last executing test programs: 1m4.426876706s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 1m2.656638315s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 51.5767742s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 51.183703964s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 40.093186614s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 38.815920449s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 28.783927079s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 27.633337521s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 16.605477284s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 16.031140046s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 10.487595324s ago: executing program 1 (id=2403): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) read(r1, 0x0, 0x0) 10.384292496s ago: executing program 1 (id=2404): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 10.362070421s ago: executing program 1 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x10, 0x800) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x7c}}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESOCT=r4], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4004800) r8 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x22020400) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1, 0x1}, 0x10) close(0x3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000740)=""/60, &(0x7f0000000780)=0x3c) ioctl$int_out(r3, 0x5460, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="c8010000100001000000000000000000000000004c484c930170470196b509abe3c70e4f870f9e07131ac1cb963a640eeeafb30180ffffffffffff1e3ede76d0986953c797a323d1e2f90e1e5bc72e464138bbcc00e19a7246b613f79ebe1a85ce3acb1c7afb224044a7336c41913b5acb10b403a57441b67c9635d473b418870d1b0a0cb6d0772483b5bd2cdf23694ba18d42f9", @ANYRES32=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xc1, 0x0, &(0x7f0000000480)="e9315da14deca66010c4bc48a797749e2df2104cda99cbb85017fa3184d87c7cfe067be09bf2d118a86bf8b0ec1c00d404cd0320a479b75df4cf2cbfb2b2369b8cf8b8857b2667294a1f82998535f17c0081fe8b79c3f0edd6d25705380295b8186679b0e8b4f285ce778142531164c31d68c4b82951f0f3d1f018af5c1a672f6ec26bc1606bd762b819b9f32c502f38e8f334c210a935b0a022ea3ec23f9dcc47d32bd4c0deaaaa0afac3b0f8545f9919ab0e85dd7a8ecc5f5df6e29bb2d83f69", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 10.121585747s ago: executing program 1 (id=2406): unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) unshare(0x22020400) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) (async) 8.590772277s ago: executing program 1 (id=2409): pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) bind$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x40003, 0x2) (async) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x40003, 0x2) recvfrom$l2tp(r1, 0x0, 0x0, 0x12122, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r3) (async) close(r3) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000004000000000000a"], 0xb8}}, 0x0) 5.325462221s ago: executing program 3 (id=1647): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x4c8c0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x30}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4b}]}}]}, 0x3c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006d0e0000000000120200000000220000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000000ee508fc8531100"/28], 0x50) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000180)={0x90000008}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x1d, "ee17f03181504511336ebac6a95548c3768475c8099e50b343e83f745f"}, &(0x7f0000000080)=0x41) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0xfe33) 5.011066164s ago: executing program 0 (id=1336): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f0000002b00), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newnexthop={0x54, 0x68, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x18}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x47100}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9463}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240c00c5}, 0x4000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000a64973d6ce45167dbbb1c013f0424bb1b2ca8acd70afb2a2d268541cf64ac226b7592b4cadc7db7250ee19896b6afb06a79b382", @ANYRES16=r5, @ANYBLOB="01000000000000000000140000000c0006000200000000000000"], 0x20}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 3.306762078s ago: executing program 4 (id=2441): syz_emit_ethernet(0x8a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaa220180c200000308004500007c0000000000219078ac1e0001ac1414aa0c00907806000000480000050000000000160000ac1e0001ac14143d44140003ac141400000000000000000000800000860600000000820ca18025858f9fed8eb7088923d6ffffffff00000000e0000001ac141414bb000000"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) write(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) connect$x25(r3, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x80000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000340)={r8, 0xd4, "871ae69dc32299202bb188c372cccd38c9c0f40bedd5a2deca30219793294edb758a8db1d996d0be67733521c404890af363b94fca68af2191d9a0b3f6e995dd8cb20ea8ad11ddd3d047f250047d212df75d00fe89d6d5bd073502c1bd0b4703d70ac72e8095c9973a255c132d8654868023867691ce4215788ddf184b980cedd89cc735f87cb8e5d5c141907d310e3ff278b9f9da28ad2b8d29ccdf3ce5f5ba86d4187db5565d599fc970a834f594b16d705b19711d5c55f5e811ce0f499a12ffb43f644e1627635e505136531d614836e95046"}, &(0x7f0000000280)=0xdc) sendmmsg$alg(r5, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5e86c0b1a7b82799275f56f2", 0xc}, {&(0x7f0000002640)="8913e5ca", 0x4}, {&(0x7f0000000140)="ae75dd3b99de712910cdc0bb9bfcf17c9bebb61bbdb2846dd45622ece2091eb847056ec133e2ba9f62de01443c2fb448ed0bdf240814db452845b436d51fb8279797af9f40264388b1dec1866b233cfaa92a982ecac518b2070e95bb9a6a88a95cf983f647129fa3fd27d414f6", 0x6d}], 0x3, &(0x7f0000000540)}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/224, 0xe0}], 0x1}}], 0x1, 0x143, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r9) 2.844023529s ago: executing program 4 (id=2442): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000020000000000000000000000000000000000301c8038ca635480e5405fa1bc423b270a3ea5233d23e66d4d90b9daa715125d84da52eae2179911cdfffac9701ffb0640e5e2d496b6c3f6174896621aa43250288c09c1a99db3b1fd910b0f891f7c499b88bae4a376f0f2bd62a6c3a9527e16c8062b6c67520047c5588d6be26b6f178d6ef2502584b97bd05f9093114ecabf98d95ba9a77d680144c400b99baa8557d156cb8ef2de92c1925e6b513d6e74"], 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000020000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b19f8ffffffffffbea100000000000007010000f8000000b703000000000000850000006e0000009500000000000000000000000000000095ef4080ccd086358ed88144a28ca908102bf9366d131de2aac4edbdda8e5a0b1e842b0c7bec157a5d0b4fd3c492151d3fbcecaf6e8330a44202b1fd5af54f9ce351e60e8ac740ef1a282304e34d0b4b8192614eb6562168ab3a198e745ffe41d7843929669ef9f369847dd28079cf734e868fc1e422537dc0168759bab576eadc12ae2b41404a636938964e77811564739094d317a3e2ec8136929ac867e817e025b918a27f6f6654066f78459e9c790354a00dc808e575ba795021fb0fe64e951ffc40c381fee9d7820257ad46b4d5f293bc260716210fc87a9c9172100b003db80a7c79307ca5d6df08931129b1d13accfd82e7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=0x0, @ANYBLOB="2cdfc1dd7c684d7ec70a5e6268a6bde9f548f0a7f431491f3561e9bd4d338599ccd06e0a4a8fa9910b2d518c9a3a30768142751b79c759028e6e5855e85bd48b26828462d3"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000000000000f200000008000100"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 2.5274689s ago: executing program 2 (id=2443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x90}}, 0x0) (async, rerun: 32) unshare(0x8000400) (async, rerun: 32) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) 2.426986487s ago: executing program 2 (id=2444): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40840) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a610400aaaaaaaaaabb00003d000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x0) sendmsg$xdp(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x4, r4, 0x25}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000280)="74101b3c77b79a424031f494577eeb713b001427fae3de9d14cef47499b13d532f011923a27119c268658df2ae8a011ee73bcdfea5073dcd645208b696e1968faffd24a93a5a276e4f9967e4c9c247b9ba464632dbd0b8", 0x57}, {&(0x7f0000000300)="6a07283e77fc53b0126c997846092dc82a34f313b351b683ba62c58a74b278e4bf552007c270f01b770690fcede79b23382832f2d697a56d99a9cbec4a4c1a524c58c1d72b857452ff72723c4a15715d0d0901731ead268398e495bc7e1cbae59bd2ffcfb79e4e4a6040e518c1ef0811d8b29b715659bc2358ff1bd33bc0315a67dfb93894610e21260fef086d53c25ad408365a63c7b369a5873de35d60a15b7df645e126203333dd92ea257e7d28849b176ed3fd73f85ded3eaa048ff1ed684c3755e242324998b0b3e30610c218990d7215f62d", 0xd5}, {&(0x7f0000000400)="12da4d5b02c2bf3f4a3ca0e9fb360c744bab87eb3017dbe32e5afeffb40e13876651613a5f774446cf1f08ec7c5c0f477fdcae97565933b1a0785c5094e2ee93e3a07eeec476b3510a2c63e6cc73558098eba3d7cc2199c1517cceb25c253cd5053bef19a603978becd4eed49a2b6349eab4fa2985bacb65c2c6445a5c57b729d5e415500d1153b628984b381910e2befcf95ef3db50a87a2fec844a8314b0df51b6018975712903b109740e6f70bf084aa4353ec768ae8b9c5e3ce47c2d1bf47df0ad601212fba315878529a4a315e0fc6e278bdeaebdd3acf6c4fdb17c57cc77d3031114d4cc8a1b12cdb2346f54b9b38941c12b256881", 0xf8}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="88c0863dd7fc433bf32cd8543f1f251e450a966d15313de938930a8ed3d36716669e4e754c083a3740fc6a8e27d05a6f04a27d2f175f8f26420c6aa45625e36684b5781bcafe291fd7ef7b5a57c588c499ca9fa337e69fbcb302f0e0f7095ec915220d6b8fa6be64ef9a9c7f926207b2785214e58861d215665ac824f7f4c0f02f02723e681bedf32110bcbf4e619c05831b707a3f6ed79dae8974f0972b128d2af9df01e62b1fce7ebc7b", 0xab}, {&(0x7f0000001640)="29a93eedc46043808b807b67d5279e1741803c93aed440ca07d390a88db4822bd0fbe11cfd5e4e6d1a8c6a12c48efdf3d6678ffa572b03b671d66ab82946af17f66d873b54357038754ee042bbb401b5e663814b63f1550774c132ed20ec88b2d92701da4a90227e46957db134e17054d72d3b511d1c0a5a247d8013bc57a6c5e86b27bbbd950616e402d3ec2ba7a98783395281e50251f68565e3713b8b57d52f318cf06d4f4b305c235837afb9c7026d9c734806928414e0265cf1ab7d23da5e945bbc190a77b2e913f013f922c7ab68388c4d3d25c8fd", 0xd8}], 0x6, 0x0, 0x0, 0x800}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x1d8, 0x2a8, 0x2a8, 0x390, 0x390, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@ipv6header={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {}, {}, 0xffffffff}}}, {{@ipv6={@mcast1, @remote, [], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x32, "a3063b7e52583ede5b0e553befa48d192010a84c1933cac8b40df090c8b8"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r6 = openat$cgroup_int(r1, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x40000000000004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.356376284s ago: executing program 2 (id=2445): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000001500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff, 0xff, 0xff000000, 0xffffff00]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601082aad000000000000000000000500010006000000"], 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) 1.348721284s ago: executing program 4 (id=2446): r0 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000040)=""/202, &(0x7f0000000140)=0xca) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x79f7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1.240350661s ago: executing program 2 (id=2447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xc25b, 0x6, 0x0, 0xfff, 0xc, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x5c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.088267359s ago: executing program 4 (id=2448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1}, 0x18) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x198, 0x24, 0xd0f, 0x0, 0xffdfffff, {0x60, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x160, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0x6, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x800}, @TCA_GRED_STAB={0x104, 0x2, "594d009e593131048c8f520e72dbffd02d502d24652ef52accb00a6bb110599ff398434fe3e574bc920e3d6ddca037185a16580b1cf82459347463ab6c38c273e1c3f3250442e177146cb1f855355841e412e0261b3d0d878bc6f90b4c82c7ea76692472ca65f232304c88c0e68b7ab8b110e46c81b001b39086ec02c53972c8f82e54288f3bf0ef184d43f592717d23a5942908cfd542d2d3df3051e25d4a0301a528a18b52a85a9271e26a57dd1e4e7ea70fa2916ba15772395118ea137c60ac455711de3490a6c63e2586c9bd471706249a09d337f7f39c727a3b61be1eb0c9bf7768e4ed067247b00b734a1f06657dddbf2c0a2f02d8076504ec4f97a334"}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x480, 0x1000, 0x3, 0xfffffffe, 0xe1, 0xfffffffa, 0xd308, 0x5, 0xaf2, 0x1b, 0x7, 0x11, 0x6, 0x7, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}]}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x198}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x4, 0x1, {{0x6, 0x4, 0x2, 0x14, 0x18, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24014000}, 0x200040b1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.070159531s ago: executing program 2 (id=2449): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x1e, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 935.18526ms ago: executing program 4 (id=2450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40010020, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9}]}]}, 0x28}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r8) sendmsg$kcm(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="cd33c94e239331034b0eeb55317683fc9698360e77b1daf01b0146a4388ba69a35868095f59b4d0e0281615f07c15775070cf01a57b35607759ab0fd27411d0b438d4c2d834fce94e8cd1059d533b96423a1068fe528f0e43d589f6538eb992a9f0a4f70f46ef12aa236e6cf06b135525d615f8acf6aa49c860300762c03953181e45117ee97a8b66ca6f21141c6bd6079d2f793b3b423c26106a8bfc2fa1ee9178cc70940846c7080800993b13c05512ea0f816ce833b69d684ec11a6a936f5", @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000021b6334a93fe6882a7c9d69edec7d258d7746cc2e6d42fee1a2d2787c949dd769adbcfe9a3fe33d593872c5991a3a10588cd7f80f284abae569d6193de7b64b38a00299f5f63da3c6e01a0cdae7b301758f27a87f9dfe6fd7a86def78add38c9f9c693b9e7b18a42dd3438d4c789a5128251c56068e61f3c01ff7f7df2e43327a04a69fa43a3cd237a9ead59e615862fad665a098025d1fd3bfdbd102653163d45dd106cd2876e7c3d69bc5df09808ee3caf4c1e501b", @ANYRES32=0x0, @ANYBLOB="0220000000000000140003007767320000000000000000000000000008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042088be000000030c000800050086dd3dce7921be4d0215bee7401341080088be00000002160906050100000400000010080022eb000000002004f008020000000000000200f494030800655800000002"], 0x7a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x0, 'net_cls'}]}, 0x11) 348.297089ms ago: executing program 4 (id=2451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '8%&', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0xc, 0x8, 0x6, 0x2}]}}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x4, 0x18}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x4, 0x3, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x8001, 0x6}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@link_local, @random="d823f150ff45", @void, {@ipv4={0x800, @icmp={{0x12, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0xa, [{@remote, 0x6}, {@multicast2, 0x9254}, {@loopback, 0x1}, {@empty, 0x8001}, {@multicast2}, {@broadcast, 0x5}]}]}}, @info_request={0xf, 0x0, 0x0, 0xff, 0x2}}}}}, 0x0) sendto$inet6(r10, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010300000000000000001f000000"], 0x14}, 0x1, 0x3000000}, 0x0) 7.185522ms ago: executing program 2 (id=2452): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x21, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESHEX], 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short}, 0x14) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r3, @ANYBLOB="94a15d73a82323618ca30812a8ad4169030093c80df765f984eefdf26c0000000f00"/43], 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = syz_init_net_socket$ax25(0x3, 0x7, 0xcd) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000180)={0x2, 'vlan0\x00', {0x5}, 0x4}) (async) connect$can_j1939(r4, 0x0, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000400), 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async) unshare(0x24020400) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) unshare(0x400) (async) read$alg(r6, 0x0, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) writev(r7, &(0x7f0000000000)=[{&(0x7f0000001280)="580000001400192240834b80040d8c560a0677bc4514820500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00005a9700010002081000418e000000", 0x55}, {0x0}, {&(0x7f00000001c0)="abd875d7047d7cfeb48df0da0655b81ea870e346d5213b0400728ceff385f4470f32a66d6a991e33ee09c726f70f00fb770daa126a5d0f01815b480fdd6736ff4db42a47c795ef4038b1536e5ed8e4c0f18c207338ae538cb4de9feb32503ae663aca8e14296ce18ebaee3c6d7a63841ea8e854e358e89eed9a10aff7f1010", 0x7f}], 0x3) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1) 0s ago: executing program 1 (id=2453): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x23, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query, @generic={0x18, 0xc, 0xc, 0x2, 0x7}, @call={0x85, 0x0, 0x0, 0x63}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x93, &(0x7f00000001c0)=""/147, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x3, 0x3, 0xf}, {0x5, 0x4, 0xe, 0x2}, {0x5, 0x2, 0x7, 0x3}, {0x5, 0x2, 0x3, 0x6}, {0x1, 0x1, 0x5, 0x6}], 0x10, 0x81, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r0, r1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000880)={0x0, 0x4, 0xa, [0xcee, 0x4, 0x4, 0x5, 0x7, 0x8001, 0x7, 0x5, 0xfffb, 0x7f]}, 0x1c) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000880)={0x0, 0x4, 0xa, [0xcee, 0x4, 0x4, 0x5, 0x7, 0x8001, 0x7, 0x5, 0xfffb, 0x7f]}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000008c0)={0x0, 0xc}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000940)={r3, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x1000, 0x9, 0x2, 0x20, 0x36b, 0xfa}, 0x9c) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000a00), &(0x7f0000000a40)=0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', 0x0, 0x40, 0x40, 0xb, 0x40, {{0x18, 0x4, 0x0, 0x9, 0x60, 0x66, 0x0, 0xf0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x13, 0x4, [@rand_addr=0x64010102, @remote, @loopback, @multicast2]}, @lsrr={0x83, 0x13, 0xbb, [@rand_addr=0x64010102, @multicast2, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x24, 0x83, 0x3, 0x4, [{@empty, 0x2}, {@broadcast, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x3}, {@multicast1, 0x2}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@newneigh={0x34, 0x1c, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, r6, 0x8}, [@NDA_VNI={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_PROBES={0x8, 0x4, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=@newneigh={0x34, 0x1c, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, r6, 0x8}, [@NDA_VNI={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_PROBES={0x8, 0x4, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c40)={0x1f, 0x0, @fixed}, &(0x7f0000000c80)=0xe, 0x80000) (async) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c40)={0x1f, 0x0, @fixed}, &(0x7f0000000c80)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=0x6) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r8, 0x81) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x4) sendto$packet(r4, &(0x7f0000000d40)="37c68005d0159e5571b1475f3e140cd89494407287916fe51a4eea4050da8af65a43a2c309f0d99f538ff4eb63d4fcd5904da619781ac92c8a254449be3500a4c6e9be6b46dd4bc81f2096e07a08a0d65db1ca9bc01d7f2b50235d78eea84cb9de9ac577ff7515a1c625b4dd0e83a84956838132daf1e52a8d9f526fac9a0fd30a96b7713ea60bfe10450fc72909865c14", 0x91, 0x40000, &(0x7f0000000e80)={0x11, 0xf5, r9, 0x1, 0x7}, 0x14) write$tun(0xffffffffffffffff, &(0x7f0000000ec0)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @mcast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @loopback}}, 0x34) accept4$packet(r4, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f40)=0x14, 0x80000) (async) r10 = accept4$packet(r4, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f40)=0x14, 0x80000) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000f80)={r6, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000f80)={r6, 0x1, 0x6, @broadcast}, 0x10) shutdown(r2, 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000fc0)={'nicvf0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000fc0)={'nicvf0\x00'}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001000)=@gcm_256={{0xcb93ef7399ae5e83}, "f4e3badf4ee19320", "b31fc70b8dd50dd1756e6cfc83ab350b7fec57975feb290c94aa3c4413b99201", "0994a046", "46893c32dae42517"}, 0x38) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001000)=@gcm_256={{0xcb93ef7399ae5e83}, "f4e3badf4ee19320", "b31fc70b8dd50dd1756e6cfc83ab350b7fec57975feb290c94aa3c4413b99201", "0994a046", "46893c32dae42517"}, 0x38) r12 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000001040), 0x800) accept4(r12, &(0x7f0000001080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000001100)=0x80, 0x0) kernel console output (not intermixed with test programs): 60139][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.486447][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.538342][T13347] hsr_slave_0: entered promiscuous mode [ 255.544880][T13347] hsr_slave_1: entered promiscuous mode [ 255.551866][T13347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.559781][T13347] Cannot create hsr debugfs directory [ 255.565778][ T35] bridge_slave_1: left allmulticast mode [ 255.576154][ T35] bridge_slave_1: left promiscuous mode [ 255.582079][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.594802][ T35] bridge_slave_0: left allmulticast mode [ 255.600735][ T35] bridge_slave_0: left promiscuous mode [ 255.606395][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.778656][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2016'. [ 256.028596][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.040165][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.057015][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.066519][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.084211][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.093724][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.101335][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.268257][T13382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2020'. [ 256.339433][T13368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'. [ 256.354104][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.366188][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.379380][ T35] bond0 (unregistering): Released all slaves [ 256.917582][ T5155] Bluetooth: hci1: command tx timeout [ 256.987259][T13415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2025'. [ 257.015113][T13415] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2025'. [ 257.026068][T13415] netlink: 'syz.1.2025': attribute type 6 has an invalid length. [ 257.054869][T13415] netlink: 'syz.1.2025': attribute type 5 has an invalid length. [ 257.071068][T13421] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 257.086317][T13415] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2025'. [ 257.590636][T13453] xt_l2tp: v2 doesn't support IP mode [ 257.606373][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2031'. [ 257.624549][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2031'. [ 257.673473][T13455] netlink: 'syz.1.2032': attribute type 30 has an invalid length. [ 257.759749][ T35] hsr_slave_0: left promiscuous mode [ 257.772808][T13450] xt_limit: Overflow, try lower: 65536/2147483648 [ 257.792089][ T35] hsr_slave_1: left promiscuous mode [ 257.802541][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.817091][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.847429][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.854891][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.929198][ T35] veth1_macvtap: left promiscuous mode [ 257.934786][ T35] veth0_macvtap: left promiscuous mode [ 257.957126][ T35] veth1_vlan: left promiscuous mode [ 257.964088][ T35] veth0_vlan: left promiscuous mode [ 258.205159][ T5155] Bluetooth: hci4: command tx timeout [ 258.999176][ T5155] Bluetooth: hci1: command tx timeout [ 259.215882][ T35] team0 (unregistering): Port device team_slave_1 removed [ 259.286172][ T35] team0 (unregistering): Port device team_slave_0 removed [ 259.835508][T13520] xt_addrtype: ipv6 does not support BROADCAST matching [ 259.960900][T13524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2042'. [ 259.970400][T13524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2042'. [ 260.284832][ T5155] Bluetooth: hci4: command tx timeout [ 260.360470][T13371] chnl_net:caif_netlink_parms(): no params data found [ 260.444897][T13548] netlink: 'syz.4.2044': attribute type 2 has an invalid length. [ 260.499343][T13548] openvswitch: : Dropping previously announced user features [ 260.627957][T13347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.660726][T13347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.689073][T13371] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.709403][T13371] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.734784][T13371] bridge_slave_0: entered allmulticast mode [ 260.750608][T13371] bridge_slave_0: entered promiscuous mode [ 260.765679][T13347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.767269][T13562] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 260.791309][T13562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2045'. [ 260.802381][T13371] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.830413][T13371] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.846694][T13371] bridge_slave_1: entered allmulticast mode [ 260.853832][T13371] bridge_slave_1: entered promiscuous mode [ 260.872413][T13347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.892543][T13567] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 260.941290][T13562] veth0_vlan: entered allmulticast mode [ 261.076736][T13567] veth0_vlan: left promiscuous mode [ 261.076813][ T5155] Bluetooth: hci1: command tx timeout [ 261.083970][T13567] veth0_vlan: entered promiscuous mode [ 261.194334][T13371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.200468][T13577] ipt_rpfilter: unknown options [ 261.230140][T13371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.473265][T13371] team0: Port device team_slave_0 added [ 261.490653][T13371] team0: Port device team_slave_1 added [ 261.580643][T13371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.596337][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.635907][T13371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.734222][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.815840][T13371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.828702][T13371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.855668][T13371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.905384][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.021087][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.053746][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.084338][T13371] hsr_slave_0: entered promiscuous mode [ 262.098102][T13371] hsr_slave_1: entered promiscuous mode [ 262.116644][T13371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.124296][T13371] Cannot create hsr debugfs directory [ 262.287140][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.331630][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.366455][ T5155] Bluetooth: hci4: command tx timeout [ 262.370402][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.379098][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.405283][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.412485][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.553531][ T35] bridge_slave_1: left allmulticast mode [ 262.559598][ T35] bridge_slave_1: left promiscuous mode [ 262.565430][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.574485][ T35] bridge_slave_0: left allmulticast mode [ 262.582232][ T35] bridge_slave_0: left promiscuous mode [ 262.591223][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.125841][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.143240][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.157420][ T5155] Bluetooth: hci1: command tx timeout [ 263.166888][ T35] bond0 (unregistering): Released all slaves [ 263.390558][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 263.428149][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 263.845469][T13650] vlan5: entered promiscuous mode [ 263.873917][T13648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2068'. [ 264.024709][ T35] hsr_slave_0: left promiscuous mode [ 264.033071][ T35] hsr_slave_1: left promiscuous mode [ 264.045710][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.057041][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.064829][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.072368][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.095139][ T35] veth1_macvtap: left promiscuous mode [ 264.103280][ T35] veth0_macvtap: left promiscuous mode [ 264.111094][ T35] veth1_vlan: left promiscuous mode [ 264.116360][ T35] veth0_vlan: left promiscuous mode [ 264.437129][ T5155] Bluetooth: hci4: command tx timeout [ 264.833972][ T35] team0 (unregistering): Port device team_slave_1 removed [ 264.908965][ T35] team0 (unregistering): Port device team_slave_0 removed [ 265.550871][T13653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'. [ 265.561742][T13653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.612727][T13371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.687496][T13371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.715251][T13371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.744940][T13707] FAULT_INJECTION: forcing a failure. [ 265.744940][T13707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.754125][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.775613][T13371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.786797][T13707] CPU: 0 UID: 0 PID: 13707 Comm: syz.1.2082 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 265.797606][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 265.807680][T13707] Call Trace: [ 265.810971][T13707] [ 265.813913][T13707] dump_stack_lvl+0x241/0x360 [ 265.818613][T13707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.823808][T13707] ? __pfx__printk+0x10/0x10 [ 265.828403][T13707] ? __pfx_lock_release+0x10/0x10 [ 265.833459][T13707] should_fail_ex+0x3b0/0x4e0 [ 265.838141][T13707] _copy_from_user+0x2f/0xc0 [ 265.842743][T13707] copy_msghdr_from_user+0xae/0x680 [ 265.847955][T13707] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 265.853796][T13707] __sys_sendmsg+0x22d/0x380 [ 265.858415][T13707] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.863562][T13707] ? __pfx_vfs_write+0x10/0x10 [ 265.868383][T13707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.874732][T13707] ? do_syscall_64+0x100/0x230 [ 265.879521][T13707] ? do_syscall_64+0xb6/0x230 [ 265.884218][T13707] do_syscall_64+0xf3/0x230 [ 265.888742][T13707] ? clear_bhb_loop+0x35/0x90 [ 265.893441][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.899355][T13707] RIP: 0033:0x7f61d3f7e719 [ 265.903785][T13707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.923418][T13707] RSP: 002b:00007f61d23f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.931863][T13707] RAX: ffffffffffffffda RBX: 00007f61d4135f80 RCX: 00007f61d3f7e719 [ 265.939861][T13707] RDX: 0000000004008014 RSI: 0000000020000040 RDI: 0000000000000004 [ 265.947857][T13707] RBP: 00007f61d23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.955843][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.963837][T13707] R13: 0000000000000000 R14: 00007f61d4135f80 R15: 00007fff45942338 [ 265.971852][T13707] [ 266.128449][T13347] veth0_vlan: entered promiscuous mode [ 266.170530][T13347] veth1_vlan: entered promiscuous mode [ 266.207565][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2084'. [ 266.217539][T13717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2084'. [ 266.253963][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 266.263231][T13347] veth0_macvtap: entered promiscuous mode [ 266.291521][T13347] veth1_macvtap: entered promiscuous mode [ 266.354249][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.373388][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.412673][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.425313][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.448788][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.466011][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.485022][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.531243][T13729] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2088'. [ 266.536747][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.576697][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.597496][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.627713][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.643619][T13371] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.685752][T13347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.717683][T13347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.726475][T13347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.753253][T13347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.785496][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.792693][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.840246][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.847482][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.909717][T13371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.920485][T13371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.011209][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 267.088363][T13747] FAULT_INJECTION: forcing a failure. [ 267.088363][T13747] name failslab, interval 1, probability 0, space 0, times 0 [ 267.107206][T13747] CPU: 0 UID: 0 PID: 13747 Comm: syz.4.2094 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 267.118031][T13747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 267.128106][T13747] Call Trace: [ 267.131407][T13747] [ 267.134358][T13747] dump_stack_lvl+0x241/0x360 [ 267.138747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.139046][T13747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.152036][T13747] ? __pfx__printk+0x10/0x10 [ 267.156634][T13747] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 267.162632][T13747] ? __pfx___might_resched+0x10/0x10 [ 267.167926][T13747] should_fail_ex+0x3b0/0x4e0 [ 267.172604][T13747] should_failslab+0xac/0x100 [ 267.177278][T13747] ? __alloc_skb+0x1c3/0x440 [ 267.181866][T13747] kmem_cache_alloc_node_noprof+0x71/0x320 [ 267.187676][T13747] __alloc_skb+0x1c3/0x440 [ 267.192095][T13747] ? __pfx___alloc_skb+0x10/0x10 [ 267.197032][T13747] ? netlink_autobind+0xd6/0x2f0 [ 267.201965][T13747] ? netlink_autobind+0x2b0/0x2f0 [ 267.206990][T13747] netlink_sendmsg+0x638/0xcb0 [ 267.211761][T13747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.217065][T13747] ? aa_sock_msg_perm+0x91/0x160 [ 267.222026][T13747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.227326][T13747] __sock_sendmsg+0x221/0x270 [ 267.232011][T13747] ____sys_sendmsg+0x52a/0x7e0 [ 267.236792][T13747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.242100][T13747] __sys_sendmsg+0x292/0x380 [ 267.246700][T13747] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.251829][T13747] ? __pfx_vfs_write+0x10/0x10 [ 267.256614][T13747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.262968][T13747] ? do_syscall_64+0x100/0x230 [ 267.267732][T13747] ? do_syscall_64+0xb6/0x230 [ 267.272406][T13747] do_syscall_64+0xf3/0x230 [ 267.276914][T13747] ? clear_bhb_loop+0x35/0x90 [ 267.281603][T13747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.287496][T13747] RIP: 0033:0x7ff63ff7e719 [ 267.291908][T13747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.311515][T13747] RSP: 002b:00007ff640e49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.319926][T13747] RAX: ffffffffffffffda RBX: 00007ff640135f80 RCX: 00007ff63ff7e719 [ 267.327896][T13747] RDX: 0000000004008014 RSI: 0000000020000040 RDI: 0000000000000004 [ 267.335862][T13747] RBP: 00007ff640e49090 R08: 0000000000000000 R09: 0000000000000000 [ 267.343827][T13747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.351793][T13747] R13: 0000000000000000 R14: 00007ff640135f80 R15: 00007fff0182d4f8 [ 267.359771][T13747] [ 267.377797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.425783][T13748] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2092'. [ 267.434165][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.441706][T13748] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 267.443035][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.705956][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.862930][ T1342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.899577][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 267.915206][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2097'. [ 267.978719][T13767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2097'. [ 267.994881][ T1342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.054121][T13767] dvmrp8: entered allmulticast mode [ 268.125310][ T1342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.147713][T13767] dvmrp8: left allmulticast mode [ 268.225210][ T1342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.244915][T13371] veth0_vlan: entered promiscuous mode [ 268.257829][T13371] veth1_vlan: entered promiscuous mode [ 268.296605][T13371] veth0_macvtap: entered promiscuous mode [ 268.314184][T13371] veth1_macvtap: entered promiscuous mode [ 268.330268][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.342250][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.352942][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.364766][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.383915][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.395144][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.407506][T13371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.424645][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.438332][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.448990][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.460321][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.470328][T13371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.481060][T13371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.492482][T13371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.505649][T13371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.515270][T13371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.526214][T13371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.535397][T13371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.617795][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.628470][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.648392][T11382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.658629][T11382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.772283][ T1342] bridge_slave_1: left allmulticast mode [ 268.806693][ T1342] bridge_slave_1: left promiscuous mode [ 268.812479][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.852595][ T1342] bridge_slave_0: left allmulticast mode [ 268.862306][ T1342] bridge_slave_0: left promiscuous mode [ 268.877174][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.895779][T13781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2099'. [ 268.954040][T13788] netlink: zone id is out of range [ 268.972731][T13788] netlink: set zone limit has 4 unknown bytes [ 269.126148][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.136252][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.150098][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.163692][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.174765][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.184268][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.472198][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.485112][ T1342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.496279][ T1342] bond0 (unregistering): Released all slaves [ 269.669224][T13801] No such timeout policy "syz0" [ 270.124441][ T1342] hsr_slave_0: left promiscuous mode [ 270.134955][ T1342] hsr_slave_1: left promiscuous mode [ 270.141232][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.148918][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.156816][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.164244][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.185556][ T1342] veth1_macvtap: left promiscuous mode [ 270.191632][ T1342] veth0_macvtap: left promiscuous mode [ 270.197888][ T1342] veth1_vlan: left promiscuous mode [ 270.203218][ T1342] veth0_vlan: left promiscuous mode [ 270.623320][ T1342] team0 (unregistering): Port device team_slave_1 removed [ 270.668560][ T1342] team0 (unregistering): Port device team_slave_0 removed [ 271.212286][T13792] chnl_net:caif_netlink_parms(): no params data found [ 271.237605][ T5846] Bluetooth: hci1: command tx timeout [ 271.288701][T13819] __nla_validate_parse: 1 callbacks suppressed [ 271.288720][T13819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2107'. [ 271.347987][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.359575][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.368988][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.378692][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.387096][ T5155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.394717][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.471462][T13792] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.492266][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.500138][T13792] bridge_slave_0: entered allmulticast mode [ 271.514730][T13792] bridge_slave_0: entered promiscuous mode [ 271.568364][T13831] xt_bpf: check failed: parse error [ 271.584405][T13792] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.611584][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.634977][T13792] bridge_slave_1: entered allmulticast mode [ 271.647854][T13792] bridge_slave_1: entered promiscuous mode [ 271.705657][T13792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.740103][T13792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.828738][T13792] team0: Port device team_slave_0 added [ 271.847858][T13792] team0: Port device team_slave_1 added [ 271.884569][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'. [ 271.903442][T13792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.931085][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.968353][T13792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.079604][ T1310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.117298][T13792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.124283][T13792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.193792][T13792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.288127][ T1310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.480597][ T1310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.532964][T13792] hsr_slave_0: entered promiscuous mode [ 272.552597][T13792] hsr_slave_1: entered promiscuous mode [ 272.573235][T13792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.582292][T13792] Cannot create hsr debugfs directory [ 272.719966][ T1310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.919119][T13821] chnl_net:caif_netlink_parms(): no params data found [ 273.315689][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.326844][ T5846] Bluetooth: hci1: command tx timeout [ 273.338778][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.351957][T13821] bridge_slave_0: entered allmulticast mode [ 273.365437][T13821] bridge_slave_0: entered promiscuous mode [ 273.379415][ T1310] bridge_slave_1: left allmulticast mode [ 273.385120][ T1310] bridge_slave_1: left promiscuous mode [ 273.391085][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.401283][ T1310] bridge_slave_0: left allmulticast mode [ 273.407533][ T1310] bridge_slave_0: left promiscuous mode [ 273.413291][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.477157][ T5846] Bluetooth: hci4: command tx timeout [ 273.893599][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.905184][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.921574][ T1310] bond0 (unregistering): Released all slaves [ 273.959026][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.966125][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.984411][T13821] bridge_slave_1: entered allmulticast mode [ 274.004158][T13821] bridge_slave_1: entered promiscuous mode [ 274.032519][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.133261][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.172924][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.216327][T13897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.276530][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.306860][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.316203][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.334997][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2123'. [ 274.416228][T13821] team0: Port device team_slave_0 added [ 274.438052][T13821] team0: Port device team_slave_1 added [ 274.648273][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.655272][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.716881][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.777295][ T1310] hsr_slave_0: left promiscuous mode [ 274.805170][ T1310] hsr_slave_1: left promiscuous mode [ 274.816172][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.824070][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.837836][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.845506][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.904736][ T1310] veth1_macvtap: left promiscuous mode [ 274.910844][ T1310] veth0_macvtap: left promiscuous mode [ 274.924637][ T1310] veth1_vlan: left promiscuous mode [ 274.930214][ T1310] veth0_vlan: left promiscuous mode [ 275.276303][T13922] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2130'. [ 275.397202][ T5846] Bluetooth: hci1: command tx timeout [ 275.551477][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 275.567303][ T5846] Bluetooth: hci4: command tx timeout [ 275.570619][T13930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.614911][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 276.055620][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.062794][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.091241][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.126439][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.200891][T13821] hsr_slave_0: entered promiscuous mode [ 276.208158][T13821] hsr_slave_1: entered promiscuous mode [ 276.214422][T13821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.222262][T13821] Cannot create hsr debugfs directory [ 276.531600][T13792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.542961][T13792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.566272][T13938] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 276.581129][T13938] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 276.591367][T13792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.619192][T13792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.894246][T13792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.933471][T13792] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.998500][T13959] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 277.051186][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.058465][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.129456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.136671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.288000][T13821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.315819][T13821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.343633][T13821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.361230][T13821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.406189][T13981] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2144'. [ 277.484127][ T5846] Bluetooth: hci1: command tx timeout [ 277.636742][ T5846] Bluetooth: hci4: command tx timeout [ 277.711848][T13792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.750873][T13995] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2147'. [ 277.788047][T13993] vlan3: entered allmulticast mode [ 277.795885][T13993] veth1_to_batadv: entered allmulticast mode [ 277.838700][T13993] veth1_to_batadv: left allmulticast mode [ 277.879729][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.921611][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.972025][T13792] veth0_vlan: entered promiscuous mode [ 278.001308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.008496][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.032501][T13792] veth1_vlan: entered promiscuous mode [ 278.048891][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 278.088130][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.095323][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.166222][T14019] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 278.209223][T13792] veth0_macvtap: entered promiscuous mode [ 278.265607][T13792] veth1_macvtap: entered promiscuous mode [ 278.331999][T13792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.367156][T13792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.395455][T13792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.408351][T13792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.419983][T13792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.449136][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 278.474262][T13792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.485473][T13792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.505247][T13792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.516511][T13792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.528775][T13792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.551072][T14033] bridge_slave_1: left allmulticast mode [ 278.559298][T14033] bridge_slave_1: left promiscuous mode [ 278.565075][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2154'. [ 278.575714][T14033] bridge4: port 1(bridge_slave_1) entered disabled state [ 278.629211][T14037] sctp: [Deprecated]: syz.4.2154 (pid 14037) Use of int in maxseg socket option. [ 278.629211][T14037] Use struct sctp_assoc_value instead [ 278.630826][T14033] batman_adv: batadv0: Removing interface: gretap1 [ 278.736377][T13792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.758199][T13792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.771935][T13792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.784362][T13792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.042820][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.143882][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.165796][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.229177][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.238699][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.303643][T13821] veth0_vlan: entered promiscuous mode [ 279.326507][T13821] veth1_vlan: entered promiscuous mode [ 279.356040][T13821] veth0_macvtap: entered promiscuous mode [ 279.367204][T13821] veth1_macvtap: entered promiscuous mode [ 279.414622][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.457263][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.472803][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.495960][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.516497][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.529518][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.542110][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.643762][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.666612][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.681709][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.706881][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.717668][ T5846] Bluetooth: hci4: command tx timeout [ 279.724608][T13821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.735497][T13821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.748935][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.809012][T13821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.819241][T13821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.829830][T13821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.838912][T13821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.874088][T14058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 279.885209][T14057] team0: Port device team_slave_0 removed [ 279.937447][T14057] team0: Port device team_slave_1 removed [ 279.952359][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 279.966527][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.987062][T14057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.005210][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.013111][T14057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.033344][T14057] batman_adv: batadv0: Interface deactivated: vlan1 [ 280.041101][T14057] batman_adv: batadv0: Removing interface: vlan1 [ 280.054552][T14057] team0: Port device vlan4 removed [ 280.110844][T14068] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 280.132348][T14068] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 280.316688][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.324537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.442004][T11382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.450330][T11382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.740310][T11382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.235097][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.251406][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.267201][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.284050][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.294565][ T5155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.304721][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.516533][T14085] chnl_net:caif_netlink_parms(): no params data found [ 281.572484][T11382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.603493][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.610752][T14085] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.621245][T14085] bridge_slave_0: entered allmulticast mode [ 281.629053][T14085] bridge_slave_0: entered promiscuous mode [ 281.650807][T11382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.665575][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.673874][T14085] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.681272][T14085] bridge_slave_1: entered allmulticast mode [ 281.689873][T14085] bridge_slave_1: entered promiscuous mode [ 281.727130][T11382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.741582][T14085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.754469][T14085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.790561][T14085] team0: Port device team_slave_0 added [ 281.800138][T14085] team0: Port device team_slave_1 added [ 281.837262][T14085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.844241][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.871853][T14085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.896223][T14085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.903437][T14085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.929712][T14085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.949347][T11382] bridge_slave_1: left allmulticast mode [ 281.955031][T11382] bridge_slave_1: left promiscuous mode [ 281.961172][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.971569][T11382] bridge_slave_0: left allmulticast mode [ 281.977605][T11382] bridge_slave_0: left promiscuous mode [ 281.983274][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.363665][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 282.392089][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2167'. [ 282.401980][T14103] netlink: 'syz.1.2167': attribute type 20 has an invalid length. [ 282.530726][T11382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.549017][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.559330][T11382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.561199][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.577572][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.587614][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.595211][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.605211][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.606158][T11382] bond0 (unregistering): Released all slaves [ 282.785204][T14085] hsr_slave_0: entered promiscuous mode [ 282.825204][T14085] hsr_slave_1: entered promiscuous mode [ 282.839569][T14085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.849431][T14085] Cannot create hsr debugfs directory [ 282.895522][T14122] netlink: set zone limit has 4 unknown bytes [ 282.904027][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 282.946936][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 283.397157][ T5155] Bluetooth: hci1: command tx timeout [ 283.675070][T11382] hsr_slave_0: left promiscuous mode [ 283.697570][T11382] hsr_slave_1: left promiscuous mode [ 283.724898][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.750063][T11382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.774513][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.797678][T11382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.845761][T11382] veth1_macvtap: left promiscuous mode [ 283.854614][T11382] veth0_macvtap: left promiscuous mode [ 283.860710][T11382] veth1_vlan: left promiscuous mode [ 283.866217][T11382] veth0_vlan: left promiscuous mode [ 284.453541][T11382] team0 (unregistering): Port device team_slave_1 removed [ 284.539400][T11382] team0 (unregistering): Port device team_slave_0 removed [ 284.676926][ T5155] Bluetooth: hci4: command tx timeout [ 285.004514][T14165] netlink: 'syz.1.2181': attribute type 21 has an invalid length. [ 285.025743][T14165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2181'. [ 285.321998][T14108] chnl_net:caif_netlink_parms(): no params data found [ 285.380463][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2193'. [ 285.433630][T14197] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 285.475427][T14204] netlink: 'syz.1.2192': attribute type 3 has an invalid length. [ 285.483386][ T5155] Bluetooth: hci1: command tx timeout [ 285.490415][T14204] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2192'. [ 285.554564][T14208] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2194'. [ 285.579107][T14208] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2194'. [ 285.619766][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.633524][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.642660][T14108] bridge_slave_0: entered allmulticast mode [ 285.659707][T14108] bridge_slave_0: entered promiscuous mode [ 285.665989][T14214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2194'. [ 285.703409][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.746972][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.761232][T14108] bridge_slave_1: entered allmulticast mode [ 285.774285][T14108] bridge_slave_1: entered promiscuous mode [ 285.783882][T14221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2196'. [ 285.811301][T14085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.895168][T14230] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.912897][T14085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.926388][T14085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.941990][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.953390][T14085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.976701][T14230] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.003755][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.049981][T14237] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2200'. [ 286.090366][T11382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.117955][T14230] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.194026][T14108] team0: Port device team_slave_0 added [ 286.258343][T11382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.279488][T14230] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.303476][T14108] team0: Port device team_slave_1 added [ 286.372015][T14246] netlink: 'syz.2.2201': attribute type 32 has an invalid length. [ 286.418108][T11382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.446456][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.454019][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.481035][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.499198][T14246] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 286.519011][T14249] veth1_to_bond: entered allmulticast mode [ 286.563048][T14251] x_tables: duplicate underflow at hook 1 [ 286.569643][T11382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.586919][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.593929][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.621765][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.746260][T14230] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.757045][ T5155] Bluetooth: hci4: command tx timeout [ 286.780926][T14108] hsr_slave_0: entered promiscuous mode [ 286.797792][T14108] hsr_slave_1: entered promiscuous mode [ 286.804303][T14108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.812216][T14108] Cannot create hsr debugfs directory [ 286.835404][T14230] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.851674][T14230] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.873137][T14230] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.014348][T14265] IPv6: sit3: Disabled Multicast RS [ 287.048374][T14265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.055370][T14265] bond0: (slave sit3): The slave device specified does not support setting the MAC address [ 287.066451][T14265] bond0: (slave sit3): Error -95 calling set_mac_address [ 287.075155][T14267] No such timeout policy "syz0" [ 287.151834][T14085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.174169][T14266] IPv6: sit3: Disabled Multicast RS [ 287.185320][T14266] bond0: (slave sit3): The slave device specified does not support setting the MAC address [ 287.201792][T14266] bond0: (slave sit3): Error -95 calling set_mac_address [ 287.230599][T11382] bridge_slave_1: left allmulticast mode [ 287.236421][T11382] bridge_slave_1: left promiscuous mode [ 287.259055][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.286173][T11382] bridge_slave_0: left allmulticast mode [ 287.305609][T11382] bridge_slave_0: left promiscuous mode [ 287.317243][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.561477][ T5155] Bluetooth: hci1: command tx timeout [ 287.764242][T11382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.775603][T11382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.785945][T11382] bond0 (unregistering): Released all slaves [ 287.969458][T14279] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 288.022863][T14283] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 288.081756][T14085] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.154418][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.161574][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.208131][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.215307][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.357239][T14292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2214'. [ 288.440671][T14296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2215'. [ 288.450530][T14297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2214'. [ 288.838602][ T5155] Bluetooth: hci4: command tx timeout [ 288.906363][T14108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.953580][T14108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.983172][T14108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.025084][T11382] hsr_slave_0: left promiscuous mode [ 289.037519][T11382] hsr_slave_1: left promiscuous mode [ 289.049907][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.057609][T11382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.077123][T11382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.084928][T11382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.167169][T11382] veth1_macvtap: left promiscuous mode [ 289.177054][T11382] veth0_macvtap: left promiscuous mode [ 289.182714][T11382] veth1_vlan: left promiscuous mode [ 289.202881][T11382] veth0_vlan: left promiscuous mode [ 289.230751][T14321] sctp: [Deprecated]: syz.1.2220 (pid 14321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.230751][T14321] Use struct sctp_sack_info instead [ 289.285525][T14323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2221'. [ 289.636853][ T5155] Bluetooth: hci1: command tx timeout [ 289.700507][T11382] team0 (unregistering): Port device team_slave_1 removed [ 289.759276][T11382] team0 (unregistering): Port device team_slave_0 removed [ 290.184456][T14108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.203058][T14321] netlink: 'syz.1.2220': attribute type 5 has an invalid length. [ 290.313836][T14085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.318301][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 290.361900][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2222'. [ 290.533220][T14085] veth0_vlan: entered promiscuous mode [ 290.611693][T14085] veth1_vlan: entered promiscuous mode [ 290.677929][T14085] veth0_macvtap: entered promiscuous mode [ 290.702098][T14085] veth1_macvtap: entered promiscuous mode [ 290.712885][T14341] netlink: 'syz.1.2226': attribute type 21 has an invalid length. [ 290.725335][T14341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2226'. [ 290.744202][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.763460][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.784262][T14085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.811082][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.832382][T14085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.854141][T14085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.874301][T14085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.885600][T14085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.894801][T14085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.908886][T14085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.918152][ T5155] Bluetooth: hci4: command tx timeout [ 290.925142][T14085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.967637][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.001727][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.008920][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.090870][T14351] netlink: 'syz.2.2227': attribute type 10 has an invalid length. [ 291.139433][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.146649][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.284867][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.300558][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.344487][T14354] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 291.366926][T14354] netlink: 'syz.1.2228': attribute type 2 has an invalid length. [ 291.443970][T14360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.475496][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.485607][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.670773][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2233'. [ 291.679602][T14360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.823199][T14360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.847673][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.894289][T14108] veth0_vlan: entered promiscuous mode [ 291.905905][T14108] veth1_vlan: entered promiscuous mode [ 291.941063][T14108] veth0_macvtap: entered promiscuous mode [ 291.957134][T14108] veth1_macvtap: entered promiscuous mode [ 291.992686][T14360] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 292.048073][T14360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.094408][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2235'. [ 292.095086][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.143984][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.155582][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.167266][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.179455][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.244630][ T2913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.317601][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.330674][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.341393][T14108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.352080][T14108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.364481][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.396816][ T2913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.431907][T14108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.442381][T14108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.451611][T14108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.463985][T14108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.490924][T14360] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.505599][T14360] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.541560][ T2913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.561871][T14360] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.589925][T14360] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.624397][ T2913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.669533][T11382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.678081][T11382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.701185][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.709800][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.827606][ T2913] bridge_slave_1: left allmulticast mode [ 292.833298][ T2913] bridge_slave_1: left promiscuous mode [ 292.839470][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.851881][ T2913] bridge_slave_0: left allmulticast mode [ 292.857888][ T2913] bridge_slave_0: left promiscuous mode [ 292.863608][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.415860][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.426345][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.435886][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.454577][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.463782][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.474353][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.491578][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.561222][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.648420][ T2913] bond0 (unregistering): Released all slaves [ 293.696499][T14392] vlan0: entered promiscuous mode [ 293.711564][T14392] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 294.060256][T14393] chnl_net:caif_netlink_parms(): no params data found [ 294.079607][ T2913] hsr_slave_0: left promiscuous mode [ 294.085473][ T2913] hsr_slave_1: left promiscuous mode [ 294.096123][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.107864][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.115623][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.124127][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.144394][ T2913] veth1_macvtap: left promiscuous mode [ 294.150527][ T2913] veth0_macvtap: left promiscuous mode [ 294.156235][ T2913] veth1_vlan: left promiscuous mode [ 294.161649][ T2913] veth0_vlan: left promiscuous mode [ 294.570633][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 294.613769][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 295.164332][T14420] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 295.218149][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2241'. [ 295.357624][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.366222][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.374584][T14393] bridge_slave_0: entered allmulticast mode [ 295.382243][T14393] bridge_slave_0: entered promiscuous mode [ 295.391776][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.399576][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.407137][T14393] bridge_slave_1: entered allmulticast mode [ 295.414206][T14393] bridge_slave_1: entered promiscuous mode [ 295.427840][T14434] can: request_module (can-proto-5) failed. [ 295.482348][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.557114][ T5846] Bluetooth: hci1: command tx timeout [ 295.573084][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.583419][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.595271][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.605645][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.614629][ T5155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 295.617770][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.634245][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.705451][T14393] team0: Port device team_slave_0 added [ 295.730128][T14393] team0: Port device team_slave_1 added [ 295.760296][T14449] Â: renamed from pim6reg1 [ 295.772029][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.779660][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.806355][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.827631][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.834905][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.863167][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.933169][ T2913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.078746][ T2913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.101264][T14393] hsr_slave_0: entered promiscuous mode [ 296.108384][T14393] hsr_slave_1: entered promiscuous mode [ 296.114786][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.123576][T14393] Cannot create hsr debugfs directory [ 296.198962][ T2913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.300036][ T2913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.373252][T14463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.411277][T14463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2251'. [ 296.664863][ T2913] bridge_slave_1: left allmulticast mode [ 296.670777][ T2913] bridge_slave_1: left promiscuous mode [ 296.676513][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.705765][ T2913] bridge_slave_0: left allmulticast mode [ 296.727865][ T2913] bridge_slave_0: left promiscuous mode [ 296.733693][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.041715][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 297.187459][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.200423][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.213407][ T2913] bond0 (unregistering): Released all slaves [ 297.262015][T14440] chnl_net:caif_netlink_parms(): no params data found [ 297.427936][T14498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2259'. [ 297.569901][T14440] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.577395][T14440] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.584794][T14440] bridge_slave_0: entered allmulticast mode [ 297.592463][T14440] bridge_slave_0: entered promiscuous mode [ 297.599795][T14505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2259'. [ 297.637040][ T5846] Bluetooth: hci1: command tx timeout [ 297.670567][T14510] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.678345][T14498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2259'. [ 297.708234][T14440] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.715613][T14440] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.726476][T14440] bridge_slave_1: entered allmulticast mode [ 297.734491][ T5155] Bluetooth: hci4: command tx timeout [ 297.743113][T14440] bridge_slave_1: entered promiscuous mode [ 298.162256][ T2913] hsr_slave_0: left promiscuous mode [ 298.181668][ T2913] hsr_slave_1: left promiscuous mode [ 298.190937][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.216234][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.245345][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.254274][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.294659][ T2913] veth1_macvtap: left promiscuous mode [ 298.310392][ T2913] veth0_macvtap: left promiscuous mode [ 298.322489][ T2913] veth1_vlan: left promiscuous mode [ 298.330560][ T2913] veth0_vlan: left promiscuous mode [ 298.882826][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 298.924487][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 299.351343][T14440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.363137][T14440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.381949][T14393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.393270][T14393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.405008][T14393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.531264][T14393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.561167][T14440] team0: Port device team_slave_0 added [ 299.578789][T14575] netlink: 'syz.4.2270': attribute type 32 has an invalid length. [ 299.589436][T14440] team0: Port device team_slave_1 added [ 299.607274][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'. [ 299.655843][T14575] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 299.684515][T14440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.695401][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.716805][ T5155] Bluetooth: hci1: command tx timeout [ 299.741479][T14440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.788756][T14440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.796817][ T5155] Bluetooth: hci4: command tx timeout [ 299.813583][T14440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.843426][T14440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.928225][T14590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2275'. [ 299.966255][T14440] hsr_slave_0: entered promiscuous mode [ 299.986128][T14440] hsr_slave_1: entered promiscuous mode [ 300.001052][T14440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.009098][T14440] Cannot create hsr debugfs directory [ 300.121599][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2278'. [ 300.124786][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.190801][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.267837][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.275000][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.300741][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.307916][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.463877][T14393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.517700][T14393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.786356][T14628] sctp: [Deprecated]: syz.2.2285 (pid 14628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.786356][T14628] Use struct sctp_sack_info instead [ 300.822581][T14629] sctp: [Deprecated]: syz.2.2285 (pid 14629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.822581][T14629] Use struct sctp_sack_info instead [ 300.946327][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.098941][T14393] veth0_vlan: entered promiscuous mode [ 301.134167][T14393] veth1_vlan: entered promiscuous mode [ 301.224056][T14440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.266006][T14440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.442425][T14440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.465638][T14393] veth0_macvtap: entered promiscuous mode [ 301.489465][T14440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.512376][T14393] veth1_macvtap: entered promiscuous mode [ 301.580393][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.592494][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.604334][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.668709][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.682169][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.697582][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.700391][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2297'. [ 301.724031][T14393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.726480][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 301.738211][T14393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.758311][T14393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.772528][T14393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.797368][ T5155] Bluetooth: hci1: command tx timeout [ 301.877147][ T5155] Bluetooth: hci4: command tx timeout [ 301.930810][T14440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.953125][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.977305][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.030549][T14440] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.054616][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.061768][T11382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.068189][T14687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2301'. [ 302.103565][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.110732][T11382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.136182][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.144350][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.225912][T14440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.236433][T14440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.432269][T14704] netlink: 'syz.4.2306': attribute type 5 has an invalid length. [ 302.493618][T14704] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2306'. [ 302.560500][T14711] Cannot find del_set index 0 as target [ 302.602393][T14440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.705324][T14440] veth0_vlan: entered promiscuous mode [ 302.717579][T14440] veth1_vlan: entered promiscuous mode [ 302.745590][T14440] veth0_macvtap: entered promiscuous mode [ 302.760420][T14440] veth1_macvtap: entered promiscuous mode [ 302.790863][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.801894][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.812719][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.823712][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.835225][T14440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.851892][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.878068][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.900218][T14440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.916978][T14440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.938108][T14440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.947387][T14725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2310'. [ 302.960103][T14440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.977030][T14440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985755][T14440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.016994][T14440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.103893][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.115072][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.145994][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.156234][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.490999][ T2982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.498395][ T2982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.599994][ T2982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.690069][ T2982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.732768][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.744585][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.752743][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.770475][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.786096][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.793672][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.812301][ T2982] bridge_slave_1: left allmulticast mode [ 304.818229][ T2982] bridge_slave_1: left promiscuous mode [ 304.823961][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.832982][ T2982] bridge_slave_0: left allmulticast mode [ 304.839253][ T2982] bridge_slave_0: left promiscuous mode [ 304.844928][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.163936][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.174829][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.185852][ T2982] bond0 (unregistering): Released all slaves [ 305.417459][T14727] chnl_net:caif_netlink_parms(): no params data found [ 305.514238][ T2982] hsr_slave_0: left promiscuous mode [ 305.520625][ T2982] hsr_slave_1: left promiscuous mode [ 305.526478][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.541210][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.549898][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.558323][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.577175][ T2982] veth1_macvtap: left promiscuous mode [ 305.582725][ T2982] veth0_macvtap: left promiscuous mode [ 305.588381][ T2982] veth1_vlan: left promiscuous mode [ 305.593613][ T2982] veth0_vlan: left promiscuous mode [ 306.105533][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 306.226397][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 306.324288][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.338593][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.350374][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.364668][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.383370][ T5155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.394115][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.836984][ T5155] Bluetooth: hci1: command tx timeout [ 306.969122][T14727] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.976279][T14727] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.992398][T14727] bridge_slave_0: entered allmulticast mode [ 307.011581][T14727] bridge_slave_0: entered promiscuous mode [ 307.051103][T14727] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.078541][T14727] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.097150][T14727] bridge_slave_1: entered allmulticast mode [ 307.105850][T14727] bridge_slave_1: entered promiscuous mode [ 307.207974][T14727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.250480][T14727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.328275][T14727] team0: Port device team_slave_0 added [ 307.341440][T14727] team0: Port device team_slave_1 added [ 307.420223][T14727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.427857][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.454501][T14727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.468050][T14727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.475031][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.501788][T14727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.663376][T14727] hsr_slave_0: entered promiscuous mode [ 307.673735][T14727] hsr_slave_1: entered promiscuous mode [ 307.688013][T14727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.695617][T14727] Cannot create hsr debugfs directory [ 307.762596][ T2982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.909510][ T2982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.009094][ T2982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.077388][T14747] chnl_net:caif_netlink_parms(): no params data found [ 308.157947][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.192426][ T2982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.207074][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.257752][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.266524][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.292620][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.316964][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.325608][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.367346][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.375970][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.394729][T14783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.445611][ T5155] Bluetooth: hci4: command tx timeout [ 308.705957][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2326'. [ 308.707469][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.728234][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.735603][T14747] bridge_slave_0: entered allmulticast mode [ 308.743328][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 308.765349][T14747] bridge_slave_0: entered promiscuous mode [ 308.840063][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 308.849529][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 308.882173][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.898394][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.905813][T14747] bridge_slave_1: entered allmulticast mode [ 308.936984][ T5155] Bluetooth: hci1: command tx timeout [ 308.963879][T14747] bridge_slave_1: entered promiscuous mode [ 309.129951][ T2982] bridge_slave_1: left allmulticast mode [ 309.135657][ T2982] bridge_slave_1: left promiscuous mode [ 309.141946][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.247689][ T2982] bridge_slave_0: left allmulticast mode [ 309.255231][ T2982] bridge_slave_0: left promiscuous mode [ 309.263048][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.366489][T14837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 309.670570][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.683055][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.693565][ T2982] bond0 (unregistering): Released all slaves [ 309.707349][T14747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.734344][T14747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.922288][T14848] netlink: 'syz.2.2334': attribute type 2 has an invalid length. [ 309.935121][T14747] team0: Port device team_slave_0 added [ 309.938337][T14848] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 309.954270][T14747] team0: Port device team_slave_1 added [ 310.090501][T14747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.098607][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.187779][T14747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.218238][T14747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.233600][T14747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.260477][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 310.279019][T14747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.362670][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 310.384722][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 310.415456][T14727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.516665][ T5155] Bluetooth: hci4: command tx timeout [ 310.537068][T14747] hsr_slave_0: entered promiscuous mode [ 310.555416][T14747] hsr_slave_1: entered promiscuous mode [ 310.572521][T14747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.587006][T14747] Cannot create hsr debugfs directory [ 310.600835][T14727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.639017][ T2982] hsr_slave_0: left promiscuous mode [ 310.649177][ T2982] hsr_slave_1: left promiscuous mode [ 310.658365][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.670730][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.682993][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.690855][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.718993][ T2982] veth1_macvtap: left promiscuous mode [ 310.725031][ T2982] veth0_macvtap: left promiscuous mode [ 310.730875][ T2982] veth1_vlan: left promiscuous mode [ 310.736618][ T2982] veth0_vlan: left promiscuous mode [ 311.002517][ T5155] Bluetooth: hci1: command tx timeout [ 311.230664][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 311.287928][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 311.703490][T14727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.764877][T14727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.842994][T14884] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 312.246131][T14727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.352215][T14903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2348'. [ 312.417437][T14727] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.435567][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.442740][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.485425][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.492630][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.596731][ T5155] Bluetooth: hci4: command tx timeout [ 312.672721][T14915] xt_TCPMSS: Only works on TCP SYN packets [ 312.723471][T14914] xt_ipcomp: unknown flags 12 [ 312.764109][T14747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.827146][T14747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.827586][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 312.851269][T14747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.856779][T14922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 312.875354][T14747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.931245][T14929] macsec0: entered promiscuous mode [ 312.952457][T14929] veth1_macvtap: left promiscuous mode [ 313.008399][T14929] macsec0 (unregistering): left promiscuous mode [ 313.077006][ T5155] Bluetooth: hci1: command tx timeout [ 313.161819][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.292656][T14727] veth0_vlan: entered promiscuous mode [ 313.330219][T14727] veth1_vlan: entered promiscuous mode [ 313.389554][T14747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.456254][T14747] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.501866][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.508999][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.551558][T14747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.562464][T14747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.584020][T14727] veth0_macvtap: entered promiscuous mode [ 313.596087][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.603259][T14567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.648820][T14952] net_ratelimit: 19 callbacks suppressed [ 313.648838][T14952] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 313.677306][T14952] FAULT_INJECTION: forcing a failure. [ 313.677306][T14952] name failslab, interval 1, probability 0, space 0, times 0 [ 313.690358][T14952] CPU: 1 UID: 0 PID: 14952 Comm: syz.4.2361 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 313.701196][T14952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 313.711375][T14952] Call Trace: [ 313.714672][T14952] [ 313.717618][T14952] dump_stack_lvl+0x241/0x360 [ 313.722329][T14952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.727556][T14952] ? __pfx__printk+0x10/0x10 [ 313.732176][T14952] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 313.738183][T14952] ? __pfx___might_resched+0x10/0x10 [ 313.743499][T14952] should_fail_ex+0x3b0/0x4e0 [ 313.748199][T14952] should_failslab+0xac/0x100 [ 313.752877][T14952] ? __alloc_skb+0x1c3/0x440 [ 313.757466][T14952] kmem_cache_alloc_node_noprof+0x71/0x320 [ 313.763271][T14952] __alloc_skb+0x1c3/0x440 [ 313.767688][T14952] ? __pfx___alloc_skb+0x10/0x10 [ 313.772621][T14952] ? __pfx_rtnl_newlink+0x10/0x10 [ 313.777648][T14952] ? netlink_ack_tlv_len+0x6e/0x200 [ 313.782853][T14952] netlink_ack+0x13f/0xa30 [ 313.787266][T14952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.792762][T14952] netlink_rcv_skb+0x262/0x430 [ 313.797533][T14952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 313.802990][T14952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 313.808295][T14952] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.813496][T14952] netlink_unicast+0x7f6/0x990 [ 313.818265][T14952] ? __pfx_netlink_unicast+0x10/0x10 [ 313.823553][T14952] ? __virt_addr_valid+0x183/0x530 [ 313.828661][T14952] ? __check_object_size+0x48e/0x900 [ 313.833945][T14952] netlink_sendmsg+0x8e4/0xcb0 [ 313.838723][T14952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.844012][T14952] ? aa_sock_msg_perm+0x91/0x160 [ 313.848952][T14952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.854237][T14952] __sock_sendmsg+0x221/0x270 [ 313.858911][T14952] ____sys_sendmsg+0x52a/0x7e0 [ 313.863682][T14952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.868976][T14952] __sys_sendmsg+0x292/0x380 [ 313.873577][T14952] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.878694][T14952] ? __pfx_vfs_write+0x10/0x10 [ 313.883467][T14952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.889793][T14952] ? do_syscall_64+0x100/0x230 [ 313.894558][T14952] ? do_syscall_64+0xb6/0x230 [ 313.899253][T14952] do_syscall_64+0xf3/0x230 [ 313.903759][T14952] ? clear_bhb_loop+0x35/0x90 [ 313.908436][T14952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.914325][T14952] RIP: 0033:0x7ff63ff7e719 [ 313.918739][T14952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.938341][T14952] RSP: 002b:00007ff640e49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.946755][T14952] RAX: ffffffffffffffda RBX: 00007ff640135f80 RCX: 00007ff63ff7e719 [ 313.954721][T14952] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 313.962686][T14952] RBP: 00007ff640e49090 R08: 0000000000000000 R09: 0000000000000000 [ 313.970651][T14952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.978614][T14952] R13: 0000000000000000 R14: 00007ff640135f80 R15: 00007fff0182d4f8 [ 313.986594][T14952] [ 314.023467][T14727] veth1_macvtap: entered promiscuous mode [ 314.088441][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.118453][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.139155][T14727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.174875][T14727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.179371][T14962] __nla_validate_parse: 3 callbacks suppressed [ 314.179387][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2366'. [ 314.194316][T14727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.215347][T14727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.288694][T14727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.301239][T14727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.310364][T14727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.319820][T14727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.330032][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2370'. [ 314.499287][T14973] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2368'. [ 314.545175][T14747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.551124][T14973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2368'. [ 314.594534][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 314.643263][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.664766][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.678350][ T5155] Bluetooth: hci4: command tx timeout [ 314.813126][T14747] veth0_vlan: entered promiscuous mode [ 314.820603][T14567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.836152][T14567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.851358][T14747] veth1_vlan: entered promiscuous mode [ 314.912833][T14747] veth0_macvtap: entered promiscuous mode [ 314.923562][T14747] veth1_macvtap: entered promiscuous mode [ 314.966181][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.977434][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.987542][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.998365][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.010311][T14747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.021875][T14989] netlink: 'syz.1.2372': attribute type 4 has an invalid length. [ 315.074610][T14990] netlink: 'syz.1.2372': attribute type 4 has an invalid length. [ 315.107543][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.137457][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.144251][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 315.148407][T14747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.168490][T14996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 315.181325][T14747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.225091][T14747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.262876][T14747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.291113][T14747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.310401][T14747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.330200][T14747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.431977][T14567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.440566][T14567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.465700][T11382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.474030][T11382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.658572][ T1310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.697455][T14982] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 316.013911][ T1310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.226954][ T1310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.295965][ T1310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.354171][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.366271][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.379631][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.394355][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.402673][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.411126][ T1310] bridge_slave_1: left allmulticast mode [ 316.414037][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.425244][ T1310] bridge_slave_1: left promiscuous mode [ 316.433005][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.450927][ T1310] bridge_slave_0: left allmulticast mode [ 316.456863][ T1310] bridge_slave_0: left promiscuous mode [ 316.462537][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.793413][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.804761][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.814954][ T1310] bond0 (unregistering): Released all slaves [ 317.122891][T15006] chnl_net:caif_netlink_parms(): no params data found [ 317.177950][ T1310] hsr_slave_0: left promiscuous mode [ 317.183843][ T1310] hsr_slave_1: left promiscuous mode [ 317.194685][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.202230][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.213524][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.221377][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.245268][ T1310] veth1_macvtap: left promiscuous mode [ 317.250994][ T1310] veth0_macvtap: left promiscuous mode [ 317.256580][ T1310] veth1_vlan: left promiscuous mode [ 317.261880][ T1310] veth0_vlan: left promiscuous mode [ 317.487015][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.717896][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 317.913716][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 318.014981][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.025016][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.037512][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.045661][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.069413][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.079855][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.512431][T15006] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.527109][ T5846] Bluetooth: hci1: command tx timeout [ 318.544079][T15006] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.552541][T15006] bridge_slave_0: entered allmulticast mode [ 318.570100][T15006] bridge_slave_0: entered promiscuous mode [ 318.579800][T15037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2382'. [ 318.590406][T15006] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.598227][T15006] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.605429][T15006] bridge_slave_1: entered allmulticast mode [ 318.612833][T15006] bridge_slave_1: entered promiscuous mode [ 318.722888][T15006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.770199][T15006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.810993][T15042] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 318.905056][T15044] netlink: 'syz.4.2385': attribute type 15 has an invalid length. [ 318.913510][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 318.943874][T15047] veth0_vlan: left promiscuous mode [ 319.019711][T15006] team0: Port device team_slave_0 added [ 319.078984][T15006] team0: Port device team_slave_1 added [ 319.198570][T15006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.205573][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.318998][T15006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.409351][T15006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.422510][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.457179][T15006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.542356][T15063] bond0: Device is already in use. [ 319.604070][ T1310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.760152][ T1310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.791809][T15029] chnl_net:caif_netlink_parms(): no params data found [ 319.844681][T15006] hsr_slave_0: entered promiscuous mode [ 319.857067][T15006] hsr_slave_1: entered promiscuous mode [ 319.865354][T15006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.874716][T15006] Cannot create hsr debugfs directory [ 319.915130][ T1310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.032041][ T1310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.196987][ T5846] Bluetooth: hci4: command tx timeout [ 320.318352][T15098] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 320.366065][T15098] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 320.375225][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.391033][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.398326][T15029] bridge_slave_0: entered allmulticast mode [ 320.405412][T15029] bridge_slave_0: entered promiscuous mode [ 320.413175][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.420319][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.427568][T15029] bridge_slave_1: entered allmulticast mode [ 320.434453][T15029] bridge_slave_1: entered promiscuous mode [ 320.534578][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.588469][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.608602][ T5846] Bluetooth: hci1: command tx timeout [ 320.752827][T15029] team0: Port device team_slave_0 added [ 320.786757][ T1310] bridge_slave_1: left allmulticast mode [ 320.792464][ T1310] bridge_slave_1: left promiscuous mode [ 320.824854][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.851860][ T1310] bridge_slave_0: left allmulticast mode [ 320.859923][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 320.864202][ T1310] bridge_slave_0: left promiscuous mode [ 320.878073][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.881056][T15121] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 321.385437][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.401107][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.412081][ T1310] bond0 (unregistering): Released all slaves [ 321.426262][T15117] vlan3: entered promiscuous mode [ 321.432171][T15117] vlan3: entered allmulticast mode [ 321.437433][T15117] hsr_slave_1: entered allmulticast mode [ 321.451009][T15029] team0: Port device team_slave_1 added [ 321.586065][T15122] hsr_slave_1 (unregistering): left allmulticast mode [ 321.613517][T15122] hsr_slave_1 (unregistering): left promiscuous mode [ 321.646118][T15124] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 321.674228][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.693831][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.721883][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.828527][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.835528][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.874921][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.935373][T15139] netlink: 'syz.1.2405': attribute type 2 has an invalid length. [ 321.961219][T15139] IPVS: length: 60 != 8 [ 322.015529][T15029] hsr_slave_0: entered promiscuous mode [ 322.161817][T15029] hsr_slave_1: entered promiscuous mode [ 322.181911][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.195452][T15029] Cannot create hsr debugfs directory [ 322.212266][ T1310] hsr_slave_0: left promiscuous mode [ 322.219636][ T1310] hsr_slave_1: left promiscuous mode [ 322.225552][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.234639][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.242496][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.254383][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.276796][ T1310] veth1_macvtap: left promiscuous mode [ 322.282353][ T1310] veth0_macvtap: left promiscuous mode [ 322.288188][ T5846] Bluetooth: hci4: command tx timeout [ 322.293828][ T1310] veth1_vlan: left promiscuous mode [ 322.299278][ T1310] veth0_vlan: left promiscuous mode [ 322.689358][ T5846] Bluetooth: hci1: command tx timeout [ 322.943678][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 323.034675][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 323.708735][T15006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.768074][T15006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.819366][T15006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.945134][T15006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.122353][T15006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.154165][T15006] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.165746][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.172935][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.194944][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.202114][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.357677][ T5846] Bluetooth: hci4: command tx timeout [ 324.515264][T15029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.528057][T15029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.538773][T15029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.559507][T15029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.583396][T15006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.679528][T15006] veth0_vlan: entered promiscuous mode [ 324.723826][T15006] veth1_vlan: entered promiscuous mode [ 324.756848][ T5846] Bluetooth: hci1: command tx timeout [ 324.772111][T15029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.809467][T15006] veth0_macvtap: entered promiscuous mode [ 324.835923][T15006] veth1_macvtap: entered promiscuous mode [ 324.849256][T15029] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.902942][T15006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.922095][T15006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.942899][T15006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.958094][T15006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.974095][T15006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.986446][T15006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.998047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.005237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.049890][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.058176][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.078898][T15006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.089996][T15006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.099672][T15006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.109224][T15006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.199596][T15029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.283513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.323692][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.370051][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.382226][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.550382][T15029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.754049][T15029] veth0_vlan: entered promiscuous mode [ 325.769202][T15029] veth1_vlan: entered promiscuous mode [ 325.814446][T15241] netlink: 'syz.4.2425': attribute type 39 has an invalid length. [ 325.824857][T15029] veth0_macvtap: entered promiscuous mode [ 325.841760][T15029] veth1_macvtap: entered promiscuous mode [ 325.913305][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.924345][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.934673][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.946064][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.957758][T15029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.976029][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 325.976440][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.004140][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.014167][T15029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.024780][T15029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.041942][T15029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.093669][T15029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.108901][T15029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.120980][T15029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.130823][T15029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.235485][T11382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.274680][T11382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.326463][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.348974][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.861517][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 326.971453][ T2964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.998330][T15285] geneve5: entered promiscuous mode [ 327.003594][T15285] geneve5: entered allmulticast mode [ 327.323140][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.333612][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.342551][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.354620][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.362264][ T5155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.372874][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.550106][T15290] chnl_net:caif_netlink_parms(): no params data found [ 327.605026][T15290] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.612605][T15290] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.620005][T15290] bridge_slave_0: entered allmulticast mode [ 327.626904][T15290] bridge_slave_0: entered promiscuous mode [ 327.634063][T15290] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.642553][T15290] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.653136][T15290] bridge_slave_1: entered allmulticast mode [ 327.660099][T15290] bridge_slave_1: entered promiscuous mode [ 327.692382][T15290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.704465][T15290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.739898][T15290] team0: Port device team_slave_0 added [ 327.750835][T15290] team0: Port device team_slave_1 added [ 327.772653][T15290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.780383][T15290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.807403][T15290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.820705][T15290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.827814][T15290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.854883][T15290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.893904][T15290] hsr_slave_0: entered promiscuous mode [ 327.900455][T15290] hsr_slave_1: entered promiscuous mode [ 327.906418][T15290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.914233][T15290] Cannot create hsr debugfs directory [ 328.308272][ T2964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.364105][ T2964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.423051][ T2964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.513521][ T2964] bridge_slave_1: left allmulticast mode [ 328.520228][ T2964] bridge_slave_1: left promiscuous mode [ 328.525945][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.534528][ T2964] bridge_slave_0: left allmulticast mode [ 328.540935][ T2964] bridge_slave_0: left promiscuous mode [ 328.546715][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.017229][T15310] netlink: 'syz.4.2441': attribute type 10 has an invalid length. [ 329.027994][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.056502][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.079132][ T2964] bond0 (unregistering): Released all slaves [ 329.128291][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.146240][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.157671][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.165689][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.206488][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 329.214959][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.278236][T15310] team0: Device veth0_macvtap failed to register rx_handler [ 329.397011][ T55] Bluetooth: hci1: command tx timeout [ 329.646041][ T2964] hsr_slave_0: left promiscuous mode [ 329.657045][ T2964] hsr_slave_1: left promiscuous mode [ 329.669153][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.683565][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.695161][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.709275][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.756148][ T2964] veth1_macvtap: left promiscuous mode [ 329.774716][ T2964] veth0_macvtap: left promiscuous mode [ 329.797635][ T2964] veth1_vlan: left promiscuous mode [ 329.802968][ T2964] veth0_vlan: left promiscuous mode [ 329.888431][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 330.282943][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 330.333796][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 330.830702][T15290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.843207][T15290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.865782][T15290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.915322][T15290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.935608][T15339] netlink: 'syz.4.2446': attribute type 9 has an invalid length. [ 330.950786][T15315] chnl_net:caif_netlink_parms(): no params data found [ 330.980629][T15339] macvlan3: entered promiscuous mode [ 330.985949][T15339] bond0: entered promiscuous mode [ 331.005131][T15339] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 331.255425][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.270175][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.284958][T15315] bridge_slave_0: entered allmulticast mode [ 331.292728][T15315] bridge_slave_0: entered promiscuous mode [ 331.302517][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.311688][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.319831][T15315] bridge_slave_1: entered allmulticast mode [ 331.327572][ T55] Bluetooth: hci4: command tx timeout [ 331.327736][T15315] bridge_slave_1: entered promiscuous mode [ 331.351796][T15356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2450'. [ 331.451375][ T1310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.477308][ T55] Bluetooth: hci1: command tx timeout [ 331.479370][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.520935][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.634267][ T1310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.695090][T15315] team0: Port device team_slave_0 added [ 331.710842][T15315] team0: Port device team_slave_1 added [ 331.799064][ T1310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.862197][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.869824][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.904561][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.948706][ T1310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.971436][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.978989][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.012305][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.104060][T15315] hsr_slave_0: entered promiscuous mode [ 332.115687][T15315] hsr_slave_1: entered promiscuous mode [ 332.133147][T15315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.141678][T15315] Cannot create hsr debugfs directory [ 332.191899][T15290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.302886][ T1310] bridge_slave_1: left allmulticast mode [ 332.308849][ T1310] bridge_slave_1: left promiscuous mode [ 332.314563][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.329192][ T1310] bridge_slave_0: left allmulticast mode [ 332.343489][ T1310] bridge_slave_0: left promiscuous mode [ 332.356041][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.783836][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.794690][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.806970][ T1310] bond0 (unregistering): Released all slaves [ 332.822249][T15290] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.834260][T15374] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN PTI [ 332.846866][T15374] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 332.855280][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.2.2452 Not tainted 6.12.0-rc7-syzkaller-01681-g38f83a57aa8e #0 [ 332.866025][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 332.876085][T15374] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 332.881974][T15374] Code: 20 08 00 00 e8 1e 27 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ae 6c 6b f8 48 8b 03 48 89 5c 24 [ 332.901563][T15374] RSP: 0018:ffffc90003426940 EFLAGS: 00010203 [ 332.907626][T15374] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 332.915600][T15374] RDX: 0000000000001000 RSI: ffffffff8c610dc0 RDI: ffffffff8c610d80 [ 332.923560][T15374] RBP: ffffc90003426a50 R08: 0000000000000920 R09: 00000000ffffffff [ 332.931522][T15374] R10: dffffc0000000000 R11: fffffbfff203ae46 R12: dffffc0000000000 [ 332.939484][T15374] R13: 1ffff92000684d38 R14: ffff888061b94126 R15: 1ffff92000684d34 [ 332.947451][T15374] FS: 00007f467738b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 332.956367][T15374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.962961][T15374] CR2: 0000001b31000ff8 CR3: 00000000591b8000 CR4: 00000000003526f0 [ 332.971029][T15374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.978990][T15374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.986975][T15374] Call Trace: [ 332.990244][T15374] [ 332.993165][T15374] ? __die_body+0x5f/0xb0 [ 332.997486][T15374] ? die_addr+0xb0/0xe0 [ 333.001632][T15374] ? exc_general_protection+0x3dd/0x5d0 [ 333.007178][T15374] ? asm_exc_general_protection+0x26/0x30 [ 333.012897][T15374] ? dev_prep_valid_name+0x3e3/0xa40 [ 333.018186][T15374] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 333.023812][T15374] register_netdevice+0x542/0x1b00 [ 333.028916][T15374] ? trace_kmalloc+0x1f/0xd0 [ 333.033496][T15374] ? __kmalloc_node_noprof+0x247/0x440 [ 333.038946][T15374] ? validate_linkmsg+0x825/0xa30 [ 333.043967][T15374] ? __pfx__get_random_bytes+0x10/0x10 [ 333.049422][T15374] ? __pfx_register_netdevice+0x10/0x10 [ 333.054958][T15374] ? dev_addr_mod+0xbd/0x330 [ 333.059542][T15374] ? __asan_memset+0x23/0x50 [ 333.064121][T15374] ? netif_inherit_tso_max+0x1f3/0x340 [ 333.069577][T15374] veth_newlink+0x455/0xc10 [ 333.074074][T15374] ? __pfx_veth_newlink+0x10/0x10 [ 333.079089][T15374] ? netlink_rcv_skb+0x1e3/0x430 [ 333.084016][T15374] ? netlink_unicast+0x7f6/0x990 [ 333.088944][T15374] ? netlink_sendmsg+0x8e4/0xcb0 [ 333.093966][T15374] ? __sock_sendmsg+0x221/0x270 [ 333.098809][T15374] ? ____sys_sendmsg+0x52a/0x7e0 [ 333.103758][T15374] ? do_syscall_64+0xf3/0x230 [ 333.108430][T15374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.114502][T15374] ? alloc_netdev_mqs+0xcd0/0x1080 [ 333.119776][T15374] ? rtnl_create_link+0x91c/0xc20 [ 333.124794][T15374] ? __pfx_veth_newlink+0x10/0x10 [ 333.129806][T15374] rtnl_newlink_create+0x2df/0xa30 [ 333.134908][T15374] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 333.140530][T15374] ? ns_capable+0x8a/0xf0 [ 333.144849][T15374] rtnl_newlink+0x17dd/0x24f0 [ 333.149520][T15374] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.154529][T15374] ? netlink_unicast+0x7c4/0x990 [ 333.159454][T15374] ? __pfx_validate_chain+0x10/0x10 [ 333.164642][T15374] ? __sys_sendmsg+0x292/0x380 [ 333.169405][T15374] ? do_syscall_64+0xf3/0x230 [ 333.174071][T15374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.180152][T15374] ? __pfx_lock_release+0x10/0x10 [ 333.185173][T15374] ? __pfx_rtnl_newlink+0x10/0x10 [ 333.190191][T15374] rtnetlink_rcv_msg+0x791/0xcf0 [ 333.195119][T15374] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 333.200222][T15374] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.205674][T15374] ? ref_tracker_free+0x643/0x7e0 [ 333.210691][T15374] netlink_rcv_skb+0x1e3/0x430 [ 333.215444][T15374] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 333.220888][T15374] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.226175][T15374] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.231371][T15374] netlink_unicast+0x7f6/0x990 [ 333.236124][T15374] ? __pfx_netlink_unicast+0x10/0x10 [ 333.241397][T15374] ? __virt_addr_valid+0x183/0x530 [ 333.246498][T15374] ? __check_object_size+0x48e/0x900 [ 333.251773][T15374] netlink_sendmsg+0x8e4/0xcb0 [ 333.256536][T15374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.261824][T15374] ? aa_sock_msg_perm+0x91/0x160 [ 333.266756][T15374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.272038][T15374] __sock_sendmsg+0x221/0x270 [ 333.276714][T15374] ____sys_sendmsg+0x52a/0x7e0 [ 333.281479][T15374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.286771][T15374] __sys_sendmsg+0x292/0x380 [ 333.291356][T15374] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.296473][T15374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.302792][T15374] ? do_syscall_64+0x100/0x230 [ 333.307547][T15374] ? do_syscall_64+0xb6/0x230 [ 333.312214][T15374] do_syscall_64+0xf3/0x230 [ 333.316712][T15374] ? clear_bhb_loop+0x35/0x90 [ 333.321385][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.327265][T15374] RIP: 0033:0x7f467657e719 [ 333.331668][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.351260][T15374] RSP: 002b:00007f467738b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.359662][T15374] RAX: ffffffffffffffda RBX: 00007f4676736058 RCX: 00007f467657e719 [ 333.367622][T15374] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 333.375583][T15374] RBP: 00007f46765f175e R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.383547][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.391507][T15374] R13: 0000000000000000 R14: 00007f4676736058 R15: 00007ffdaedc0418 [ 333.399474][T15374] [ 333.402479][T15374] Modules linked in: [ 333.409678][T15374] ---[ end trace 0000000000000000 ]--- [ 333.413637][ T55] Bluetooth: hci4: command tx timeout [ 333.450382][T15374] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 333.456408][T15374] Code: 20 08 00 00 e8 1e 27 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ae 6c 6b f8 48 8b 03 48 89 5c 24 [ 333.520396][T15374] RSP: 0018:ffffc90003426940 EFLAGS: 00010203 [ 333.526522][T15374] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 333.535015][T15374] RDX: 0000000000001000 RSI: ffffffff8c610dc0 RDI: ffffffff8c610d80 [ 333.543898][T15374] RBP: ffffc90003426a50 R08: 0000000000000920 R09: 00000000ffffffff [ 333.552920][T15374] R10: dffffc0000000000 R11: fffffbfff203ae46 R12: dffffc0000000000 [ 333.560984][ T55] Bluetooth: hci1: command tx timeout [ 333.567572][T15374] R13: 1ffff92000684d38 R14: ffff888061b94126 R15: 1ffff92000684d34 [ 333.575712][T15374] FS: 00007f467738b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 333.584834][T15374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.591565][T15374] CR2: 000055956e0bb708 CR3: 00000000591b8000 CR4: 00000000003526f0 [ 333.599571][T15374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.607670][T15374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.615643][T15374] Kernel panic - not syncing: Fatal exception [ 333.621939][T15374] Kernel Offset: disabled [ 333.626253][T15374] Rebooting in 86400 seconds..