last executing test programs: 1m3.061935817s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 1m3.061925433s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 58.934064817s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 47.638116921s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 32.679227191s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 21.97604998s ago: executing program 1 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21.85859855s ago: executing program 3 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)) 20.177193434s ago: executing program 1 (id=1970): unshare(0x42000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000009", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) pipe(&(0x7f00000001c0)) socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xe, 0xef, &(0x7f0000000300)=""/239, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x28, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x95, "93fe2563ff1932fab537271b83549f239d609958173d22ff3c18055c75115b851801bf347df239b62387e555540bbbac68542db131a2df2d1d23ce0cb96dfa9409c3fca97c839b0c54ca5304c15076fd411e68506cbb035f18a73b7ec0246b5b74c7c14ac24a74b581e4e3b855fbb62ca74d81459bddfac6bd340246086f987b06cfc4be7fece870e1cbe52fdb17a05e2714e2adb8"}, &(0x7f0000000040)=0xb9) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x259, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 18.321224778s ago: executing program 0 (id=1986): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="b4000000000000007910280000000000150000000000000095000000040000009ee3fd3fb812ca5fa206e5f5a663e44259594903aa2c7c73c41069731415510985d32ff27f416867e7e90fef8b13c29962f3c680c829f6c6b88c22f4e37af7bc6d592140df63026c2313725312ba18ea77c834ef80fa17cc0fb3928fc61b45e6c54e1bf618a0c6f50c0ec682e20d7332860eac63b2b1ba0b908004328fac6715959b948cfd82a77524fbe9ef43966d246be6d79564bacd8ab0664449f77e482ae2e9e2d07251b445cf7350ce52abe1843a0d64440381bae4a111f562f4d8b01354d9343b581fcfd86befed0534525ea92b09fd20d7b4cc77f6793ce7207d88a72f136af30c516bf05c45f5551c8453146a4e7424e27025e4e9679609349ac2ee34a6708bc4dd63afce3df464915923331ffa6613e9888bdcc66236eff3e14973bcda2fa982000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40008893) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r3], 0x24}}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427", 0x9}], 0x1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r6 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) (async, rerun: 32) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2d8, 0x168, 0x9, 0x0, 0xb, 0x3e8, 0x250, 0x250, 0x3e8, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0x7f00007f], [], 'batadv_slave_1\x00', 'sit0\x00', {}, {}, 0x6, 0x0, 0x0, 0x9}, 0x6000000, 0x290, 0x2d8, 0x0, {0x0, 0x28e}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0xff, 0xffffffff, 0xff000000], @ipv4=@broadcast, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x1000, 0x4, 0x77, 0x4e23, 0x4e21, 0x4e20, 0x4e23, 0x140, 0x280}, 0x180, 0x3006, 0x4e20, 0x4e22, 0x4e22, 0x4e21}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'dvmrp0\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {0xff}, 0x1, 0x8, 0x4, 0x12}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa, 0x6, 0x10000, 'pptp\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_emit_ethernet(0x74, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1, 0x0, @void, @value}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000)) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0x4}]}, 0x1c}}, 0x4000) 18.029634033s ago: executing program 0 (id=1988): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1e79f1f47e01f496, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3d, 0x9, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x4, 0x6}, @typed={0x8, 0x134, 0x0, 0x0, @uid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000003c0)={0x24, r3, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 18.019550754s ago: executing program 4 (id=1989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x40000) 17.838627568s ago: executing program 2 (id=1990): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0xe, 0x3, 0x8, 0x8, 0x8}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7c, 0x0, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x100}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x4}}, 0x0, @default, 0x1007, @val={0x0, 0x17, @random="91ec8e1fb74f7029ad3aa632389c0ec3e9cc83fdb060fd"}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x3c, 0x4b}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE={0x4}]]}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x80000000, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0xb54, 0x8}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c011}, 0x4010) 17.811304482s ago: executing program 4 (id=1991): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2e67ca747b6f121a}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x400000, 0x100000}, 0xc) socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r9, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xfffffe9c) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 17.624007464s ago: executing program 0 (id=1992): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x50, 0x20, 0x0, 0xfffffffe}, {0x0, 0x0, 0x48, 0x2000003}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @mcast1, 0xfffffffd}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)='\r\n', 0x2, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 17.623595186s ago: executing program 2 (id=1993): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 17.560521964s ago: executing program 4 (id=1994): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000714010028bd7000fcdbdf25080001000100000008004400", @ANYRES32, @ANYBLOB="050054000100000008000100020000000c0001"], 0x4c}, 0x1, 0x0, 0x0, 0xc854}, 0x8010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x1, 0x21, "35b8e78205ee3a7b8d61b1815e1f8ffb5859192bbfb9ad4066633a1739ab7dfd2b"}) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @remote, 0xffffffff, 0x100006}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r5, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x7, 0xa, {{0x26, 0x4, 0x1, 0x9, 0x98, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0x8, 0xf1, 0x0, 0x4, [0x7]}, @rr={0x7, 0xf, 0x2d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_addr={0x44, 0x1c, 0x2d, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@remote, 0x1}, {@remote, 0x5e}]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0xe, [0x40]}, @lsrr={0x83, 0x23, 0x81, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @broadcast, @broadcast, @private=0xa010100, @local, @remote]}, @ssrr={0x89, 0x23, 0x8d, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @broadcast, @multicast1, @loopback, @rand_addr=0x64010101]}]}}}}}) 17.366628591s ago: executing program 2 (id=1995): r0 = socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x202, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a081, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/10, 0xa, 0x41, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffffc}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}]}}]}, 0x4c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, r8, 0x303, 0x0, 0x25dfdbff, {0xa}}, 0x14}}, 0x4000004) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000040), 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x1004d, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES16=r4, @ANYRES32=r4], 0x48}}, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r11, 0x29, 0x45, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000300)=0x80000002, 0x12) 16.903942735s ago: executing program 1 (id=1996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="530200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000000000001aea422d88e8bb002300ecfef0a77b61bd9edb0116226e617b00"/42], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000300000085000000c700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r5, 0x2e, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000000c0)={{0x67, @local, 0x4e24, 0x10001, 'sh\x00', 0xa, 0x11, 0x33}, {@multicast1, 0x4e23, 0x4, 0x8000, 0x2, 0x39a}}, 0x44) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 16.714931918s ago: executing program 0 (id=1997): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0x10}]}) close(0x3) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) 16.102588112s ago: executing program 4 (id=1998): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d0, 0x230, 0x98, 0x230, 0x198, 0x98, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x6], 0x0, 0x6}}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 15.963850535s ago: executing program 2 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$netlink(0x10, 0x3, 0x5d4709a21b7306e9) (async) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0xfffb}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000200)={@link_local, @random="000000000001", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x50, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x50, 0x0, @opaque="3b26ee6b5faec125953a1ad1be9903311658fd4f030ae150f9da0ee33871ebc9ba3b6365762235bb24394bdd4f5828a27259bf0c67e69b9652060aa32ed2322d5a04a69b8119aa4a"}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x8000, 0x7, 0xfbe, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x67, 0x0, 0x5, 0x2d, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x8, [{@loopback, 0x1ff}, {@broadcast, 0x401}]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_newroute={0x34, 0x18, 0x200, 0x9, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x5, 0xfe, 0x1, 0x0, 0x7, 0x200}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r6}]}, 0x34}}, 0xa0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="e0000000110001002cbd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="00000100000000001a0024001d452a79a2614dc6ac059ecf1abe1cfd8b4ab0f39fdc0000080020001000000008002e000200000008002900914b000030001a80280002802400018008ffffffffffffff7f00000001000000000006000300000008000a00ff00f3000400070008001300"], 0xe0}}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 15.949486002s ago: executing program 0 (id=2000): r0 = socket$kcm(0x10, 0x2, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (rerun: 64) 15.933091504s ago: executing program 1 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@setlink={0xf8, 0x13, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VF_PORTS={0x60, 0x18, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "89d5f1f5db58611ec278e7a9ec81cf76"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "65c08a62b15981bfc4e3aebcd934df07"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "db2bbdb152dc9e28ea3860559e9b72e4"}, @IFLA_PORT_VF={0x8, 0x1, 0x6ca0}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "58c44c8db280134f77b9df3cac96e505"}]}]}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x99a}, {0x8, 0x12, 0x0, 0x0, 0x1a04}, {0x8, 0xc, 0x0, 0x0, 0x6319}, {0x8, 0x12, 0x0, 0x0, 0x5}, {0x8, 0x9, 0x0, 0x0, 0x81}, {0x8, 0x1e, 0x0, 0x0, 0x3e9}, {0x8, 0x19}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4306}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0xf8}}, 0x40000) 15.850311521s ago: executing program 1 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x80, 0xc, &(0x7f0000000140)="9f22fb47e8317292047a04bf", 0xa, 0x81, 0x6, 0x1, 0x6, 0x0, 0x6, 'syz0\x00'}) 15.78793681s ago: executing program 4 (id=2003): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x2c, r6, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010003904fefffffffeffffff00000000", @ANYRES32=r7, @ANYBLOB="000000009011120008001680040001800500110009000000"], 0x30}}, 0x20000010) (async) unshare(0x22020400) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 15.78637698s ago: executing program 2 (id=2004): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4c000) r1 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0xd913fc8b0880b1ad}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x40, 0x28, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff2, 0x5}, {0xfff1, 0xffe0}, {0xfff1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3d, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x40, 0xa}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xa5007a6c58d25193) 15.673451648s ago: executing program 0 (id=2005): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 15.595045225s ago: executing program 1 (id=2006): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)="59cd2b9a6868406df68207c13b3bb31b3dc7c1b8075bc70f4362e5d77b20ba197e7661", 0x23}, 0x1, 0x0, 0x0, 0x20004050}, 0x20004014) (async) sendmsg$802154_raw(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)="59cd2b9a6868406df68207c13b3bb31b3dc7c1b8075bc70f4362e5d77b20ba197e7661", 0x23}, 0x1, 0x0, 0x0, 0x20004050}, 0x20004014) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$key(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') socket(0x26, 0x3, 0x0) (async) socket(0x26, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000040)='u', 0x1, 0x44805, &(0x7f00000000c0)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000040)='u', 0x1, 0x44805, &(0x7f00000000c0)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 20.37045ms ago: executing program 2 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x144}], 0x1, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x21, 0x800, 0x10) bind$alg(r4, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xa2, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup, r7, 0x1c, 0x0, 0xffffffffffffffff, @void, @value=r7}, 0x20) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400020000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x381, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0x720, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r11, 0x1, 0x5, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 19.911774ms ago: executing program 4 (id=2008): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0xffffff3f) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000240)="23c25159b09dd92bb0996d8339bc50bd5de323512924beed71cd7878f01616248c13d4b54409e829abf37cc19e620f98737beed08534041487ea677acd82da359fbe35acf4f091864eb39d3b8a0e696584ae2dedc4fb7358e56af42cad87d6e0d08a11e1b0ad2d26f730cb6d5867c4794b585e2730a015defebb346def9b835941fd9fa73aa583f06fdab7914dcf4bf652b8084039a90ef9f2bc4e6f47b380239b8a5ec3ebde57d313e62fcd86266ad8de9a7a44f118b24ddd4e0629eb5e90e1a929", 0xc2}], 0x1}}], 0x1, 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000100)={0x3000000000000, 0x20, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000001c0)=0x1f, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r11, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x58, r11, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="86df1c74a218"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x7, 0x1000, 0x2, 0x40007, 0x80000f84, 0x4}, 0x1c) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000004f00010000000000fcdbdf25400078000020000000"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 19.777605ms ago: executing program 32 (id=2005): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 19.620221ms ago: executing program 33 (id=2006): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)="59cd2b9a6868406df68207c13b3bb31b3dc7c1b8075bc70f4362e5d77b20ba197e7661", 0x23}, 0x1, 0x0, 0x0, 0x20004050}, 0x20004014) (async) sendmsg$802154_raw(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)="59cd2b9a6868406df68207c13b3bb31b3dc7c1b8075bc70f4362e5d77b20ba197e7661", 0x23}, 0x1, 0x0, 0x0, 0x20004050}, 0x20004014) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$key(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') socket(0x26, 0x3, 0x0) (async) socket(0x26, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000040)='u', 0x1, 0x44805, &(0x7f00000000c0)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000040)='u', 0x1, 0x44805, &(0x7f00000000c0)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 0s ago: executing program 34 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x144}], 0x1, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x21, 0x800, 0x10) bind$alg(r4, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xa2, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup, r7, 0x1c, 0x0, 0xffffffffffffffff, @void, @value=r7}, 0x20) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400020000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x381, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0x720, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r11, 0x1, 0x5, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) kernel console output (not intermixed with test programs): ng over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.864238][T11259] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 233.130175][T11281] netlink: 'syz.1.1464': attribute type 3 has an invalid length. [ 233.146421][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 233.176775][T11279] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 233.409418][ T6586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.698974][ T6586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.011584][T11315] __nla_validate_parse: 1 callbacks suppressed [ 234.011605][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 234.131162][ T6586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.270405][ T6586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.478587][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.489471][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.497515][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.506974][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.515729][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.525865][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.744688][ T6586] bridge_slave_1: left allmulticast mode [ 234.754962][ T6586] bridge_slave_1: left promiscuous mode [ 234.760755][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.801273][ T6586] bridge_slave_0: left allmulticast mode [ 234.819090][ T6586] bridge_slave_0: left promiscuous mode [ 234.840178][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.354142][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.377340][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.401101][ T6586] bond0 (unregistering): Released all slaves [ 235.516456][T11339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.762339][T11348] team0: No ports can be present during mode change [ 236.344831][ T6586] hsr_slave_0: left promiscuous mode [ 236.384953][ T6586] hsr_slave_1: left promiscuous mode [ 236.391119][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.414066][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.424136][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'. [ 236.490251][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.514574][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.568537][ T5837] Bluetooth: hci3: command tx timeout [ 236.606801][ T6586] veth1_macvtap: left promiscuous mode [ 236.612382][ T6586] veth0_macvtap: left promiscuous mode [ 236.627998][ T6586] veth1_vlan: left promiscuous mode [ 236.633424][ T6586] veth0_vlan: left promiscuous mode [ 237.366616][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 237.439004][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 238.073546][T11390] netlink: 'syz.0.1494': attribute type 39 has an invalid length. [ 238.098424][T11328] chnl_net:caif_netlink_parms(): no params data found [ 238.220677][T11398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1496'. [ 238.486573][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.493991][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.501580][T11328] bridge_slave_0: entered allmulticast mode [ 238.509114][T11328] bridge_slave_0: entered promiscuous mode [ 238.560907][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.584623][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.615154][T11328] bridge_slave_1: entered allmulticast mode [ 238.626171][T11328] bridge_slave_1: entered promiscuous mode [ 238.642667][ T5837] Bluetooth: hci3: command tx timeout [ 238.722639][T11423] tap0: tun_chr_ioctl cmd 1074025677 [ 238.740902][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 238.750913][T11423] tap0: linktype set to 805 [ 238.769442][T11425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1503'. [ 238.787640][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1503'. [ 238.814516][T11423] tap0: tun_chr_ioctl cmd 1074025673 [ 238.842523][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 238.851857][T11429] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 238.863556][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.872774][T11429] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 238.885178][T11429] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1504'. [ 238.896300][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.066414][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 239.107561][T11328] team0: Port device team_slave_0 added [ 239.118701][T11328] team0: Port device team_slave_1 added [ 239.212998][T11446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1509'. [ 239.231713][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 239.537665][T11454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1511'. [ 239.554896][T11454] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1511'. [ 240.169270][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1505'. [ 240.222835][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.244992][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.305808][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.341055][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.363985][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.412478][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.445619][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 240.473348][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 240.575713][T11328] hsr_slave_0: entered promiscuous mode [ 240.596616][T11328] hsr_slave_1: entered promiscuous mode [ 240.715951][ T5837] Bluetooth: hci3: command tx timeout [ 240.827138][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 240.947669][T11485] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 241.001053][T11485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.172759][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1520'. [ 241.285531][T11328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.329622][T11328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.349469][T11328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.392829][T11497] netlink: 'syz.1.1522': attribute type 62 has an invalid length. [ 241.494530][T11328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.668107][T11506] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.677915][T11506] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.687322][T11506] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.696637][T11506] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.879801][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.914707][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.932993][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.940185][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.988326][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.995521][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.061749][T11519] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 242.109384][T11518] batman_adv: batadv0: Adding interface: dummy0 [ 242.116060][T11518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.154413][T11518] batman_adv: batadv0: Interface activated: dummy0 [ 242.183585][T11522] batadv0: mtu less than device minimum [ 242.201637][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.214653][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.227182][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.239740][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.252223][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.264781][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.277316][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.289795][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.302239][T11522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.795374][ T5837] Bluetooth: hci3: command tx timeout [ 242.943321][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.095310][T11328] veth0_vlan: entered promiscuous mode [ 243.124575][T11328] veth1_vlan: entered promiscuous mode [ 243.200907][T11328] veth0_macvtap: entered promiscuous mode [ 243.230501][T11328] veth1_macvtap: entered promiscuous mode [ 243.264730][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.287565][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.318060][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.341864][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.361460][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.472598][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.504969][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.545110][T11328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.573833][T11328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.596382][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.659472][T11570] Cannot find set identified by id 0 to match [ 243.709522][T11328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.734449][T11328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.743653][T11328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.752978][T11328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.122678][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.142966][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.201389][T11585] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 244.321996][T11585] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 244.367776][T11585] team0: Port device wlan1 added [ 244.397930][ T6585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.418069][ T6585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.630633][T11601] pimreg: entered allmulticast mode [ 244.982169][T11616] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 58714 - 0 [ 245.002634][T11623] __nla_validate_parse: 3 callbacks suppressed [ 245.002657][T11623] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1553'. [ 245.045334][T11616] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 58714 - 0 [ 245.054919][T11616] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 58714 - 0 [ 245.068219][T11616] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 58714 - 0 [ 245.093628][T11616] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53802 - 0 [ 245.115850][T11616] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53802 - 0 [ 245.124405][T11616] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53802 - 0 [ 245.170857][T11616] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53802 - 0 [ 245.201907][T11616] geneve2: entered promiscuous mode [ 245.212735][T11616] geneve2: entered allmulticast mode [ 245.269630][T11635] macsec1: entered promiscuous mode [ 245.294969][T11635] syz_tun: entered promiscuous mode [ 245.306767][T11635] macsec1: entered allmulticast mode [ 245.322854][T11635] syz_tun: entered allmulticast mode [ 245.374969][T11635] syz_tun: left allmulticast mode [ 245.399022][T11635] syz_tun: left promiscuous mode [ 245.812954][T11614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.902082][T11614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.963971][T11614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.187804][T11614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.235146][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 246.279086][T11651] pimreg: entered allmulticast mode [ 246.316264][T11651] pimreg: left allmulticast mode [ 246.400850][T11654] vlan2: entered allmulticast mode [ 246.414279][T11654] : entered allmulticast mode [ 246.424225][T11654] : left allmulticast mode [ 246.562671][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 246.625198][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.643959][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.652664][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.661184][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.676605][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.690243][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.789586][T11614] bridge_slave_1: left allmulticast mode [ 246.813100][T11614] bridge_slave_1: left promiscuous mode [ 246.823880][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1573'. [ 246.824111][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.833533][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 246.883097][T11614] bridge_slave_0: left allmulticast mode [ 246.889160][T11614] bridge_slave_0: left promiscuous mode [ 246.895147][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.341298][T11614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.352984][T11614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.365020][T11614] bond0 (unregistering): Released all slaves [ 247.393964][T11686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1573'. [ 247.414930][T11686] net_ratelimit: 14 callbacks suppressed [ 247.414950][T11686] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 247.583431][T11696] FAULT_INJECTION: forcing a failure. [ 247.583431][T11696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.618115][T11696] CPU: 0 UID: 0 PID: 11696 Comm: syz.1.1574 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 247.618141][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 247.618167][T11696] Call Trace: [ 247.618174][T11696] [ 247.618182][T11696] dump_stack_lvl+0x241/0x360 [ 247.618209][T11696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.618228][T11696] ? __pfx__printk+0x10/0x10 [ 247.618257][T11696] ? __pfx_lock_release+0x10/0x10 [ 247.618289][T11696] should_fail_ex+0x40a/0x550 [ 247.618314][T11696] _copy_from_user+0x2d/0xb0 [ 247.618334][T11696] btf_new_fd+0x324/0xd30 [ 247.618368][T11696] ? __pfx_btf_new_fd+0x10/0x10 [ 247.618398][T11696] ? bpf_btf_load+0xcf/0x1a0 [ 247.618426][T11696] __sys_bpf+0x6ef/0x810 [ 247.618451][T11696] ? __pfx___sys_bpf+0x10/0x10 [ 247.618486][T11696] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.618517][T11696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.618565][T11696] ? do_syscall_64+0x100/0x230 [ 247.618595][T11696] __x64_sys_bpf+0x7c/0x90 [ 247.618615][T11696] do_syscall_64+0xf3/0x230 [ 247.618640][T11696] ? clear_bhb_loop+0x35/0x90 [ 247.618668][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.618692][T11696] RIP: 0033:0x7f9cfb58cde9 [ 247.618719][T11696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.618735][T11696] RSP: 002b:00007f9cfc3e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.618753][T11696] RAX: ffffffffffffffda RBX: 00007f9cfb7a5fa0 RCX: 00007f9cfb58cde9 [ 247.618765][T11696] RDX: 0000000000000028 RSI: 00004000000000c0 RDI: 0000000000000012 [ 247.618776][T11696] RBP: 00007f9cfc3e4090 R08: 0000000000000000 R09: 0000000000000000 [ 247.618786][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.618796][T11696] R13: 0000000000000001 R14: 00007f9cfb7a5fa0 R15: 00007ffe5e87afb8 [ 247.618821][T11696] [ 247.927420][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 248.039626][T11700] netlink: 'syz.4.1575': attribute type 1 has an invalid length. [ 248.108992][T11709] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1578'. [ 248.121063][T11709] 0·: renamed from hsr0 [ 248.132313][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 248.148658][T11709] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.173392][T11709] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.229625][T11709] 0·: entered allmulticast mode [ 248.234554][T11709] hsr_slave_0: entered allmulticast mode [ 248.296237][T11709] hsr_slave_1: entered allmulticast mode [ 248.314361][T11709] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 248.772325][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1584'. [ 248.795283][ T5840] Bluetooth: hci3: command tx timeout [ 248.861995][T11730] vlan2: entered promiscuous mode [ 248.876591][T11730] vlan2: entered allmulticast mode [ 249.065573][T11745] FAULT_INJECTION: forcing a failure. [ 249.065573][T11745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.081805][T11743] netlink: 'syz.4.1586': attribute type 4 has an invalid length. [ 249.096969][T11614] hsr_slave_0: left promiscuous mode [ 249.108519][T11614] hsr_slave_1: left promiscuous mode [ 249.113985][T11745] CPU: 1 UID: 0 PID: 11745 Comm: syz.1.1587 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 249.114010][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.114022][T11745] Call Trace: [ 249.114030][T11745] [ 249.114037][T11745] dump_stack_lvl+0x241/0x360 [ 249.114065][T11745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.114086][T11745] ? __pfx__printk+0x10/0x10 [ 249.114129][T11745] should_fail_ex+0x40a/0x550 [ 249.114157][T11745] _copy_to_user+0x31/0xb0 [ 249.114180][T11745] bpf_verifier_vlog+0x46d/0x860 [ 249.114223][T11745] __btf_verifier_log+0xd5/0x120 [ 249.114249][T11745] ? btf_parse_hdr+0x219/0x710 [ 249.114275][T11745] ? __pfx___btf_verifier_log+0x10/0x10 [ 249.114303][T11745] ? btf_parse_hdr+0x1e3/0x710 [ 249.114335][T11745] btf_parse_hdr+0x2a3/0x710 [ 249.114367][T11745] btf_new_fd+0x391/0xd30 [ 249.114406][T11745] ? __pfx_btf_new_fd+0x10/0x10 [ 249.114449][T11745] ? bpf_btf_load+0xcf/0x1a0 [ 249.114462][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.114477][T11745] __sys_bpf+0x6ef/0x810 [ 249.114504][T11745] ? __pfx___sys_bpf+0x10/0x10 [ 249.114543][T11745] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.114579][T11745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.114612][T11745] ? do_syscall_64+0x100/0x230 [ 249.114648][T11745] __x64_sys_bpf+0x7c/0x90 [ 249.114671][T11745] do_syscall_64+0xf3/0x230 [ 249.114702][T11745] ? clear_bhb_loop+0x35/0x90 [ 249.114735][T11745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.114764][T11745] RIP: 0033:0x7f9cfb58cde9 [ 249.114789][T11745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.114808][T11745] RSP: 002b:00007f9cfc3e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.114831][T11745] RAX: ffffffffffffffda RBX: 00007f9cfb7a5fa0 RCX: 00007f9cfb58cde9 [ 249.114847][T11745] RDX: 0000000000000028 RSI: 00004000000000c0 RDI: 0000000000000012 [ 249.114861][T11745] RBP: 00007f9cfc3e4090 R08: 0000000000000000 R09: 0000000000000000 [ 249.114876][T11745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.114888][T11745] R13: 0000000000000001 R14: 00007f9cfb7a5fa0 R15: 00007ffe5e87afb8 [ 249.114920][T11745] [ 249.340743][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.350956][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.359210][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.392720][T11614] veth1_macvtap: left promiscuous mode [ 249.398489][T11614] veth0_macvtap: left promiscuous mode [ 249.404317][T11614] veth1_vlan: left promiscuous mode [ 249.409820][T11614] veth0_vlan: left promiscuous mode [ 249.516702][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.027611][T11614] team0 (unregistering): Port device team_slave_1 removed [ 250.071871][T11614] team0 (unregistering): Port device team_slave_0 removed [ 250.551303][T11674] chnl_net:caif_netlink_parms(): no params data found [ 250.756128][T11768] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1593'. [ 250.771083][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.779538][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.786870][T11674] bridge_slave_0: entered allmulticast mode [ 250.794150][T11674] bridge_slave_0: entered promiscuous mode [ 250.802958][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.810719][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.818366][T11674] bridge_slave_1: entered allmulticast mode [ 250.826214][T11674] bridge_slave_1: entered promiscuous mode [ 250.875140][ T5840] Bluetooth: hci3: command tx timeout [ 250.903049][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.933029][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.077767][T11674] team0: Port device team_slave_0 added [ 251.108469][T11674] team0: Port device team_slave_1 added [ 251.180812][T11674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.185121][T11779] netlink: 'syz.4.1597': attribute type 39 has an invalid length. [ 251.195714][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.195794][T11674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.231344][T11674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.250437][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.313205][T11674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.362442][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 251.445410][ T7542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.489570][T11785] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 251.497588][T11674] hsr_slave_0: entered promiscuous mode [ 251.498543][T11674] hsr_slave_1: entered promiscuous mode [ 251.659318][T11787] bond0: (slave gretap2): making interface the new active one [ 251.670851][T11787] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 251.680320][T11791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1599'. [ 251.843959][T11797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.870607][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.983394][T11801] sock: sock_set_timeout: `syz.4.1603' (pid 11801) tries to set negative timeout [ 252.345550][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 252.606751][T11674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.636267][T11674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.672100][T11674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.684979][T11674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.823973][T11674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.869377][T11830] macsec1: entered promiscuous mode [ 252.874655][T11830] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 252.895043][T11830] macsec1: entered allmulticast mode [ 252.900383][T11830] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 252.938987][T11674] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.955041][ T5840] Bluetooth: hci3: command tx timeout [ 252.969230][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.976526][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.999757][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.006964][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.225059][T11674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.262718][T11844] syzkaller1: entered promiscuous mode [ 253.270005][T11844] syzkaller1: entered allmulticast mode [ 253.381017][T11674] veth0_vlan: entered promiscuous mode [ 253.400730][T11674] veth1_vlan: entered promiscuous mode [ 253.448135][T11674] veth0_macvtap: entered promiscuous mode [ 253.468950][T11674] veth1_macvtap: entered promiscuous mode [ 253.494667][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.518835][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.533209][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.546081][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.557639][T11674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.570303][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.583210][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 253.604412][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.614444][T11674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.634024][T11674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.651283][T11674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.678045][T11674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.704892][T11674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.713972][T11674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.732983][T11674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.873610][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.900966][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.934627][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 253.976123][T11875] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1625'. [ 253.994117][T11875] unsupported nlmsg_type 40 [ 254.020259][ T6586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.045632][ T6586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.115705][T11880] FAULT_INJECTION: forcing a failure. [ 254.115705][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.158812][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.1.1628 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 254.158839][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.158850][T11880] Call Trace: [ 254.158856][T11880] [ 254.158863][T11880] dump_stack_lvl+0x241/0x360 [ 254.158891][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.158909][T11880] ? __pfx__printk+0x10/0x10 [ 254.158946][T11880] should_fail_ex+0x40a/0x550 [ 254.158972][T11880] _copy_to_user+0x31/0xb0 [ 254.158991][T11880] bpf_verifier_vlog+0x46d/0x860 [ 254.159027][T11880] __btf_verifier_log+0xd5/0x120 [ 254.159049][T11880] ? bpf_verifier_vlog+0x47a/0x860 [ 254.159077][T11880] ? __pfx___btf_verifier_log+0x10/0x10 [ 254.159102][T11880] ? btf_parse_hdr+0x1e3/0x710 [ 254.159131][T11880] btf_parse_hdr+0x34d/0x710 [ 254.159160][T11880] btf_new_fd+0x391/0xd30 [ 254.159194][T11880] ? __pfx_btf_new_fd+0x10/0x10 [ 254.159222][T11880] ? bpf_btf_load+0xcf/0x1a0 [ 254.159246][T11880] __sys_bpf+0x6ef/0x810 [ 254.159269][T11880] ? __pfx___sys_bpf+0x10/0x10 [ 254.159306][T11880] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.159333][T11880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.159358][T11880] ? do_syscall_64+0x100/0x230 [ 254.159386][T11880] __x64_sys_bpf+0x7c/0x90 [ 254.159405][T11880] do_syscall_64+0xf3/0x230 [ 254.159429][T11880] ? clear_bhb_loop+0x35/0x90 [ 254.159457][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.159480][T11880] RIP: 0033:0x7f9cfb58cde9 [ 254.159496][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.159511][T11880] RSP: 002b:00007f9cfc3e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.159530][T11880] RAX: ffffffffffffffda RBX: 00007f9cfb7a5fa0 RCX: 00007f9cfb58cde9 [ 254.159543][T11880] RDX: 0000000000000028 RSI: 00004000000000c0 RDI: 0000000000000012 [ 254.159554][T11880] RBP: 00007f9cfc3e4090 R08: 0000000000000000 R09: 0000000000000000 [ 254.159565][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.159575][T11880] R13: 0000000000000001 R14: 00007f9cfb7a5fa0 R15: 00007ffe5e87afb8 [ 254.159602][T11880] [ 254.555847][ T6583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.635711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.023232][T11892] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.409571][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1635'. [ 255.562967][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 255.688447][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 255.705076][T11918] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 255.713673][T11918] bridge0: port 3(batadv1) entered blocking state [ 255.720467][T11918] bridge0: port 3(batadv1) entered disabled state [ 255.727314][T11918] batadv1: entered allmulticast mode [ 255.734271][T11918] batadv1: entered promiscuous mode [ 255.901738][T11614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.917264][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.211199][ T6583] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 256.220947][ T6583] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 256.692894][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 256.878056][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.889850][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.905104][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.917305][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.939696][T11939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1646'. [ 256.949099][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.960121][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.269601][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1647'. [ 257.462383][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 258.485427][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.837167][T11614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.863758][T11942] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 258.948634][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 258.979170][T11614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.035355][ T5840] Bluetooth: hci3: command tx timeout [ 259.070802][T11614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.245228][T11614] bridge_slave_1: left allmulticast mode [ 259.251061][T11614] bridge_slave_1: left promiscuous mode [ 259.262039][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.326978][T11614] bridge_slave_0: left allmulticast mode [ 259.345004][T11614] bridge_slave_0: left promiscuous mode [ 259.362309][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.749403][T11978] netlink: 'syz.1.1656': attribute type 10 has an invalid length. [ 259.882237][T11614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.897221][T11614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.915612][T11614] bond0 (unregistering): Released all slaves [ 259.945369][T11969] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 259.956003][T11970] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 260.172044][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1657'. [ 260.231720][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 260.232777][T11985] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 260.249919][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 260.264929][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1657'. [ 260.420103][ T6583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.591451][T11934] chnl_net:caif_netlink_parms(): no params data found [ 260.733900][T11997] netlink: 'syz.0.1662': attribute type 30 has an invalid length. [ 261.115044][ T5840] Bluetooth: hci3: command tx timeout [ 261.230046][T11614] hsr_slave_0: left promiscuous mode [ 261.240747][T11614] hsr_slave_1: left promiscuous mode [ 261.268754][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.286521][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.294520][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.312378][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.352502][T11614] veth1_macvtap: left promiscuous mode [ 261.358701][T11614] veth0_macvtap: left promiscuous mode [ 261.364320][T11614] veth1_vlan: left promiscuous mode [ 261.369840][T11614] veth0_vlan: left promiscuous mode [ 262.093265][T11614] team0 (unregistering): Port device team_slave_1 removed [ 262.169718][T11614] team0 (unregistering): Port device team_slave_0 removed [ 262.743299][T11934] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.750672][T11934] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.758297][T11934] bridge_slave_0: entered allmulticast mode [ 262.765052][T11934] bridge_slave_0: entered promiscuous mode [ 262.772486][T11934] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.788203][T11934] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.795711][T11934] bridge_slave_1: entered allmulticast mode [ 262.803572][T11934] bridge_slave_1: entered promiscuous mode [ 262.865239][T11934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.886656][T11934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.948383][T11934] team0: Port device team_slave_0 added [ 262.958035][T11934] team0: Port device team_slave_1 added [ 262.984529][T11934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.991841][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.018016][T11934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.030801][T11934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.038064][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.066548][T11934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.130757][T11934] hsr_slave_0: entered promiscuous mode [ 263.144008][T11934] hsr_slave_1: entered promiscuous mode [ 263.195352][ T5840] Bluetooth: hci3: command tx timeout [ 263.606393][T11934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.616115][T11934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.624930][T11934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.635102][T11934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.697616][T11934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.719595][T11934] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.749583][T11614] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.756710][T11614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.776295][T11614] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.783415][T11614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.939468][T11934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.974464][T11934] veth0_vlan: entered promiscuous mode [ 263.984190][T11934] veth1_vlan: entered promiscuous mode [ 264.008804][T11934] veth0_macvtap: entered promiscuous mode [ 264.019334][T11934] veth1_macvtap: entered promiscuous mode [ 264.038071][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.049427][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.059759][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.070573][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.082074][T11934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.093651][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.104805][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.114661][T11934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.125631][T11934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.136580][T11934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.149931][T11934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.159181][T11934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.168827][T11934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.177593][T11934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.238793][T11614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.256536][T11614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.273556][ T6583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.282440][ T6583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.516922][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.155270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.164584][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.290668][T11614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.189990][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.199338][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.207592][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.216233][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.223926][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.231554][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.507638][T12007] chnl_net:caif_netlink_parms(): no params data found [ 267.574378][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.581721][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.589425][T12007] bridge_slave_0: entered allmulticast mode [ 267.597146][T12007] bridge_slave_0: entered promiscuous mode [ 267.607363][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.614508][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.621860][T12007] bridge_slave_1: entered allmulticast mode [ 267.629345][T12007] bridge_slave_1: entered promiscuous mode [ 267.658611][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.670830][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.703326][T12007] team0: Port device team_slave_0 added [ 267.712692][T12007] team0: Port device team_slave_1 added [ 267.735653][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.742631][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.774848][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.806774][T11614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.820365][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.827761][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.854080][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.897136][T11614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.929934][T12007] hsr_slave_0: entered promiscuous mode [ 267.936973][T12007] hsr_slave_1: entered promiscuous mode [ 267.943121][T12007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.950876][T12007] Cannot create hsr debugfs directory [ 267.981184][T11614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.111149][T11614] bridge_slave_1: left allmulticast mode [ 268.121041][T11614] bridge_slave_1: left promiscuous mode [ 268.127011][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.140474][T11614] bridge_slave_0: left allmulticast mode [ 268.146484][T11614] bridge_slave_0: left promiscuous mode [ 268.152226][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.493750][T11614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.510321][T11614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.521797][T11614] bond0 (unregistering): Released all slaves [ 268.858244][T12007] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.867677][T12007] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.882453][T12007] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.892921][T12007] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.967602][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.985649][T12007] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.003373][T11615] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.010578][T11615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.020290][T11615] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.027469][T11615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.216545][T11614] hsr_slave_0: left promiscuous mode [ 269.222592][T11614] hsr_slave_1: left promiscuous mode [ 269.230532][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.239031][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.246873][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.254298][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.275398][ T5837] Bluetooth: hci3: command tx timeout [ 269.282804][T11614] veth1_macvtap: left promiscuous mode [ 269.288445][T11614] veth0_macvtap: left promiscuous mode [ 269.294005][T11614] veth1_vlan: left promiscuous mode [ 269.299686][T11614] veth0_vlan: left promiscuous mode [ 269.708860][T11614] team0 (unregistering): Port device team_slave_1 removed [ 269.750699][T11614] team0 (unregistering): Port device team_slave_0 removed [ 270.150707][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.204476][T12007] veth0_vlan: entered promiscuous mode [ 270.218287][T12007] veth1_vlan: entered promiscuous mode [ 270.277348][T12007] veth0_macvtap: entered promiscuous mode [ 270.292158][T12007] veth1_macvtap: entered promiscuous mode [ 270.315771][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.331662][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.345079][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.355734][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.368348][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.384601][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.395830][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.407384][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.418060][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.431057][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.442403][T12007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.453270][T12007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.468666][T12007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.480484][T12007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.546890][T11609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.554755][T11609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.588454][T11609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.597004][T11609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.277171][T11609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.286424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.519483][T11609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.132920][T11609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.555481][ T7543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.599292][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.612054][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.621136][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.634216][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.649444][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.658397][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.662119][T11609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.861810][T11609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.997101][T11609] bridge_slave_1: left allmulticast mode [ 273.002792][T11609] bridge_slave_1: left promiscuous mode [ 273.008635][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.018014][T11609] bridge_slave_0: left allmulticast mode [ 273.023669][T11609] bridge_slave_0: left promiscuous mode [ 273.030411][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.336667][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.347402][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.358403][T11609] bond0 (unregistering): Released all slaves [ 273.373645][T12021] chnl_net:caif_netlink_parms(): no params data found [ 273.483914][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.491289][T12021] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.499671][T12021] bridge_slave_0: entered allmulticast mode [ 273.507375][T12021] bridge_slave_0: entered promiscuous mode [ 273.518914][T12021] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.526157][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.533309][T12021] bridge_slave_1: entered allmulticast mode [ 273.540427][T12021] bridge_slave_1: entered promiscuous mode [ 273.596279][T12021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.609151][T12021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.653115][T12021] team0: Port device team_slave_0 added [ 273.690939][T12021] team0: Port device team_slave_1 added [ 273.774270][T12021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.793753][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.831120][T12021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.856478][T11609] hsr_slave_0: left promiscuous mode [ 273.862257][T11609] hsr_slave_1: left promiscuous mode [ 273.868273][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.875895][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.883606][T11609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.891186][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.914536][T11609] veth1_macvtap: left promiscuous mode [ 273.920266][T11609] veth0_macvtap: left promiscuous mode [ 273.925976][T11609] veth1_vlan: left promiscuous mode [ 273.931291][T11609] veth0_vlan: left promiscuous mode [ 274.334332][T11609] team0 (unregistering): Port device team_slave_1 removed [ 274.378805][T11609] team0 (unregistering): Port device team_slave_0 removed [ 274.719520][ T5837] Bluetooth: hci3: command tx timeout [ 274.752318][T12021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.759373][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.793552][T12021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.860098][T12021] hsr_slave_0: entered promiscuous mode [ 274.866439][T12021] hsr_slave_1: entered promiscuous mode [ 275.269059][T12021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.279407][T12021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.288862][T12021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.298625][T12021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.357642][T12021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.377427][T12021] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.390378][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.397550][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.413987][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.421100][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.569538][T12021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.604059][T12021] veth0_vlan: entered promiscuous mode [ 275.615625][T12021] veth1_vlan: entered promiscuous mode [ 275.642466][T12021] veth0_macvtap: entered promiscuous mode [ 275.650950][T12021] veth1_macvtap: entered promiscuous mode [ 275.667258][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.678542][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.688462][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.699578][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.710728][T12021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.723246][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.733748][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.743601][T12021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.754066][T12021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.765093][T12021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.778432][T12021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.787681][T12021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.796578][T12021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.805602][T12021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.868900][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.884178][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.904459][ T6586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.913064][ T6586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.035556][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.839909][ T6586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.932267][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.947201][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.956602][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.964536][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.972225][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.980392][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.268139][T12035] chnl_net:caif_netlink_parms(): no params data found [ 279.322580][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.329834][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.337341][T12035] bridge_slave_0: entered allmulticast mode [ 279.344393][T12035] bridge_slave_0: entered promiscuous mode [ 279.352816][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.360945][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.368790][T12035] bridge_slave_1: entered allmulticast mode [ 279.375963][T12035] bridge_slave_1: entered promiscuous mode [ 279.402179][ T6586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.440799][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.453691][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.502928][ T6586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.526325][T12035] team0: Port device team_slave_0 added [ 279.533841][T12035] team0: Port device team_slave_1 added [ 279.560763][T12035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.571354][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.597936][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.606679][T12035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.620159][T12035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.627307][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.653389][T12035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.684984][ T6586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.721726][T12035] hsr_slave_0: entered promiscuous mode [ 279.728551][T12035] hsr_slave_1: entered promiscuous mode [ 279.734947][T12035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.742562][T12035] Cannot create hsr debugfs directory [ 279.849069][ T6586] bridge_slave_1: left allmulticast mode [ 279.855796][ T6586] bridge_slave_1: left promiscuous mode [ 279.861492][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.870838][ T6586] bridge_slave_0: left allmulticast mode [ 279.877356][ T6586] bridge_slave_0: left promiscuous mode [ 279.883744][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.233229][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.244293][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.254571][ T6586] bond0 (unregistering): Released all slaves [ 280.702860][ T6586] hsr_slave_0: left promiscuous mode [ 280.712473][ T6586] hsr_slave_1: left promiscuous mode [ 280.718894][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.726553][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.734211][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.741782][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.768244][ T6586] veth1_macvtap: left promiscuous mode [ 280.773781][ T6586] veth0_macvtap: left promiscuous mode [ 280.779417][ T6586] veth1_vlan: left promiscuous mode [ 280.784678][ T6586] veth0_vlan: left promiscuous mode [ 281.041445][ T5837] Bluetooth: hci3: command tx timeout [ 281.062434][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'. [ 281.158364][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 281.194323][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.322889][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 281.362179][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 281.773590][T12035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.802484][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1666'. [ 281.845268][T12043] delete_channel: no stack [ 281.860675][T12043] delete_channel: no stack [ 281.866937][T12035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.895529][T12035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.907117][T12061] tipc: Can't bind to reserved service type 1 [ 281.922706][T12043] delete_channel: no stack [ 281.928049][T12035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.094669][T12068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.103539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.227326][T12035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.264312][T12035] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.316901][T11615] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.324059][T11615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.363036][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.370207][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.751631][T12102] lo speed is unknown, defaulting to 1000 [ 282.789302][T12102] lo speed is unknown, defaulting to 1000 [ 282.806652][T11614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.843991][T12102] lo speed is unknown, defaulting to 1000 [ 282.933075][T12035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.064263][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'. [ 283.116825][ T5837] Bluetooth: hci3: command tx timeout [ 283.270901][T12102] infiniband syz0: set active [ 283.271816][T12035] veth0_vlan: entered promiscuous mode [ 283.276173][T12102] infiniband syz0: added lo [ 283.311597][ T5883] lo speed is unknown, defaulting to 1000 [ 283.311857][T12035] veth1_vlan: entered promiscuous mode [ 283.331834][T12102] RDS/IB: syz0: added [ 283.336293][T12102] smc: adding ib device syz0 with port count 1 [ 283.346635][T12102] smc: ib device syz0 port 1 has pnetid [ 283.362902][T12102] lo speed is unknown, defaulting to 1000 [ 283.384177][ T5881] lo speed is unknown, defaulting to 1000 [ 283.405807][T12035] veth0_macvtap: entered promiscuous mode [ 283.417481][T12035] veth1_macvtap: entered promiscuous mode [ 283.439573][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.450187][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.461253][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.471901][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.483660][T12035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.531842][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.567554][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.599795][T12035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.631870][T12035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.664133][T12035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.702709][T12102] lo speed is unknown, defaulting to 1000 [ 283.737664][T12035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.763926][T12035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.822704][T12035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.854819][T12035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.994272][T12102] lo speed is unknown, defaulting to 1000 [ 284.072026][T12138] macvlan0: entered promiscuous mode [ 284.079397][T12138] ipvlan0: entered promiscuous mode [ 284.093696][T12138] ipvlan0: left promiscuous mode [ 284.110388][T12138] macvlan0: left promiscuous mode [ 284.222953][T11615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.254934][T11615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.293249][T12102] lo speed is unknown, defaulting to 1000 [ 284.320192][T11609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.334859][T11609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.417067][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 284.662747][T12102] lo speed is unknown, defaulting to 1000 [ 284.675326][T12163] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1695'. [ 284.689409][T12162] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.697914][T12162] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.706179][T12162] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.714373][T12162] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.723873][T12163] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1695'. [ 284.736698][T12162] vxlan1: entered promiscuous mode [ 284.744866][T12162] vxlan1: entered allmulticast mode [ 284.783954][T12162] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.792947][T12162] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.802097][T12162] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.810788][T12162] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.880445][T12163] bond0: entered promiscuous mode [ 284.887029][T12163] bond0: entered allmulticast mode [ 285.232332][T12183] batman_adv: batadv0: Adding interface: dummy0 [ 285.239177][T12183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.292199][T12183] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 285.492031][T11614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.644517][T11614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.806495][T11614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.936633][T11614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.101041][T11614] bridge_slave_1: left allmulticast mode [ 286.106906][T11614] bridge_slave_1: left promiscuous mode [ 286.112623][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.123424][T11614] bridge_slave_0: left allmulticast mode [ 286.129459][T11614] bridge_slave_0: left promiscuous mode [ 286.135427][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.484030][T11614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.501629][T11614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.513572][T11614] bond0 (unregistering): Released all slaves [ 286.651927][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.663382][T12204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1703'. [ 286.703760][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 286.719711][T12207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1702'. [ 286.916429][T12216] netlink: 'syz.4.1706': attribute type 9 has an invalid length. [ 287.121456][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.133508][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.142069][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.165264][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.173027][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.180588][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.209659][T12218] batman_adv: batadv0: Interface deactivated: vlan0 [ 287.216603][T12218] batadv0: mtu less than device minimum [ 287.224424][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.236901][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.249420][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.251969][T12230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 287.261956][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.282157][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.293764][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.305570][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.317294][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.329702][T12218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.450586][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1709'. [ 287.632667][T12235] bond4: entered promiscuous mode [ 287.639040][T12231] xt_CT: No such helper "pptp" [ 287.668681][T12235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.997796][T12235] bond4 (unregistering): Released all slaves [ 288.014037][T12230] syzkaller1: entered promiscuous mode [ 288.037722][T12230] syzkaller1: entered allmulticast mode [ 288.115804][T11614] hsr_slave_0: left promiscuous mode [ 288.136219][T11614] hsr_slave_1: left promiscuous mode [ 288.142330][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.169823][T11614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.195688][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.209801][T11614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.258032][T11614] veth1_macvtap: left promiscuous mode [ 288.266111][T11614] veth0_macvtap: left promiscuous mode [ 288.276118][T11614] veth1_vlan: left promiscuous mode [ 288.281445][T11614] veth0_vlan: left promiscuous mode [ 288.852172][T11614] team0 (unregistering): Port device team_slave_1 removed [ 288.902545][T11614] team0 (unregistering): Port device team_slave_0 removed [ 289.275557][ T5837] Bluetooth: hci3: command tx timeout [ 289.343782][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 289.613308][T12226] lo speed is unknown, defaulting to 1000 [ 289.626759][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 289.646810][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 289.865905][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 289.895932][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 289.916453][T12289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1723'. [ 290.189210][T12301] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 290.198539][T12301] macvlan0: entered allmulticast mode [ 290.204915][T12301] veth1_vlan: entered allmulticast mode [ 290.212891][T12301] : (slave macvlan0): Enslaving as an active interface with an up link [ 290.226069][T12304] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 290.275504][T12226] chnl_net:caif_netlink_parms(): no params data found [ 290.296793][T12304] veth1_vlan: left allmulticast mode [ 290.307929][T12306] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 290.327308][T12306] bond4: (slave vti1): Error -95 calling set_mac_address [ 290.532314][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.551131][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.571556][T12226] bridge_slave_0: entered allmulticast mode [ 290.584286][T12226] bridge_slave_0: entered promiscuous mode [ 290.623544][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.633959][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.650228][T12226] bridge_slave_1: entered allmulticast mode [ 290.667302][T12226] bridge_slave_1: entered promiscuous mode [ 290.749994][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.827285][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.852177][T12328] netlink: 'syz.1.1733': attribute type 4 has an invalid length. [ 290.930319][T12226] team0: Port device team_slave_0 added [ 290.972196][T12226] team0: Port device team_slave_1 added [ 290.974363][T12333] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 291.063966][T12337] netlink: 'syz.4.1736': attribute type 7 has an invalid length. [ 291.084298][T12333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.093766][T12226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.103337][T12313] lo speed is unknown, defaulting to 1000 [ 291.115121][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.250514][T12226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.264740][T12337] netlink: 'syz.4.1736': attribute type 7 has an invalid length. [ 291.316084][T12226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.323150][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.366285][T12226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.369730][ T5837] Bluetooth: hci3: command tx timeout [ 291.469167][T12226] hsr_slave_0: entered promiscuous mode [ 291.475707][T12226] hsr_slave_1: entered promiscuous mode [ 291.700417][T12356] __nla_validate_parse: 5 callbacks suppressed [ 291.700437][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 291.958133][T12364] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 292.284111][T12372] net_ratelimit: 18 callbacks suppressed [ 292.284133][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.299186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.311617][T12372] tipc: Started in network mode [ 292.322677][T12372] tipc: Node identity 16d03e223bb6, cluster identity 4711 [ 292.354984][T12372] tipc: Enabled bearer , priority 0 [ 292.362312][T12374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.364131][T12372] +: renamed from syzkaller0 [ 292.406225][T12372] tipc: Disabling bearer [ 292.483289][T12381] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1752'. [ 292.620507][T12389] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1755'. [ 292.631201][T12389] nbd: illegal input index 16744192 [ 292.792957][T12226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.806153][T12226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.815774][T12226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.829636][T12226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.920534][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1760'. [ 292.943726][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.999695][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.037330][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.044468][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.073110][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 293.107997][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.115164][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.288045][T12226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.310393][T12226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.430734][T12419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'. [ 293.443497][ T5837] Bluetooth: hci3: command tx timeout [ 293.483478][T12421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'. [ 293.650431][T12426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.659408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.696947][T12426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.705254][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.788263][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.811668][T12428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.820400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.908029][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.005428][T12226] veth0_vlan: entered promiscuous mode [ 294.049926][T12226] veth1_vlan: entered promiscuous mode [ 294.145975][T12226] veth0_macvtap: entered promiscuous mode [ 294.181163][T12226] veth1_macvtap: entered promiscuous mode [ 294.203943][T12439] sctp: [Deprecated]: syz.0.1770 (pid 12439) Use of int in max_burst socket option. [ 294.203943][T12439] Use struct sctp_assoc_value instead [ 294.219600][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.264611][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.297507][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.328653][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.340529][T12226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.360115][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.385276][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.407338][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.428284][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.452098][T12226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.499791][T12226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.533604][T12226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.559627][T12226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.576081][T12226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.733515][T11615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.752787][T11615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.804559][T12462] IPVS: Error connecting to the multicast addr [ 294.827982][T11615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.870380][T11615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.257534][T12485] x_tables: duplicate underflow at hook 1 [ 295.482883][T12489] netlink: 'syz.2.1779': attribute type 10 has an invalid length. [ 295.499075][T12489] netlink: 'syz.2.1779': attribute type 10 has an invalid length. [ 295.514935][T12489] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1779'. [ 295.788671][T12460] warn_alloc: 1 callbacks suppressed [ 295.788693][T12460] syz.0.1774: vmalloc error: size 808484864, failed to allocated page array size 1579072, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.812193][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.0.1774 Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 295.812222][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.812235][T12460] Call Trace: [ 295.812241][T12460] [ 295.812250][T12460] dump_stack_lvl+0x241/0x360 [ 295.812279][T12460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.812301][T12460] ? __pfx__printk+0x10/0x10 [ 295.812338][T12460] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 295.812362][T12460] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 295.812388][T12460] warn_alloc+0x278/0x410 [ 295.812422][T12460] ? __pfx_warn_alloc+0x10/0x10 [ 295.812456][T12460] ? ip_set_sockfn_get+0x1bb/0xd90 [ 295.812479][T12460] ? __get_vm_area_node+0x1c8/0x2d0 [ 295.812503][T12460] ? __get_vm_area_node+0x25c/0x2d0 [ 295.812534][T12460] __vmalloc_node_range_noprof+0x62f/0x1380 [ 295.812588][T12460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.812623][T12460] ? bpf_lsm_capable+0x9/0x10 [ 295.812650][T12460] ? ip_set_sockfn_get+0x1bb/0xd90 [ 295.812673][T12460] vmalloc_noprof+0x79/0x90 [ 295.812699][T12460] ? ip_set_sockfn_get+0x1bb/0xd90 [ 295.812722][T12460] ip_set_sockfn_get+0x1bb/0xd90 [ 295.812744][T12460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.812779][T12460] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 295.812802][T12460] ? __pfx_lock_release+0x10/0x10 [ 295.812839][T12460] nf_getsockopt+0x299/0x2c0 [ 295.812871][T12460] ip_getsockopt+0x222/0x2e0 [ 295.812901][T12460] ? __pfx_ip_getsockopt+0x10/0x10 [ 295.812934][T12460] ? __pfx___might_resched+0x10/0x10 [ 295.812968][T12460] dccp_getsockopt+0x163/0x1910 [ 295.812995][T12460] ? __pfx_dccp_getsockopt+0x10/0x10 [ 295.813015][T12460] ? __might_fault+0xaa/0x120 [ 295.813044][T12460] ? sock_common_getsockopt+0x2e/0xb0 [ 295.813070][T12460] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.813100][T12460] do_sock_getsockopt+0x3c4/0x7e0 [ 295.813139][T12460] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 295.813169][T12460] ? __fget_files+0x2a/0x410 [ 295.813193][T12460] ? __fget_files+0x395/0x410 [ 295.813213][T12460] ? __fget_files+0x2a/0x410 [ 295.813242][T12460] __x64_sys_getsockopt+0x2a1/0x370 [ 295.813281][T12460] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 295.813313][T12460] ? trace_sys_enter+0x74/0x120 [ 295.813343][T12460] ? rcu_is_watching+0x15/0xb0 [ 295.813363][T12460] ? trace_sys_enter+0x25/0x120 [ 295.813408][T12460] do_syscall_64+0xf3/0x230 [ 295.813435][T12460] ? clear_bhb_loop+0x35/0x90 [ 295.813466][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.813492][T12460] RIP: 0033:0x7f34de18cde9 [ 295.813509][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.813526][T12460] RSP: 002b:00007f34df055038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 295.813546][T12460] RAX: ffffffffffffffda RBX: 00007f34de3a5fa0 RCX: 00007f34de18cde9 [ 295.813561][T12460] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 000000000000000d [ 295.813572][T12460] RBP: 00007f34de20e2a0 R08: 0000400000000000 R09: 0000000000000000 [ 295.813585][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.813596][T12460] R13: 0000000000000000 R14: 00007f34de3a5fa0 R15: 00007ffc560be7b8 [ 295.813641][T12460] [ 295.814567][T12460] Mem-Info: [ 296.145159][T12460] active_anon:5343 inactive_anon:0 isolated_anon:0 [ 296.145159][T12460] active_file:1598 inactive_file:38406 isolated_file:0 [ 296.145159][T12460] unevictable:768 dirty:149 writeback:0 [ 296.145159][T12460] slab_reclaimable:11465 slab_unreclaimable:116082 [ 296.145159][T12460] mapped:29829 shmem:2753 pagetables:734 [ 296.145159][T12460] sec_pagetables:0 bounce:0 [ 296.145159][T12460] kernel_misc_reclaimable:0 [ 296.145159][T12460] free:1298775 free_pcp:1396 free_cma:0 [ 296.233489][T12460] Node 0 active_anon:23168kB inactive_anon:0kB active_file:6392kB inactive_file:153548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:600kB writeback:0kB shmem:11276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12080kB pagetables:2892kB sec_pagetables:0kB all_unreclaimable? no [ 296.288581][T12460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.345941][T12460] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.388766][T12460] lowmem_reserve[]: 0 2491 2491 0 0 [ 296.399867][T12460] Node 0 DMA32 free:1267688kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:27132kB inactive_anon:0kB active_file:6392kB inactive_file:152968kB unevictable:1536kB writepending:596kB present:3129332kB managed:2551084kB mlocked:0kB bounce:0kB free_pcp:5260kB local_pcp:2052kB free_cma:0kB [ 296.437612][T12460] lowmem_reserve[]: 0 0 0 0 0 [ 296.447174][T12460] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 296.505041][T12460] lowmem_reserve[]: 0 0 0 0 0 [ 296.512156][T12460] Node 1 Normal free:3906432kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.560834][T12460] lowmem_reserve[]: 0 0 0 0 0 [ 296.572975][T12460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.598371][T12460] Node 0 DMA32: 49*4kB (UE) 13*8kB (UE) 36*16kB (UME) 2*32kB (UE) 8*64kB (ME) 45*128kB (UME) 17*256kB (M) 10*512kB (UM) 7*1024kB (UM) 5*2048kB (UME) 301*4096kB (M) = 1266988kB [ 296.663059][T12460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.715870][T12460] Node 1 Normal: 238*4kB (U) 65*8kB (UME) 38*16kB (UME) 207*32kB (UME) 92*64kB (UME) 35*128kB (UME) 13*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 6*2048kB (UE) 943*4096kB (M) = 3906432kB [ 296.746073][T12460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.761206][T12460] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.771668][T12460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.781378][T12460] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.790916][T12460] 45007 total pagecache pages [ 296.796410][T12460] 0 pages in swap cache [ 296.800590][T12460] Free swap = 124996kB [ 296.805076][T12460] Total swap = 124996kB [ 296.809249][T12460] 2097051 pages RAM [ 296.813065][T12460] 0 pages HighMem/MovableOnly [ 296.834853][T12460] 427494 pages reserved [ 296.843371][T12460] 0 pages cma reserved [ 298.198071][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.245627][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.253802][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.263805][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.271734][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.279573][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.005533][T11613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.035771][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1787'. [ 299.187702][T11613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.233565][T12505] lo speed is unknown, defaulting to 1000 [ 299.478894][T12535] net_ratelimit: 10 callbacks suppressed [ 299.478915][T12535] openvswitch: netlink: Message has 25 unknown bytes. [ 299.498968][T11613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.515828][T12536] netlink: 'syz.2.1793': attribute type 11 has an invalid length. [ 299.526865][T12537] openvswitch: netlink: Message has 25 unknown bytes. [ 299.784038][T12547] openvswitch: netlink: Tunnel attr 306 out of range max 16 [ 299.793236][T11613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.824614][T12518] lo speed is unknown, defaulting to 1000 [ 299.838878][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 299.848030][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 299.858109][T12549] netlink: 'syz.4.1798': attribute type 3 has an invalid length. [ 299.866331][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 299.887049][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 300.056013][T12553] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 300.076156][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.208889][T11613] bridge_slave_1: left allmulticast mode [ 300.214593][T11613] bridge_slave_1: left promiscuous mode [ 300.245541][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.312722][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1802'. [ 300.346112][T11613] bridge_slave_0: left allmulticast mode [ 300.351807][T11613] bridge_slave_0: left promiscuous mode [ 300.395133][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.405398][ T5837] Bluetooth: hci3: command tx timeout [ 300.728259][ T7542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.958540][T12567] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 301.208983][T11613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.228174][T11613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.244144][T11613] bond0 (unregistering): Released all slaves [ 301.269307][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 301.542302][T12574] bridge0: port 1(70·) entered blocking state [ 301.555150][T12574] bridge0: port 1(70·) entered disabled state [ 301.562083][T12574] 0·: entered promiscuous mode [ 301.633914][T12579] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 301.653546][T12576] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 301.704608][T12576] Bluetooth: MGMT ver 1.23 [ 302.158377][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1807'. [ 302.207856][T12555] lo speed is unknown, defaulting to 1000 [ 302.207961][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1807'. [ 302.225669][T12518] chnl_net:caif_netlink_parms(): no params data found [ 302.290702][T12588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1807'. [ 302.475229][ T5837] Bluetooth: hci3: command tx timeout [ 302.640940][T12603] netlink: 'syz.4.1810': attribute type 5 has an invalid length. [ 302.652123][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.664400][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.676003][T12518] bridge_slave_0: entered allmulticast mode [ 302.692672][T12518] bridge_slave_0: entered promiscuous mode [ 302.703013][T12518] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.710805][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.718118][T12518] bridge_slave_1: entered allmulticast mode [ 302.731657][T12518] bridge_slave_1: entered promiscuous mode [ 302.800602][T12558] lo speed is unknown, defaulting to 1000 [ 302.806882][T12518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.826942][T12518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.961221][T12518] team0: Port device team_slave_0 added [ 302.974375][T12615] syzkaller0: entered promiscuous mode [ 302.984382][T12615] syzkaller0: entered allmulticast mode [ 303.140517][T12518] team0: Port device team_slave_1 added [ 303.163550][T11613] hsr_slave_0: left promiscuous mode [ 303.169537][T11613] hsr_slave_1: left promiscuous mode [ 303.175563][T11613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.182991][T11613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.197140][T11613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.204577][T11613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.230371][T11613] veth1_macvtap: left promiscuous mode [ 303.236106][T11613] veth0_macvtap: left promiscuous mode [ 303.242932][T11613] veth1_vlan: left promiscuous mode [ 303.248429][T11613] veth0_vlan: left promiscuous mode [ 303.765866][T11613] team0 (unregistering): Port device team_slave_1 removed [ 303.810408][T11613] team0 (unregistering): Port device team_slave_0 removed [ 304.555712][ T5837] Bluetooth: hci3: command tx timeout [ 305.835249][ T6586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.901059][T12518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.908509][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.935704][T12518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.001326][T12518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.010874][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.049613][T12518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.477612][T12518] hsr_slave_0: entered promiscuous mode [ 306.483782][T12518] hsr_slave_1: entered promiscuous mode [ 306.639480][ T5837] Bluetooth: hci3: command tx timeout [ 306.729510][T12651] __nla_validate_parse: 65 callbacks suppressed [ 306.729529][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 307.203471][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1826'. [ 307.266498][T12663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1828'. [ 307.706326][T12673] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 307.755195][ T7542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.755620][T12673] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 307.817068][ T6583] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 307.818054][T12673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.844185][T12673] vlan2: entered promiscuous mode [ 307.850542][T12673] bond2: entered promiscuous mode [ 307.855766][T12673] ip6gretap1: entered promiscuous mode [ 307.863430][T12673] bond2: left promiscuous mode [ 307.868350][T12673] ip6gretap1: left promiscuous mode [ 307.988515][T11609] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 308.150503][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 308.151633][T12518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.195093][T12518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.226547][T12518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.250784][T12518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.470543][T12518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.538271][T12518] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.582412][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.589613][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.658260][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.665480][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.817239][T12714] batadv2: entered allmulticast mode [ 308.834515][T12714] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 309.199682][T12518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.324508][T12518] veth0_vlan: entered promiscuous mode [ 309.352368][T12518] veth1_vlan: entered promiscuous mode [ 309.402530][T12518] veth0_macvtap: entered promiscuous mode [ 309.419423][T12518] veth1_macvtap: entered promiscuous mode [ 309.451633][T12518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.485226][T12518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.488419][T12746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.504501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.520664][T12518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.541413][T12518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.562201][T12518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.568838][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 309.623378][T12518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.645366][T12518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.663096][T12752] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 309.667542][T12518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.690987][T12752] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1855'. [ 309.703713][T12518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.726059][T12518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.788735][T12518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.800169][T12518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.820096][T12518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.839630][T12518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.085113][T11613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.094097][T11613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.180528][T11612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.193955][T11612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.307221][T12773] can: request_module (can-proto-3) failed. [ 310.572841][T12790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1863'. [ 310.961491][ T6583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.968279][T12806] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.978072][T12806] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.986520][T12806] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.994711][T12806] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.062036][T12806] netlink: 'syz.1.1868': attribute type 6 has an invalid length. [ 311.080465][T12806] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1868'. [ 311.549229][ T6586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.267960][ T6586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.310023][T12816] lo speed is unknown, defaulting to 1000 [ 312.383582][ T6586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.464027][ T6586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.656036][ T6586] bridge_slave_1: left allmulticast mode [ 312.661722][ T6586] bridge_slave_1: left promiscuous mode [ 312.668248][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.683134][ T6586] bridge_slave_0: left allmulticast mode [ 312.689393][ T6586] bridge_slave_0: left promiscuous mode [ 312.695273][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.189876][ T6586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.215486][ T6586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.233989][ T6586] bond0 (unregistering): Released all slaves [ 313.266273][T12819] lo speed is unknown, defaulting to 1000 [ 313.509510][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.521065][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.535767][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.556380][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.564110][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.572784][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.653115][T12854] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 314.144452][T12861] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1884'. [ 314.158410][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 314.202405][T12864] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 314.281557][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 314.735936][T12846] lo speed is unknown, defaulting to 1000 [ 314.795886][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.927864][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 315.536390][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 315.675007][ T5840] Bluetooth: hci3: command tx timeout [ 315.740846][ T6586] hsr_slave_0: left promiscuous mode [ 315.764588][ T6586] hsr_slave_1: left promiscuous mode [ 315.796362][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.803920][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.831810][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.844838][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.892739][ T6586] veth1_macvtap: left promiscuous mode [ 315.913409][ T6586] veth0_macvtap: left promiscuous mode [ 315.933744][ T6586] veth1_vlan: left promiscuous mode [ 315.939173][ T6586] veth0_vlan: left promiscuous mode [ 316.411484][ T6586] team0 (unregistering): Port device team_slave_1 removed [ 316.454024][ T6586] team0 (unregistering): Port device team_slave_0 removed [ 316.720119][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.865410][T12880] lo speed is unknown, defaulting to 1000 [ 317.071449][T12846] chnl_net:caif_netlink_parms(): no params data found [ 317.137860][T12908] bond8: entered promiscuous mode [ 317.142975][T12908] bond8: entered allmulticast mode [ 317.161258][T12908] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.608103][T12846] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.642538][T12935] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1904'. [ 317.646004][T12846] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.677187][T12846] bridge_slave_0: entered allmulticast mode [ 317.687080][T12846] bridge_slave_0: entered promiscuous mode [ 317.717469][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.735434][T12846] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.742785][T12846] bridge_slave_1: entered allmulticast mode [ 317.761638][ T5840] Bluetooth: hci3: command tx timeout [ 317.796938][T12846] bridge_slave_1: entered promiscuous mode [ 317.881850][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 317.891014][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'. [ 318.101017][T12846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.128225][T12846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.277024][T12951] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 318.364041][T12846] team0: Port device team_slave_0 added [ 318.377994][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.387528][T12959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.397175][T12959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.406529][T12959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.415010][T12959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.423356][T12959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.434711][T12846] team0: Port device team_slave_1 added [ 318.499113][T12846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.513255][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.544622][T12846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.566811][T12846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.573797][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.608062][T12846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.631667][T12969] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 318.642019][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1915'. [ 318.656569][T12846] hsr_slave_0: entered promiscuous mode [ 318.661472][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1915'. [ 318.663145][T12846] hsr_slave_1: entered promiscuous mode [ 319.021943][T12984] openvswitch: netlink: IPv4 tun info is not correct [ 319.177501][T12990] __nla_validate_parse: 3 callbacks suppressed [ 319.177520][T12990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'. [ 319.367521][T12997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1927'. [ 319.371990][T12846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.402803][T12846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.431599][T12846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.455860][T13001] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1929'. [ 319.468347][T12998] netem: incorrect ge model size [ 319.473683][T12998] netem: change failed [ 319.485741][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1928'. [ 319.496565][T12846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.636521][T12846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.677808][T12846] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.696620][T11612] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.703812][T11612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.731195][T11612] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.738532][T11612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.753222][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 319.835054][ T5840] Bluetooth: hci3: command tx timeout [ 319.932001][T13016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 319.988886][T13016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 320.056545][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 320.111907][T12846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.262407][T12846] veth0_vlan: entered promiscuous mode [ 320.280277][T12846] veth1_vlan: entered promiscuous mode [ 320.419310][T12846] veth0_macvtap: entered promiscuous mode [ 320.451115][T12846] veth1_macvtap: entered promiscuous mode [ 320.517952][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.546119][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.561276][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.572578][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.583808][T12846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.594756][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.605660][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.615776][T12846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.626714][T12846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.638083][T12846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.673541][T13051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.684692][T12846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.704958][T12846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.724234][T12846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.736591][T12846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.951595][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.971522][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.017259][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 321.040853][T11609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.056986][T11609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.062740][T13066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1949'. [ 321.363552][T13048] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.516202][T13089] x_tables: duplicate underflow at hook 1 [ 321.552194][T13085] veth0_vlan: left allmulticast mode [ 321.559469][T13085] batman_adv: batadv0: Interface activated: vlan0 [ 321.642933][T13085] bridge1: left allmulticast mode [ 321.651795][T13085] veth3: left promiscuous mode [ 321.686033][T13085] bond1: left promiscuous mode [ 321.690990][T13085] batadv1: left promiscuous mode [ 321.696940][T13085] batadv1: left allmulticast mode [ 321.723387][T13085] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 321.734361][T13085] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 321.753120][T13085] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 321.763044][T13085] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 321.802377][ T5881] lo speed is unknown, defaulting to 1000 [ 321.832311][ T5937] net_ratelimit: 28 callbacks suppressed [ 321.832332][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.847134][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.897995][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.918043][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.005626][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.287992][T13114] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 322.300652][T13114] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 322.412435][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.427196][T13123] vlan4: entered allmulticast mode [ 322.477454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.496377][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.572879][T11615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.621056][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.635959][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.342694][T11615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.419313][T11615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.469925][T11615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.556165][T11615] bridge_slave_1: left allmulticast mode [ 323.561918][T11615] bridge_slave_1: left promiscuous mode [ 323.568681][T11615] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.577804][T11615] bridge_slave_0: left allmulticast mode [ 323.583480][T11615] bridge_slave_0: left promiscuous mode [ 323.589681][T11615] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.155832][T11615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.213686][T11615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.238363][T11615] bond0 (unregistering): Released all slaves [ 324.669941][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.681329][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.689442][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.736702][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.749036][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 324.757011][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.889469][T13162] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 325.008203][T13162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 325.047322][T13170] xt_l2tp: unknown flags: 10 [ 325.136455][T13169] __nla_validate_parse: 8 callbacks suppressed [ 325.136473][T13169] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1977'. [ 325.664260][T13134] lo speed is unknown, defaulting to 1000 [ 325.948960][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 326.301646][T13157] lo speed is unknown, defaulting to 1000 [ 326.611868][T13226] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 326.700416][T11615] hsr_slave_0: left promiscuous mode [ 326.712070][T11615] hsr_slave_1: left promiscuous mode [ 326.721003][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.734877][T11615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.757067][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.764655][T11615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.806425][ T5837] Bluetooth: hci3: command tx timeout [ 326.812237][T11615] veth1_macvtap: left promiscuous mode [ 326.812329][T11615] veth0_macvtap: left promiscuous mode [ 326.812475][T11615] veth1_vlan: left promiscuous mode [ 326.841497][T11615] veth0_vlan: left promiscuous mode [ 326.957494][ T5881] net_ratelimit: 13 callbacks suppressed [ 326.957514][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.477705][T11615] team0 (unregistering): Port device team_slave_1 removed [ 327.518890][T11615] team0 (unregistering): Port device team_slave_0 removed [ 327.602000][T11613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.065155][T13244] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 328.228958][T13157] chnl_net:caif_netlink_parms(): no params data found [ 328.442787][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 328.476583][T13263] netlink: 'syz.2.2004': attribute type 15 has an invalid length. [ 328.493804][T13267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.541980][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.557548][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.570833][T13157] bridge_slave_0: entered allmulticast mode [ 328.578757][T13157] bridge_slave_0: entered promiscuous mode [ 342.961281][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.969986][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.937537][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.948236][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.956329][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.964429][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.972740][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.980157][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.177706][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.204912][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.214251][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.222818][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.231069][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.238372][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.284661][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 345.306462][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 345.314585][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 345.333575][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 345.341162][ T5836] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 345.348640][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.192876][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 346.205081][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 346.212836][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 346.226771][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 346.234371][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 346.241784][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.035062][ T55] Bluetooth: hci5: command tx timeout [ 347.274991][ T55] Bluetooth: hci6: command tx timeout [ 347.435241][ T55] Bluetooth: hci7: command tx timeout [ 348.314954][ T55] Bluetooth: hci8: command tx timeout [ 349.114975][ T55] Bluetooth: hci5: command tx timeout [ 349.354982][ T55] Bluetooth: hci6: command tx timeout [ 349.514914][ T55] Bluetooth: hci7: command tx timeout [ 350.394878][ T55] Bluetooth: hci8: command tx timeout [ 351.194990][ T55] Bluetooth: hci5: command tx timeout [ 351.434885][ T55] Bluetooth: hci6: command tx timeout [ 351.594975][ T55] Bluetooth: hci7: command tx timeout [ 352.474894][ T55] Bluetooth: hci8: command tx timeout [ 353.274983][ T55] Bluetooth: hci5: command tx timeout [ 353.514934][ T55] Bluetooth: hci6: command tx timeout [ 353.674969][ T55] Bluetooth: hci7: command tx timeout [ 354.554913][ T55] Bluetooth: hci8: command tx timeout [ 386.659574][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 386.675051][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 386.682904][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 386.690961][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 386.699390][ T5836] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 386.706778][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 388.802622][ T5836] Bluetooth: hci9: command tx timeout [ 390.882284][ T5836] Bluetooth: hci9: command tx timeout [ 392.962749][ T5836] Bluetooth: hci9: command tx timeout [ 395.035035][ T5836] Bluetooth: hci9: command tx timeout [ 404.991411][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 405.001209][ T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 405.009189][ T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 405.017164][ T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 405.024793][ T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 405.033087][ T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 405.092084][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 405.111502][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 405.120022][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 405.135137][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 405.142719][ T5836] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 405.150246][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 405.873175][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 405.884592][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 405.904390][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 405.913254][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 405.921161][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 405.928609][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 406.913383][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 406.932959][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 406.942047][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 406.950984][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 406.965196][ T5836] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 406.972551][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 407.115038][ T5836] Bluetooth: hci10: command tx timeout [ 407.195002][ T5836] Bluetooth: hci11: command tx timeout [ 407.994986][ T5836] Bluetooth: hci12: command tx timeout [ 409.034959][ T5836] Bluetooth: hci13: command tx timeout [ 409.194932][ T5836] Bluetooth: hci10: command tx timeout [ 409.277517][ T5836] Bluetooth: hci11: command tx timeout [ 410.075010][ T5836] Bluetooth: hci12: command tx timeout [ 411.114947][ T5836] Bluetooth: hci13: command tx timeout [ 411.277110][ T5836] Bluetooth: hci10: command tx timeout [ 411.354969][ T5836] Bluetooth: hci11: command tx timeout [ 412.154922][ T5836] Bluetooth: hci12: command tx timeout [ 413.194905][ T5836] Bluetooth: hci13: command tx timeout [ 413.355164][ T5836] Bluetooth: hci10: command tx timeout [ 413.434886][ T5836] Bluetooth: hci11: command tx timeout [ 414.234933][ T5836] Bluetooth: hci12: command tx timeout [ 415.275126][ T5836] Bluetooth: hci13: command tx timeout [ 433.654716][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 433.661368][ C0] rcu: 0-....: (1 GPs behind) idle=9814/1/0x4000000000000000 softirq=70781/70787 fqs=5203 [ 433.672551][ C0] rcu: hardirqs softirqs csw/system [ 433.678985][ C0] rcu: number: 15 0 0 [ 433.685401][ C0] rcu: cputime: 173 52326 16 ==> 52520(ms) [ 433.693199][ C0] rcu: (t=10503 jiffies g=53969 q=1460 ncpus=2) [ 433.699551][ C0] CPU: 0 UID: 0 PID: 13157 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00187-g7bca2b2d5fcc #0 [ 433.699576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 433.699593][ C0] RIP: 0010:qdisc_peek_head+0x0/0x40 [ 433.699630][ C0] Code: c1 38 c1 0f 8c c3 fe ff ff 4c 89 e7 e8 49 fa 3c f8 e9 b6 fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 48 89 fb e8 13 62 d6 f7 48 81 c3 d8 00 00 00 48 89 [ 433.699646][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00000246 [ 433.699664][ C0] RAX: 1ffffffff2037ba1 RBX: ffffffff901bdd08 RCX: dffffc0000000000 [ 433.699678][ C0] RDX: ffff88802f919e00 RSI: 0000000000000000 RDI: ffff8880206b9800 [ 433.699691][ C0] RBP: ffff8880206b9800 R08: ffffffff89f71ebf R09: 1ffffffff285f308 [ 433.699705][ C0] R10: dffffc0000000000 R11: ffffffff89e8fc00 R12: 0000000000000002 [ 433.699718][ C0] R13: ffff88807ea82400 R14: 0000000000000006 R15: ffff88805e78c000 [ 433.699731][ C0] FS: 0000555578bfc500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 433.699748][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.699760][ C0] CR2: 0000000000000000 CR3: 000000005c6fa000 CR4: 00000000003526f0 [ 433.699776][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 433.699786][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.699798][ C0] Call Trace: [ 433.699805][ C0] [ 433.699813][ C0] ? rcu_dump_cpu_stacks+0x2ca/0x540 [ 433.699852][ C0] ? print_cpu_stall+0x2e9/0x5a0 [ 433.699882][ C0] ? rcu_sched_clock_irq+0xa1a/0x10e0 [ 433.699908][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 433.699938][ C0] ? update_process_times+0x242/0x2f0 [ 433.699965][ C0] ? tick_nohz_handler+0x37c/0x500 [ 433.699990][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 433.700012][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 433.700041][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 433.700084][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 433.700116][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 433.700148][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 433.700201][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 433.700233][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 433.700257][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.700288][ C0] ? __pfx_qdisc_peek_head+0x10/0x10 [ 433.700316][ C0] ? taprio_dequeue_from_txq+0x11f/0x930 [ 433.700356][ C0] ? __pfx_qdisc_peek_head+0x10/0x10 [ 433.700387][ C0] taprio_dequeue_from_txq+0x17f/0x930 [ 433.700418][ C0] taprio_dequeue_tc_priority+0x1b5/0x7a0 [ 433.700450][ C0] ? taprio_dequeue+0x26/0x550 [ 433.700467][ C0] taprio_dequeue+0x186/0x550 [ 433.700491][ C0] __qdisc_run+0x272/0x2180 [ 433.700540][ C0] qdisc_run+0xda/0x270 [ 433.700563][ C0] net_tx_action+0x896/0xa50 [ 433.700592][ C0] ? net_tx_action+0x702/0xa50 [ 433.700618][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 433.700642][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.700667][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 433.700698][ C0] handle_softirqs+0x2d4/0x9b0 [ 433.700728][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 433.700751][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 433.700785][ C0] ? irqtime_account_irq+0xd1/0x1d0 [ 433.700814][ C0] __irq_exit_rcu+0xf7/0x220 [ 433.700832][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 433.700859][ C0] irq_exit_rcu+0x9/0x30 [ 433.700874][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 433.700896][ C0] [ 433.700902][ C0] [ 433.700909][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.700933][ C0] RIP: 0010:lock_release+0x11/0xa30 [ 433.700956][ C0] Code: 65 16 8b 00 e9 99 f5 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 83 e4 e0 48 81 ec 00 01 00 00 49 89 f5 48 89 7c 24 18 65 48 8b [ 433.700971][ C0] RSP: 0018:ffffc90003467670 EFLAGS: 00000246 [ 433.700986][ C0] RAX: 0000000000000000 RBX: 0000000000000cc0 RCX: dffffc0000000000 [ 433.700998][ C0] RDX: 0000000000000001 RSI: ffffffff821a8edf RDI: ffffffff8ea392e0 [ 433.701010][ C0] RBP: ffffc90003467698 R08: ffffffff901b5377 R09: 1ffffffff2036a6e [ 433.701023][ C0] R10: dffffc0000000000 R11: fffffbfff2036a6f R12: 0000000000000000 [ 433.701035][ C0] R13: dffffc0000000000 R14: ffff88801de828c0 R15: 0000000000000cc0 [ 433.701057][ C0] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 433.701086][ C0] kmem_cache_alloc_node_noprof+0x4f/0x380 [ 433.701105][ C0] ? __alloc_skb+0x1c3/0x440 [ 433.701134][ C0] __alloc_skb+0x1c3/0x440 [ 433.701165][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 433.701194][ C0] ? netlink_ack_tlv_len+0x6e/0x200 [ 433.701224][ C0] netlink_ack+0x145/0xa50 [ 433.701267][ C0] netlink_rcv_skb+0x262/0x430 [ 433.701285][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 433.701307][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.701364][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.701385][ C0] netlink_unicast+0x7f6/0x990 [ 433.701422][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 433.701447][ C0] ? __virt_addr_valid+0x45f/0x530 [ 433.701475][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 433.701502][ C0] ? __check_object_size+0x47a/0x730 [ 433.701536][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 433.701566][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.701593][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 433.701623][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.701639][ C0] __sock_sendmsg+0x221/0x270 [ 433.701664][ C0] __sys_sendto+0x363/0x4c0 [ 433.701695][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 433.701746][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.701773][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.701802][ C0] __x64_sys_sendto+0xde/0x100 [ 433.701831][ C0] do_syscall_64+0xf3/0x230 [ 433.701856][ C0] ? clear_bhb_loop+0x35/0x90 [ 433.701883][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.701906][ C0] RIP: 0033:0x7fba7298ec7c [ 433.701922][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 433.701937][ C0] RSP: 002b:00007ffea5f96890 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 433.701954][ C0] RAX: ffffffffffffffda RBX: 00007fba736d4620 RCX: 00007fba7298ec7c [ 433.701967][ C0] RDX: 0000000000000028 RSI: 00007fba736d4670 RDI: 0000000000000003 [ 433.701978][ C0] RBP: 0000000000000000 R08: 00007ffea5f968e4 R09: 000000000000000c [ 433.701988][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 433.701998][ C0] R13: 0000000000000000 R14: 00007fba736d4670 R15: 0000000000000000 [ 433.702025][ C0] [ 434.338641][ C0] sched: DL replenish lagged too much