2 R09: 1ffff110170c519a [ 255.912242][T11707] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802715d940 [ 255.912256][T11707] R13: ffff88802715ea50 R14: 0000000000000004 R15: ffff888067836800 [ 255.912276][T11707] ? __warn_printk+0x292/0x360 [ 255.912311][T11707] nf_unregister_net_hook+0x98/0xe0 [ 255.912336][T11707] nft_table_disable+0x305/0x3c0 [ 255.912362][T11707] nf_tables_commit+0x4e7e/0x91e0 [ 255.912420][T11707] ? __pfx_nf_tables_commit+0x10/0x10 [ 255.912444][T11707] ? do_syscall_64+0xf3/0x230 [ 255.912461][T11707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.912528][T11707] ? nfnetlink_rcv+0x1265/0x2ab0 [ 255.912547][T11707] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 255.912571][T11707] nfnetlink_rcv+0xc77/0x2ab0 [ 255.912620][T11707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.912684][T11707] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.912709][T11707] ? skb_clone+0x240/0x390 [ 255.912728][T11707] ? __pfx_lock_release+0x10/0x10 [ 255.912768][T11707] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.912797][T11707] netlink_unicast+0x7f6/0x990 [ 255.912829][T11707] ? __pfx_netlink_unicast+0x10/0x10 [ 255.912852][T11707] ? __virt_addr_valid+0x183/0x530 [ 255.912875][T11707] ? __check_object_size+0x48e/0x900 [ 255.912901][T11707] netlink_sendmsg+0x8e4/0xcb0 [ 255.912931][T11707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.912953][T11707] ? aa_sock_msg_perm+0x91/0x160 [ 255.912979][T11707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.912995][T11707] __sock_sendmsg+0x221/0x270 [ 255.913022][T11707] ____sys_sendmsg+0x52a/0x7e0 [ 255.913056][T11707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.913092][T11707] __sys_sendmsg+0x292/0x380 [ 255.913114][T11707] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.913173][T11707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.913200][T11707] ? do_syscall_64+0x100/0x230 [ 255.913221][T11707] ? do_syscall_64+0xb6/0x230 [ 255.913241][T11707] do_syscall_64+0xf3/0x230 [ 255.913259][T11707] ? clear_bhb_loop+0x35/0x90 [ 255.913279][T11707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.913304][T11707] RIP: 0033:0x7f3bfe37dff9 [ 255.913320][T11707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.913336][T11707] RSP: 002b:00007f3bff1fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.913355][T11707] RAX: ffffffffffffffda RBX: 00007f3bfe535f80 RCX: 00007f3bfe37dff9 [ 255.913369][T11707] RDX: 0000000000040010 RSI: 0000000020000240 RDI: 0000000000000003 [ 255.913381][T11707] RBP: 00007f3bfe3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 255.913394][T11707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.913406][T11707] R13: 0000000000000000 R14: 00007f3bfe535f80 R15: 00007fff127040d8 [ 255.913438][T11707] [ 255.917374][T11707] Kernel Offset: disabled