last executing test programs: 1m16.844075791s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m3.214721011s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 51.79106833s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 46.208146186s ago: executing program 0 (id=355): socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000040)={'batadv0\x00', @random="000000a1ff00"}) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070f009a398e03740aaf07000000", @ANYRES32=r2, @ANYBLOB="8000c7000a00020001"], 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070f009a398e03740aaf07000000", @ANYRES32=r2, @ANYBLOB="8000c7000a00020001"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x3b0, @mcast1, 0x2}, 0x1c, 0x0}}], 0x2, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x3b0, @mcast1, 0x2}, 0x1c, 0x0}}], 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket(0x2, 0x801, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='vnet_rx_one\x00', r4, 0x0, 0x8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='vnet_rx_one\x00', r4, 0x0, 0x8}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffef}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbb}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2e}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x7fff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008095}, 0x4000814) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) 45.235383066s ago: executing program 0 (id=363): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000200000000000000010000000013", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x3, 0x803, 0x0) (async) r5 = socket(0x3, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'wg0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a50000000060a09040000000000000000020000002400048020000180080001006c6f670014000280060001400000000006000440000600000900010073797a30000000000c0003400000000000000002140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 44.878914776s ago: executing program 0 (id=368): syz_emit_ethernet(0xa0, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400"}]}}}}}}, 0x0) 38.781961444s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 32.923537489s ago: executing program 0 (id=368): syz_emit_ethernet(0xa0, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400"}]}}}}}}, 0x0) 24.310823725s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.434167448s ago: executing program 0 (id=368): syz_emit_ethernet(0xa0, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400"}]}}}}}}, 0x0) 9.284094956s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x92, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getqdisc={0x48, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff2}, {0xffe0, 0xfff1}, {0x3, 0xfff8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.603859179s ago: executing program 0 (id=368): syz_emit_ethernet(0xa0, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x6a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400"}]}}}}}}, 0x0) 5.019998906s ago: executing program 1 (id=617): socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001400190100"], 0x28}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @remote}, {0x0, 0x0, 0xfffffffffffffc54, 0x0, @gue={{0x2}}}}}}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.334800895s ago: executing program 4 (id=630): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r4, 0x0, 0x5) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000440)={0x8000, {{0x2, 0x3, @local}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000040)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r5 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)="4857e8", 0x3}], 0x1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.192270555s ago: executing program 4 (id=633): r0 = socket$inet(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xd, 0x1, 0xfffffffffffffff9}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x5, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0xa, 0x5, 0xfff, 0x5, r5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r5, 0x2, 0x10}, &(0x7f00000000c0)=0xc) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x4, 0x583}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0xbf8, 0x98, 0x138, 0x98, 0x2e0, 0x98, 0xb60, 0xb60, 0xb60, 0xb60, 0xb60, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {0xff}}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x400000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x850, 0x880, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x1}, {0x5}, {0x8, 0x1}, {0x6b, 0x3}, {0x7564}, {0x1, 0x2}, {0xb, 0x3}, {0x6, 0x2}, {0x81, 0x1}, {0x4ab, 0x1}, {0x3ff}], [{0x7, 0x7}, {0xfffffffc, 0x7}, {0x198f709e, 0x2}, {0x101, 0x9}, {0x9, 0x8}, {0x3, 0x9}, {0x4, 0x2aef}, {0x0, 0xf}, {0x5, 0x208}, {0x4, 0xb}, {0x7, 0x800}], 0x4, 0x2}, {[{0x7}, {0xc0, 0x2}, {0x8}, {0x81, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x1}, {0x4, 0x1}, {0x901, 0x3}, {}, {0x1a, 0x2}], [{0x3, 0x4}, {0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x6, 0x5f3}, {0x5, 0x83}, {0x6, 0x3}, {0xc, 0xabe}, {0x567, 0x124}, {0x8, 0x1}, {0x80000000, 0x6}], 0x2, 0x3}, {[{0x101, 0x1}, {0xac6}, {0x5, 0x3}, {0x100, 0x1}, {0x4, 0x2}, {0xfffffff8, 0x2}, {0x81, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x1}], [{0x7f, 0x1}, {0xb}, {0x5, 0x3}, {0x60a, 0x2}, {0x1000, 0x5}, {0x8, 0x2}, {0x5, 0x4}, {0x4, 0x80}, {0x6, 0xaa}, {0x4, 0x10100000}, {0x8, 0x5}], 0xa, 0x7}, {[{0x1, 0x1}, {0x2, 0x1}, {0xff, 0x1}, {0x7fff, 0x2}, {0x5b70, 0x2}, {}, {0x7, 0x3}, {0x8, 0x3}, {0x7, 0x3}, {0x3, 0x3}, {0x4, 0x3}], [{0x4, 0x8001}, {0x1000, 0x8}, {0xffffff07, 0x4}, {0xa52, 0x4}, {0x9, 0xffffffff}, {0x3, 0x4}, {0xea, 0x5}, {0x7f, 0x4}, {0x8, 0x5}, {0x0, 0x7}, {0x9, 0x3}], 0x4, 0x6}, {[{0x8, 0x3}, {0x5, 0x2}, {0x8}, {0x5, 0x21b96e8bc9085bec}, {0x4, 0x3}, {0x5, 0x3}, {0x460f, 0x1}, {0x1b7, 0x3}, {0x6}, {0x9, 0x2}, {0x5, 0x1}], [{0x3, 0x32}, {0x3, 0xc1}, {0x39, 0xfff}, {0x1000, 0x80000000}, {0x6d3889ac, 0xffff}, {0x8, 0x40}, {0x268, 0x1}, {0xe494, 0xfffffffd}, {0x8d5, 0xc55f}, {0x100, 0x5}, {0x7, 0x494}], 0x3, 0x6}, {[{0x7, 0x3}, {0xff, 0x2}, {0x2, 0x3}, {0xff, 0x3}, {0xfb, 0x3}, {0x1d6, 0x3}, {0x20f, 0x1}, {0x2fb}, {0x7c000000, 0x1}, {0x6, 0x2}, {0x5f}], [{0x1, 0x8}, {0x782, 0x2}, {0xd29, 0x10001}, {0x4, 0x3e15}, {0x854e, 0x4}, {0x200, 0x4}, {0x5, 0x4}, {0x2, 0xa1}, {0xf6, 0x6}, {0x1, 0x1}, {0x0, 0x6}], 0x4, 0x2}, {[{0xad, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x9}, {0x6, 0x3}, {0x34d9, 0x1}, {0x76, 0x3}, {0x400}, {0xae6, 0x2}, {0x400, 0x3}, {0x5, 0x1}], [{0x3, 0xe}, {0xc197}, {0x1, 0xc}, {0xae, 0x3}, {0x903d, 0x9}, {0x1, 0x5cc8fbff}, {0xe3d, 0xffffffff}, {0x9}, {0x3, 0x2}, {0x9, 0xf4}, {0xffffffff, 0x1}], 0x1}, {[{0x5d3}, {0xfffffff7}, {0x1, 0x1}, {0x3ff, 0x1}, {0x9, 0x2}, {0x64, 0x2}, {0x14}, {0x18e995e9, 0x2}, {0x3, 0x2}, {0x4}, {0x8}], [{0xfff, 0x45}, {0x2, 0xfff}, {0x5, 0x4}, {0xa00000, 0x45}, {0x4, 0x1}, {0x2, 0x2}, {0x81, 0x8}, {0x3, 0x1}, {0xdc, 0x9}, {0xd230, 0x3}, {0xf3, 0x401}], 0x8, 0x2}, {[{0x5}, {0x5, 0x2}, {0xe3, 0x3}, {0x9, 0x2}, {0x3, 0x2}, {0x1800000, 0x3}, {0xf9, 0x2}, {0x80000000, 0x3}, {0x101}, {0x5}, {0x1, 0x1}], [{0x9, 0x6}, {0xa5, 0xf}, {0x0, 0x400}, {0x2}, {0x6, 0x10001}, {0x64000000, 0x5}, {0x800, 0x41}, {0x5, 0xffffff68}, {0x1, 0x5}, {0x2, 0x5}, {0x4, 0x2}], 0x0, 0x5}, {[{0x7, 0x1}, {0x9, 0x1}, {0x2}, {0x9, 0x2}, {0x6}, {0xfff, 0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x9}, {0x0, 0x3}, {0x31ed, 0x2}], [{0x3ff, 0x3}, {0x40, 0xa000000}, {0x8, 0x8}, {0x7fffffff, 0x6}, {0xc, 0x4}, {0x4, 0x1}, {0xd4, 0x81}, {0x3}, {0x50d74e3, 0x9}, {0x7}, {0x0, 0xdcb7}], 0xb, 0x9}, {[{0x6, 0x1}, {0x40}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x8, 0x1}, {0x420, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0xca1e, 0x1}, {0x3}], [{0x7, 0x400}, {0x200, 0x1ff}, {0x2e, 0x7}, {0x9, 0xafc}, {0x5, 0x7}, {0x8000, 0x6}, {0x8e0, 0x400}, {0x8000}, {0x7fffffff, 0x5}, {0x3, 0xb365}, {0x87e, 0x5}], 0x8, 0x6}], 0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc58) 2.472011713s ago: executing program 1 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fa0c00000728a80000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x61, 0x2, 0x0, 0x20}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0xec0, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r6, @ANYBLOB="0800a1000900ec00080026"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24044094) 2.230414189s ago: executing program 4 (id=639): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @multicast1}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001100)="48320a00eb88376c52a11af40b6c5e7992f434de5438a1977b468ff9223b1a57916f0fc61e78b0916dfdb6d05aaa917d700bd797d7b4e5d7e940cb938ef0f7885f829d63259d03a8fdcec9e86244fcf4ea8bc8f42dce84c419cc40af49f27a99678e988fdd976ea53ba674d269918b84183c8e146224f0c62205e7c299aee0f1e28f31fd2f873cc1fc0342b987c6f413d3b82c9c3350775880e5472475106652fbf8132ea57c404ae611fe1b223aac89c7aea832c35e4687d0cd2ab31662ee9e162391feb3943820da03602b6794548896f55edca4160dd677da971a44a23d9583ebe13575b501046620563259fca9adbc476e3f4c2882e5d22d52f94ddf664bc33468698efe7990df899a781c031b2fe1573820570ab13832fceb42e2800e1c9fae901bcff42acaf9b75b7af9ad043ee767f456c1208ef1018d3ea2fe8fc66ea3491a71465427d21fd52f14e891d3c35c3efc934aadb74a867d534157c80b7054ed94fcf08f6e9f7d3537495809282a8bc530bfe087a37e2f0319d5499045e79f586b70b3c666f61292fe3165f66fd990bfc8008160c6374f9cfea4bc2f5f212119b743730d5353c08f6eb2232afb103c858e0c7c44f8f2bfdebad558a7d4f37ee382d88be01bcf598905c1bb5e3e33438331db1711d20c10827c865b14680be19c5cb7e48ba20ac32030f5262d229cfdbdad20d77918bdfe5ebfc7defa9846d3553b69287cc4a23c53ef984d79d5a6826c9678f821c59679ba481972417cb12baa13c1e7ae4d2093e7c0fb695162c80ce8a91d19a13490f42c053ea69bd1647c01353536b87159ed4ff072e51b2d2ac6e25d98a96886a5e975f3058b23aa1bf5663ee81c811909eca1715faeb6429e6489cce9359127e9e50c2e59847260ba9a9a8c4e389019117be6d3737fdb0eb6f277f04225999d4f37dd258c225c7fce5b2d22ed9e8409c406188461e8b82449ade90ee411f7d26d1f003fb8a59ec4629fd5146ba4eaea339934b02467e32cec2f0df8e4fc7ba73ed5414c9f709b5020c27580616354d2ce0f533b044d4f283cc40d3990085ce323f00a45a5058c7f1e9510eb529d17c4fecffc79e2028a8460f57b87fec76e049470660606fa3c18ecc9136b490d30419f9adae5b0adc6c913a78987b7d8f584c5fa2b02059ea6e6e5b4ee1e1fd31aa59bb14b5e5f3a50498eabea40825db99e44873f483e514b67f15e2f4ceb9722f8662e84ee0f09a6538c732d8796f2ceba4c06d7e354dfbcd2e14df5a59bde5f5c20a04187280789b148218ef14d6fc6821b9fba88d2024649b1000de837974c6bbd2567f20e1ef620db0d58c16c9b55cf9041595adc2af429793742e6fe747f964fa2574a97c1cdc94f27d095f5f248691a37b209fab5adcbcc459a7eabaa6272b9d0d373b196df75e0df8b7601c22a8b226b0ef7f734ac7049567c51ac9d5bafa4b35ebd68d0019dbca3231d6897950a83dc89d2d189d67e0343775413dfe33d5e1e7528c264396f5c6ffbef825adf3c5221166040c516d2abaf03406b427aff48e52b212833c043e4a3610ef598ecd8a4f971133c59d3961ce3e65469fe215cda9776d896b827f1e95df4a8440c5cb97220779e605186587e3687ef6f4440ee4e33c7d34da54185dfcaf613be3d12f0504ca67f2dc4d8ed2d4a57c42806e020706a902c6eed307010945da5919f1df25532196d7e32c91215424b41deeeb45fbc31b3b908926c928e03", 0x4d1}], 0x1}, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) close(r1) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @multicast1}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001100)="48320a00eb88376c52a11af40b6c5e7992f434de5438a1977b468ff9223b1a57916f0fc61e78b0916dfdb6d05aaa917d700bd797d7b4e5d7e940cb938ef0f7885f829d63259d03a8fdcec9e86244fcf4ea8bc8f42dce84c419cc40af49f27a99678e988fdd976ea53ba674d269918b84183c8e146224f0c62205e7c299aee0f1e28f31fd2f873cc1fc0342b987c6f413d3b82c9c3350775880e5472475106652fbf8132ea57c404ae611fe1b223aac89c7aea832c35e4687d0cd2ab31662ee9e162391feb3943820da03602b6794548896f55edca4160dd677da971a44a23d9583ebe13575b501046620563259fca9adbc476e3f4c2882e5d22d52f94ddf664bc33468698efe7990df899a781c031b2fe1573820570ab13832fceb42e2800e1c9fae901bcff42acaf9b75b7af9ad043ee767f456c1208ef1018d3ea2fe8fc66ea3491a71465427d21fd52f14e891d3c35c3efc934aadb74a867d534157c80b7054ed94fcf08f6e9f7d3537495809282a8bc530bfe087a37e2f0319d5499045e79f586b70b3c666f61292fe3165f66fd990bfc8008160c6374f9cfea4bc2f5f212119b743730d5353c08f6eb2232afb103c858e0c7c44f8f2bfdebad558a7d4f37ee382d88be01bcf598905c1bb5e3e33438331db1711d20c10827c865b14680be19c5cb7e48ba20ac32030f5262d229cfdbdad20d77918bdfe5ebfc7defa9846d3553b69287cc4a23c53ef984d79d5a6826c9678f821c59679ba481972417cb12baa13c1e7ae4d2093e7c0fb695162c80ce8a91d19a13490f42c053ea69bd1647c01353536b87159ed4ff072e51b2d2ac6e25d98a96886a5e975f3058b23aa1bf5663ee81c811909eca1715faeb6429e6489cce9359127e9e50c2e59847260ba9a9a8c4e389019117be6d3737fdb0eb6f277f04225999d4f37dd258c225c7fce5b2d22ed9e8409c406188461e8b82449ade90ee411f7d26d1f003fb8a59ec4629fd5146ba4eaea339934b02467e32cec2f0df8e4fc7ba73ed5414c9f709b5020c27580616354d2ce0f533b044d4f283cc40d3990085ce323f00a45a5058c7f1e9510eb529d17c4fecffc79e2028a8460f57b87fec76e049470660606fa3c18ecc9136b490d30419f9adae5b0adc6c913a78987b7d8f584c5fa2b02059ea6e6e5b4ee1e1fd31aa59bb14b5e5f3a50498eabea40825db99e44873f483e514b67f15e2f4ceb9722f8662e84ee0f09a6538c732d8796f2ceba4c06d7e354dfbcd2e14df5a59bde5f5c20a04187280789b148218ef14d6fc6821b9fba88d2024649b1000de837974c6bbd2567f20e1ef620db0d58c16c9b55cf9041595adc2af429793742e6fe747f964fa2574a97c1cdc94f27d095f5f248691a37b209fab5adcbcc459a7eabaa6272b9d0d373b196df75e0df8b7601c22a8b226b0ef7f734ac7049567c51ac9d5bafa4b35ebd68d0019dbca3231d6897950a83dc89d2d189d67e0343775413dfe33d5e1e7528c264396f5c6ffbef825adf3c5221166040c516d2abaf03406b427aff48e52b212833c043e4a3610ef598ecd8a4f971133c59d3961ce3e65469fe215cda9776d896b827f1e95df4a8440c5cb97220779e605186587e3687ef6f4440ee4e33c7d34da54185dfcaf613be3d12f0504ca67f2dc4d8ed2d4a57c42806e020706a902c6eed307010945da5919f1df25532196d7e32c91215424b41deeeb45fbc31b3b908926c928e03", 0x4d1}], 0x1}, 0x40) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) (async) close(r1) (async) 2.071837218s ago: executing program 4 (id=641): pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x8, 0x4, 0x5, 0xffffffffffff815c, 0xf, 0x5, 0x3ff}, &(0x7f0000000180)={0x6b, 0x0, 0x81, 0x8001, 0x6, 0x1, 0x5}, &(0x7f0000000200)={0xfff, 0x9, 0x2e7, 0x400, 0x9, 0x4a, 0xffff, 0x8000}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0x4]}, 0x8}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) unshare(0x8020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000100)=0x1) socket$nl_crypto(0x10, 0x3, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000280)=0x2000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0080) 2.005674245s ago: executing program 3 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x160, 0x1d, 0x100, 0x70bd27, 0x25dfdbfe, {0x16}, [@generic="1c53cbdc0306e5bc56f2564aed73bc9b5822766ffe29365b577959a9076cbf04057fb62e4aa73976bbece2244a4c69269e9378adf53774bcaeaa78fed5e2e08c619cb12f38d43600d61fd0f5b087182391eb49e95595ce41181c22090b0eebbdfccdb5", @nested={0xe8, 0x98, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xb}, @nested={0x4, 0x80}, @nested={0x4, 0xfd}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x140}, @generic="b3ef3836a981cfe1e859b48e569ed2fbef38b00e90d8e98cf44777a0853dca31f6f4783573a9494bd31f6c0555f6b9765f663c6acc130d38c34e9e557b8b28a4b8d9811b2d6195a766e6677c8cc1f88d2548678f95c0dbbdb3e60edf8a102dfefa5c915f070f45af0aecfd771d4c36abea4970f37f0de28d767bfa11e0c8c8e5662fcacf6b1478661e4a98bdf5d5987616f3b9274a2672adf8245c47deefb1ed3839d1b1a9ecf76b32ca22dfbe90bd699c205886cce04f1c765f75c919b4f3f1", @nested={0x4, 0x9d}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20010000}, 0x8808) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.460114304s ago: executing program 1 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x8c5d47e95537ac9b) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x9, 0x0, 0x25dfdbfd, {0x2}}, 0x14}}, 0x40) 1.459502471s ago: executing program 3 (id=644): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xac, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc21860}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x7c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000804}, 0x240240d4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xf7, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x2, 0xc}}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x100, 0xfffffff7, {{0xb, 0x4, 0x1, 0x18, 0x2c, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x8, [{@private=0xa010101, 0xd}, {@broadcast, 0x8}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff5d}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4844}, 0x8000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(r9) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r11}, 0x8) ioctl$SIOCSIFHWADDR(r10, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.411668262s ago: executing program 1 (id=645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f000000b6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[{0x10, 0x110, 0x1}], 0x10}}], 0x1, 0x4000045) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.320809531s ago: executing program 1 (id=646): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x40, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x32, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@multicast2]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="09717d53c663954cc8e32a9fc61e6972c43f0940becce42d82cda23ff6c1eb4e00", 0x21}, {&(0x7f0000000040)="8733ba83187dde6936ba21388b07063e8f64f3d5406535dfa7c1eccf05342b8d47836524b633ec91b3be163948d35046acaad362760c0736078de9bfeb264cae5720cac577a28e7f3812814b47cd016c8dc4d0c4f5cd4a2adc3711b1af9ac5a7e6710b0a2ce0cdd5082c11a27ee1901e43bd3b3c9df97f7f3784ce35e8474119f8d89506a40b47fcd59860a96b199a98f8fef5cc7469159620fe961bf53bcde2f13d80aa757e2de5ccf2c16b72da23a71bae50ba4e4b11655458e39bc1c9bf2a40c7d790058394b7bd74be9178a528f04f236ebc1ec3", 0xd6}, {&(0x7f0000000280)="e8ddb00bb420ffff63d4fd7af32c947450afa99d895848cf6fded4e5bd886febf1838d68ae76c66239bfcd6916f3abe0f2777bdc77bf0cc45e2d", 0x3a}, {&(0x7f00000002c0)="adc55cf4e32b9db11f9c21309fd4b8814c50bb2062de4b32a52b7a8b029fe3dad3e96430f65ad9ffc1860f5cef02b90ff9fc84b059d64d4bc12e24fa9f5694c3610330c5e24b38bb3fc45c814c3010b1b4ea0957ffcb3c8424b4c44ce1f87ae993fc6a48b7122522eb7ac5a760168b74949cb749b10cdddfb6f350a0ea1e8112da9d482235c8312895f369c6c151c106e5eb6449053739638c96251a84825721811afc1ed335b4bce48f77ff2d4e6c75152f32fffc084f32d4e5c2d9f450abfb10", 0xc1}, {&(0x7f0000000940)="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", 0x577}], 0x5) 1.239578121s ago: executing program 3 (id=647): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x1ff, 0xdf0400, {{0x1b, 0x4, 0x2, 0xe, 0x6c, 0x1, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ssrr={0x89, 0x3, 0x7f}, @lsrr={0x83, 0x13, 0x8a, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x1, [{@private=0x9, 0x4}, {@multicast1, 0x7d7}]}, @ssrr={0x89, 0x27, 0x95, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, @local, @remote, @rand_addr=0x64010100, @local, @local, @multicast1]}, @generic={0x88, 0x5, "4bec23"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="10030000", @ANYRES16=r1, @ANYBLOB="000026bd7000fedbdf25080000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="1400020076657468305f766c616e00000000000008000300030000001400020067656e65766530000000000000000000080003000100000008000100", @ANYRES32, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="1400020065727370616e30000000000000000000080001002d297c96608304be914f7752fe90e01ab5e6759bb0c9cacc960698cc551cd7020000000000000049a58860d0ac61d26e14d6517569c463769c050776", @ANYRES32, @ANYBLOB="1400020076657468305f6d61637674617000000004000280"], 0x310}, 0x1, 0x0, 0x0, 0x8044880}, 0x10) r6 = socket(0x23, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x0, 0x0, 0xff, 0x2, 0x3, 0x77d}, &(0x7f00000002c0)=0x20) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="270e0000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040858}, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="44100000", @ANYRES32, @ANYBLOB="200026bd7000fedbdf2502000000140002007465616d5f736c6176655f31000000000900030073797a32000000000900030073797a32000000001400020070696d36726567000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.103282767s ago: executing program 3 (id=648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x63, 0x7, 0x6d6, 0x88, 0x1}, 0x14) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000008c0)={@empty, @loopback, 0x0}, &(0x7f0000000b00)=0xc) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74a", 0xc6}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd", 0x34}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x1e7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000001c0)="70cac5eef7d8cc636632f42cb0861535e061375c4f73d932ef3aea1f647ebd0acc6f74e3ae1495cb886f079d68d300b194e67bf0a0975861b693a5b1936fe98cd8df45cb20e10fe285d92615f77e4bb325f782d23e2b5a0d10e7fd2f6031cac8ca23d2ad05040418d1014f9f98131524703bfc806483a708d6a1f5a3b334142c0329edc361d1c3d904eb7efcf3fb4253bfdb469c59edca8f", 0x98}, {&(0x7f00000003c0)="5018861918d04c7dd72788c52220fe9061f989a66eeacb04188d18e286e42732f22e936fa28d6a491941b1df36e4592d97c1bbfa86b62f28b42a979dccf399ca9e668bb4a9ed695b50463a122a7fe5a5b9d80e43ea8e61e8f0ec060fa4ff7e9e8ab257409a45ad7acede2afc20f690ada8ebb03220e93430ad4860ae9fd1389224d1b636d0f5c3c3c4f9934d25b29738ad061775679e3765098513f301b020e71a950febbefe14d7661d43004e568f8f976d8ef1655502af79c5df25f444b18c9252a67a7fb882d2353eb38774700245ca9022b9301afb744d7d164da8a716ccf186432c6d0dcc68a01e5ad092e898fa0e909489590a", 0xf6}, {&(0x7f00000004c0)="577eaf1d4935f0ee8966ae6e20473fbceac0ba38cde36498e10d51986b5c87bbcf0222c4f374bb698da757a740be30588669", 0x32}, {&(0x7f0000000500)="1a332fd552be47002faf604604a3accb74782ed17c1b07a714cccd0867fc4b21ad0315acf0d5cb7eef84566363d83f741dd36cc6d64687dd055f214c1c02cd8adebc48e6cb1a5e1301242197d587978015ebf785a349be76ad58bca9770f7ed570a9650de3215cf03cefc5e450a33dd66ae9bf8d508074c5ca1f5e0d3d392b231b5ed30317a6e62a04", 0x89}, {0x0}, {&(0x7f00000005c0)="088e2bc8677371253cf64e436eba989724054271c68a2ec4c1214855170c1c86", 0x20}, {&(0x7f00000007c0)="d5165d1235c1118cf6937804d20129ff7c0c50b7885984a82c42d501cdbae1c517d6a6f10c5a78e72bd8ef5a756aa84973d7341ab7d18ab840822ad70fd089e29042f70377dee25db6b7256eb13db8caadcdb6149d5d5361f9e3fa89afbaebd66d9a0c8698109661c83907003014c4b95daff45038d11ea4b3d7b5f63d980ee70928c2beb5cbbd06986337561592f6ffc94944b146f4d42cefda4c39c51216b525b61c6fdf7664e7c982b361357eb515d6b0d2e9b9f40e78263039f38b68d3e8ff8d664f94c5d3e9b89677d968", 0xcd}, {&(0x7f0000000640)="faebbfe4fb44e07d859277d85a6abd62f19c0c479c8ff6e8fed23d52c31bb6f0da1f945c3d8eff587a52d0f2e9a60aa897805d2d7ed011e60f3f4b774a8b3ea40469dd01cfbd4e1ae1c4398a4332ace2", 0x50}], 0x8, &(0x7f0000000b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x78}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @multicast2}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x17, [@local]}]}}}], 0x88}}], 0x4, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6", 0x3c, 0x11, 0x0, 0x0) 986.487967ms ago: executing program 3 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x88}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x300) 927.967519ms ago: executing program 4 (id=650): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x814) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf2506000000080034002c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048811) shutdown(r1, 0x1) (async) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) 788.708745ms ago: executing program 3 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee, 0x1}}, 0x18, &(0x7f0000000440)={&(0x7f0000000240)="00f0c300400500b2fb", 0x9}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 392.694809ms ago: executing program 1 (id=652): r0 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000002a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0xa}, {0x0, 0x3}]}]}, {0x0, [0x30, 0x61]}}, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x42000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x10) 0s ago: executing program 4 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500001e0000000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="0000000000100000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaafd00000a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) kernel console output (not intermixed with test programs): ying later): interface not active [ 69.243330][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.251321][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.278009][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.465951][ T6152] tap0: tun_chr_ioctl cmd 1074025688 [ 69.496006][ T6022] hsr_slave_0: entered promiscuous mode [ 69.525592][ T6022] hsr_slave_1: entered promiscuous mode [ 69.970555][ T6178] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 70.063874][ T6192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.64'. [ 70.485086][ T6202] netlink: 'syz.1.69': attribute type 3 has an invalid length. [ 70.654898][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 70.718372][ T6022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.780294][ T6220] geneve2: entered promiscuous mode [ 70.792674][ T6220] geneve2: entered allmulticast mode [ 70.827565][ T6223] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 70.902582][ T6022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.945316][ T6234] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 70.975573][ T6022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.081610][ T55] Bluetooth: hci3: command tx timeout [ 71.093456][ T6022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.248769][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.318430][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.337549][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.345688][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.425000][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.432159][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.500916][ T6256] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.611245][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 71.659002][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.215440][ T6285] siw: device registration error -23 [ 72.387567][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.413275][ T6301] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 72.521350][ T6301] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 72.521874][ T6311] xt_bpf: check failed: parse error [ 72.601126][ T6314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.89'. [ 72.639792][ T6304] nr0: entered promiscuous mode [ 72.702977][ T6022] veth0_vlan: entered promiscuous mode [ 72.714006][ T6022] veth1_vlan: entered promiscuous mode [ 72.736277][ T6022] veth0_macvtap: entered promiscuous mode [ 72.745462][ T6022] veth1_macvtap: entered promiscuous mode [ 72.760492][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.771146][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.781030][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.791567][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.801661][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.812313][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.822429][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.833142][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.844322][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.912475][ T6325] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.923948][ T6325] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.932695][ T6325] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.942053][ T6325] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.008191][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.024733][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.051009][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.075248][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.101650][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.154514][ T55] Bluetooth: hci3: command tx timeout [ 73.155826][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.193700][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.251994][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.284844][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.332486][ T6022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.367890][ T6022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.400223][ T6022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440054][ T6022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.656731][ T6346] xt_CT: No such helper "netbios-ns" [ 73.729743][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.765439][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.841445][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.860489][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 73.875863][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.912410][ T6360] netlink: 104 bytes leftover after parsing attributes in process `syz.4.98'. [ 73.917692][ T6356] syz_tun: entered promiscuous mode [ 74.168559][ T6374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 74.176798][ T6373] sctp: [Deprecated]: syz.4.105 (pid 6373) Use of int in max_burst socket option. [ 74.176798][ T6373] Use struct sctp_assoc_value instead [ 74.234998][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 74.253190][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 74.272669][ T6376] netlink: 'syz.1.106': attribute type 11 has an invalid length. [ 74.282484][ T6373] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 74.562744][ T2884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.844589][ T2884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.070350][ T2884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.289718][ T6418] team0: Device wg2 is of different type [ 75.325605][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.336058][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.344336][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.352319][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.360386][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.368137][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.377464][ T6415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.576139][ T6421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'. [ 76.487084][ T2884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.614387][ T6414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.688871][ T6398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.734030][ T6398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.774224][ T8] cfg80211: failed to load regulatory.db [ 76.888556][ T6414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.960171][ T6422] lo speed is unknown, defaulting to 1000 [ 77.029576][ T6398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.036868][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.054220][ T6398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.056771][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.073327][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.082524][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.094145][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.103780][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.191927][ T6414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.490954][ T6414] bond0: (slave netdevsim0): Releasing backup interface [ 77.533018][ T6414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.628078][ T6398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.640475][ T6398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.681792][ T6444] lo speed is unknown, defaulting to 1000 [ 77.696238][ T2884] bridge_slave_1: left allmulticast mode [ 77.731282][ T2884] bridge_slave_1: left promiscuous mode [ 77.744246][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.753525][ T2884] bridge_slave_0: left allmulticast mode [ 77.767498][ T2884] bridge_slave_0: left promiscuous mode [ 77.773311][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.791407][ T6456] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 78.086225][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.097768][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.111750][ T2884] bond0 (unregistering): Released all slaves [ 78.140402][ T6398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.151981][ T6398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.203844][ T6460] bond0: entered promiscuous mode [ 78.209007][ T6460] bond_slave_0: entered promiscuous mode [ 78.217083][ T6460] bond_slave_1: entered promiscuous mode [ 78.223001][ T6460] team0: entered promiscuous mode [ 78.228659][ T6460] team_slave_0: entered promiscuous mode [ 78.234800][ T6460] team_slave_1: entered promiscuous mode [ 78.241620][ T6460] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 78.250710][ T6460] bond0: left promiscuous mode [ 78.255684][ T6460] bond_slave_0: left promiscuous mode [ 78.261264][ T6460] bond_slave_1: left promiscuous mode [ 78.267127][ T6460] team0: left promiscuous mode [ 78.271962][ T6460] team_slave_0: left promiscuous mode [ 78.277821][ T6460] team_slave_1: left promiscuous mode [ 78.337041][ T6414] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.418772][ T6414] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.459051][ T6466] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 78.479466][ T6466] team0: Port device dummy0 added [ 78.511936][ T6414] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.540663][ T6414] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.744941][ T6398] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.753540][ T6398] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.837765][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 79.122451][ T6398] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.131962][ T6398] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.159678][ T55] Bluetooth: hci3: command tx timeout [ 79.173239][ T2884] hsr_slave_0: left promiscuous mode [ 79.184027][ T2884] hsr_slave_1: left promiscuous mode [ 79.208881][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.217776][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.230157][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.239055][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.274731][ T2884] veth1_macvtap: left promiscuous mode [ 79.280551][ T2884] veth0_macvtap: left promiscuous mode [ 79.286455][ T2884] veth1_vlan: left promiscuous mode [ 79.293067][ T2884] veth0_vlan: left promiscuous mode [ 79.688227][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 79.728497][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 80.093237][ T6398] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.104896][ T6398] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.138872][ T6444] chnl_net:caif_netlink_parms(): no params data found [ 80.207105][ T6398] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.224542][ T6398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.449902][ T6521] netlink: 'syz.1.140': attribute type 11 has an invalid length. [ 80.462254][ T6523] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 80.775010][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.789566][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.798577][ T6444] bridge_slave_0: entered allmulticast mode [ 80.813296][ T6444] bridge_slave_0: entered promiscuous mode [ 80.825778][ T6538] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 80.896276][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.920225][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.948272][ T6444] bridge_slave_1: entered allmulticast mode [ 80.969949][ T6444] bridge_slave_1: entered promiscuous mode [ 81.022561][ T6552] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 81.066139][ T6444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.092895][ T6444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.201756][ T6444] team0: Port device team_slave_0 added [ 81.217145][ T6444] team0: Port device team_slave_1 added [ 81.235771][ T55] Bluetooth: hci3: command tx timeout [ 81.390263][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.398125][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.440846][ T6444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.472792][ T6444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.510422][ T6444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.545774][ T6444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.811213][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 83.108469][ T6444] hsr_slave_0: entered promiscuous mode [ 83.116819][ T6444] hsr_slave_1: entered promiscuous mode [ 83.123231][ T6582] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 83.147930][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 83.323878][ T55] Bluetooth: hci3: command tx timeout [ 83.392308][ T6603] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 83.550411][ T6603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.754737][ T6609] bond1: (slave ip6gretap1): making interface the new active one [ 83.786160][ T6609] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 83.862037][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.863990][ T6614] vlan0: entered promiscuous mode [ 83.877640][ T6614] bond1: entered promiscuous mode [ 83.883778][ T6614] ip6gretap1: entered promiscuous mode [ 83.889491][ T6614] vlan0: entered allmulticast mode [ 83.903800][ T6614] bond1: entered allmulticast mode [ 83.909043][ T6614] ip6gretap1: entered allmulticast mode [ 84.089342][ T5894] IPVS: starting estimator thread 0... [ 84.184006][ T6636] IPVS: using max 22 ests per chain, 52800 per kthread [ 84.264988][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 84.327115][ T6643] gretap0: entered promiscuous mode [ 84.337101][ T6643] gretap0: entered allmulticast mode [ 84.340255][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.165'. [ 84.361306][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 84.414560][ T6643] lo speed is unknown, defaulting to 1000 [ 84.675655][ T6444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.712233][ T6444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.779095][ T6444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.848780][ T6444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.124068][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.210631][ T6444] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.258148][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.265420][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.306655][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.313908][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.394321][ T55] Bluetooth: hci3: command tx timeout [ 85.473027][ T6689] can: request_module (can-proto-0) failed. [ 85.544726][ T6697] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 85.993295][ T6717] lo speed is unknown, defaulting to 1000 [ 86.157734][ T6728] Bluetooth: MGMT ver 1.23 [ 86.179147][ T6444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.281979][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.290429][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.314507][ T6733] bridge0: entered allmulticast mode [ 86.339381][ T6737] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.387276][ T6741] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 86.499731][ T6741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.182'. [ 86.592066][ T6444] veth0_vlan: entered promiscuous mode [ 86.631235][ T6444] veth1_vlan: entered promiscuous mode [ 86.724895][ T6444] veth0_macvtap: entered promiscuous mode [ 86.769779][ T6444] veth1_macvtap: entered promiscuous mode [ 86.798483][ T6761] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 87.148278][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.185276][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.214088][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.251723][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.267995][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.289850][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.302365][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.313014][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.340988][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.375837][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 87.454342][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.483842][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.503842][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.532035][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.553905][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.568695][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.581110][ T6444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.605142][ T6444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.627598][ T6444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.690685][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 87.781950][ T6444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.816577][ T6444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.878512][ T6444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.893230][ T6444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.125510][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.159560][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.209942][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.239204][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.264003][ T6837] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 88.415424][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.562658][ T6855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.205'. [ 89.213033][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.320852][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.348165][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.464384][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.629480][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.895229][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.065298][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.215423][ T6899] netlink: 'syz.0.215': attribute type 7 has an invalid length. [ 90.356834][ T82] bridge_slave_1: left allmulticast mode [ 90.372339][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.373880][ T82] bridge_slave_1: left promiscuous mode [ 90.387544][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.396127][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.404885][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.415908][ T82] bridge_slave_0: left allmulticast mode [ 90.421614][ T82] bridge_slave_0: left promiscuous mode [ 90.427848][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.446671][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.460891][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.469076][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.797630][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.808742][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.819157][ T82] bond0 (unregistering): Released all slaves [ 90.839396][ T6919] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 90.856728][ T6919] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.902818][ T6912] lo speed is unknown, defaulting to 1000 [ 91.138211][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 91.309575][ T6946] netlink: 152 bytes leftover after parsing attributes in process `syz.1.229'. [ 91.527079][ T6961] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 91.538726][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 91.581289][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 91.615954][ T82] hsr_slave_0: left promiscuous mode [ 91.638610][ T82] hsr_slave_1: left promiscuous mode [ 91.667547][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.683758][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.699807][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.719383][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.782066][ T82] veth1_macvtap: left promiscuous mode [ 91.814266][ T82] veth0_macvtap: left promiscuous mode [ 91.819910][ T82] veth1_vlan: left promiscuous mode [ 91.825799][ T82] veth0_vlan: left promiscuous mode [ 92.360512][ T6985] netlink: 104 bytes leftover after parsing attributes in process `syz.4.238'. [ 92.467991][ T82] team0 (unregistering): Port device team_slave_1 removed [ 92.505043][ T82] team0 (unregistering): Port device team_slave_0 removed [ 92.513809][ T5855] Bluetooth: hci3: command tx timeout [ 92.843209][ T6959] lo speed is unknown, defaulting to 1000 [ 93.006870][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 93.140580][ T6993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 93.149958][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 93.265793][ T6996] netlink: 224 bytes leftover after parsing attributes in process `syz.4.241'. [ 93.317269][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.325545][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.333170][ T6912] bridge_slave_0: entered allmulticast mode [ 93.356617][ T6912] bridge_slave_0: entered promiscuous mode [ 93.393071][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.458389][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.470726][ T6912] bridge_slave_1: entered allmulticast mode [ 93.477998][ T6912] bridge_slave_1: entered promiscuous mode [ 93.670189][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.681928][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.768683][ T6912] team0: Port device team_slave_0 added [ 93.795193][ T6912] team0: Port device team_slave_1 added [ 94.083407][ T7036] bridge0: port 3(vlan2) entered blocking state [ 94.090316][ T7036] bridge0: port 3(vlan2) entered disabled state [ 94.097105][ T7036] vlan2: entered allmulticast mode [ 94.102277][ T7036] team0: entered allmulticast mode [ 94.107486][ T7036] team_slave_0: entered allmulticast mode [ 94.113281][ T7036] team_slave_1: entered allmulticast mode [ 94.122653][ T7036] vlan2: entered promiscuous mode [ 94.127897][ T7036] team0: entered promiscuous mode [ 94.132937][ T7036] team_slave_0: entered promiscuous mode [ 94.138817][ T7036] team_slave_1: entered promiscuous mode [ 94.145259][ T7036] bridge0: port 3(vlan2) entered blocking state [ 94.151637][ T7036] bridge0: port 3(vlan2) entered forwarding state [ 94.159678][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.166779][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.192828][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.327376][ T7033] netlink: 790 bytes leftover after parsing attributes in process `syz.4.248'. [ 94.354149][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.393600][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.443092][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.503325][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 94.593844][ T55] Bluetooth: hci3: command tx timeout [ 94.730788][ T6912] hsr_slave_0: entered promiscuous mode [ 94.755480][ T6912] hsr_slave_1: entered promiscuous mode [ 94.832734][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 94.894815][ T7070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.260'. [ 95.092978][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 95.137388][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.265'. [ 95.183509][ T7087] FAULT_INJECTION: forcing a failure. [ 95.183509][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.187598][ T7091] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.204234][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.1.264 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 95.217573][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 95.220260][ T7091] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 95.227639][ T7087] Call Trace: [ 95.227654][ T7087] [ 95.227663][ T7087] dump_stack_lvl+0x241/0x360 [ 95.227705][ T7087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.227727][ T7087] ? __pfx__printk+0x10/0x10 [ 95.227749][ T7087] ? __pfx_lock_release+0x10/0x10 [ 95.227778][ T7087] should_fail_ex+0x3b0/0x4e0 [ 95.227802][ T7087] _copy_from_user+0x2f/0xc0 [ 95.248380][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 95.251056][ T7087] copy_msghdr_from_user+0xae/0x680 [ 95.251097][ T7087] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 95.290090][ T7087] __sys_sendmsg+0x22d/0x380 [ 95.294745][ T7087] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.299910][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 95.304726][ T7087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.311101][ T7087] ? do_syscall_64+0x100/0x230 [ 95.315900][ T7087] ? do_syscall_64+0xb6/0x230 [ 95.320613][ T7087] do_syscall_64+0xf3/0x230 [ 95.325150][ T7087] ? clear_bhb_loop+0x35/0x90 [ 95.329862][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.335796][ T7087] RIP: 0033:0x7fc6a937e819 [ 95.340429][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.360501][ T7087] RSP: 002b:00007fc6aa092038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.368953][ T7087] RAX: ffffffffffffffda RBX: 00007fc6a9535fa0 RCX: 00007fc6a937e819 [ 95.376955][ T7087] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 95.384955][ T7087] RBP: 00007fc6aa092090 R08: 0000000000000000 R09: 0000000000000000 [ 95.392964][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.402877][ T7087] R13: 0000000000000000 R14: 00007fc6a9535fa0 R15: 00007ffdee5b5908 [ 95.410902][ T7087] [ 95.489583][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 95.668790][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 95.920202][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 96.162187][ T7132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.178357][ T7132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.189739][ T7132] bond0 (unregistering): Released all slaves [ 96.444147][ T7148] vlan2: entered allmulticast mode [ 96.455174][ T7148] bridge0: port 4(vlan2) entered blocking state [ 96.462634][ T7148] bridge0: port 4(vlan2) entered disabled state [ 96.654878][ T6912] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.673993][ T55] Bluetooth: hci3: command 0x040f tx timeout [ 96.727708][ T6912] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.743068][ T6912] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.819074][ T6912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.955279][ T7171] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 97.079110][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.105274][ T7176] tipc: Can't bind to reserved service type 1 [ 97.155683][ T7176] macvtap1: entered promiscuous mode [ 97.161034][ T7176] vlan0: entered promiscuous mode [ 97.194802][ T7176] vlan0: left promiscuous mode [ 97.258446][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.310698][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.317974][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.366602][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.373807][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.645228][ T7194] Bluetooth: MGMT ver 1.23 [ 97.878456][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.990601][ T6912] veth0_vlan: entered promiscuous mode [ 98.034237][ T6912] veth1_vlan: entered promiscuous mode [ 98.140120][ T6912] veth0_macvtap: entered promiscuous mode [ 98.155827][ T6912] veth1_macvtap: entered promiscuous mode [ 98.229416][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.280234][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.314298][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.335556][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.354626][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.372280][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.402896][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.440499][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.453096][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.587088][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.663669][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.690980][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.706678][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.719049][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.739051][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.752084][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.753957][ T5855] Bluetooth: hci3: command 0x040f tx timeout [ 98.763514][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.780846][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.823259][ T6912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.832668][ T6912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.842240][ T6912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.851301][ T6912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.051903][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.067986][ T7265] No such timeout policy "syz0" [ 99.085362][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.164811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.187093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.341029][ T7279] __nla_validate_parse: 8 callbacks suppressed [ 99.341047][ T7279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.309'. [ 99.403885][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'. [ 99.616051][ T7298] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 99.650172][ T7298] netlink: 'syz.1.314': attribute type 10 has an invalid length. [ 99.667888][ T7302] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 99.691992][ T7302] macvlan2: entered promiscuous mode [ 99.731858][ T7307] FAULT_INJECTION: forcing a failure. [ 99.731858][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.763878][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.4.316 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 99.774549][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 99.784634][ T7307] Call Trace: [ 99.787926][ T7307] [ 99.790877][ T7307] dump_stack_lvl+0x241/0x360 [ 99.795588][ T7307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.800815][ T7307] ? __pfx__printk+0x10/0x10 [ 99.805441][ T7307] ? __pfx_lock_release+0x10/0x10 [ 99.810521][ T7307] should_fail_ex+0x3b0/0x4e0 [ 99.815255][ T7307] _copy_from_iter+0x21f/0x1e70 [ 99.820143][ T7307] ? __virt_addr_valid+0x183/0x530 [ 99.825275][ T7307] ? __pfx_lock_release+0x10/0x10 [ 99.830319][ T7307] ? __alloc_skb+0x28f/0x440 [ 99.834954][ T7307] ? __pfx__copy_from_iter+0x10/0x10 [ 99.840260][ T7307] ? __virt_addr_valid+0x183/0x530 [ 99.845379][ T7307] ? __virt_addr_valid+0x183/0x530 [ 99.850503][ T7307] ? __virt_addr_valid+0x45f/0x530 [ 99.855628][ T7307] ? __check_object_size+0x48e/0x900 [ 99.860925][ T7307] netlink_sendmsg+0x73d/0xcb0 [ 99.865705][ T7307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.871002][ T7307] ? aa_sock_msg_perm+0x91/0x160 [ 99.875946][ T7307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.881252][ T7307] __sock_sendmsg+0x221/0x270 [ 99.886071][ T7307] ____sys_sendmsg+0x52a/0x7e0 [ 99.891090][ T7307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.896499][ T7307] __sys_sendmsg+0x292/0x380 [ 99.901114][ T7307] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.906249][ T7307] ? __pfx_vfs_write+0x10/0x10 [ 99.911056][ T7307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.917398][ T7307] ? do_syscall_64+0x100/0x230 [ 99.922173][ T7307] ? do_syscall_64+0xb6/0x230 [ 99.926859][ T7307] do_syscall_64+0xf3/0x230 [ 99.931370][ T7307] ? clear_bhb_loop+0x35/0x90 [ 99.936085][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.941985][ T7307] RIP: 0033:0x7f345e37e819 [ 99.946418][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.966044][ T7307] RSP: 002b:00007f345f0cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.974460][ T7307] RAX: ffffffffffffffda RBX: 00007f345e536080 RCX: 00007f345e37e819 [ 99.982425][ T7307] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 99.990391][ T7307] RBP: 00007f345f0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 99.998354][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.006324][ T7307] R13: 0000000000000000 R14: 00007f345e536080 R15: 00007ffd63b4da58 [ 100.014302][ T7307] [ 100.917496][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.470525][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.545972][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.727189][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.759881][ T7391] tipc: Started in network mode [ 101.774453][ T7391] tipc: Node identity 4, cluster identity 4711 [ 101.785259][ T7391] tipc: Node number set to 4 [ 101.988313][ T12] bridge_slave_1: left allmulticast mode [ 102.020346][ T12] bridge_slave_1: left promiscuous mode [ 102.044090][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.069795][ T12] bridge_slave_0: left allmulticast mode [ 102.082910][ T12] bridge_slave_0: left promiscuous mode [ 102.095955][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.122976][ T7410] FAULT_INJECTION: forcing a failure. [ 102.122976][ T7410] name failslab, interval 1, probability 0, space 0, times 0 [ 102.153021][ T7410] CPU: 0 UID: 0 PID: 7410 Comm: syz.4.329 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 102.163676][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.173842][ T7410] Call Trace: [ 102.177171][ T7410] [ 102.180121][ T7410] dump_stack_lvl+0x241/0x360 [ 102.184834][ T7410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.190069][ T7410] ? __pfx__printk+0x10/0x10 [ 102.194711][ T7410] ? ref_tracker_alloc+0x332/0x490 [ 102.199866][ T7410] should_fail_ex+0x3b0/0x4e0 [ 102.204582][ T7410] ? skb_clone+0x20c/0x390 [ 102.209032][ T7410] should_failslab+0xac/0x100 [ 102.213752][ T7410] ? skb_clone+0x20c/0x390 [ 102.215193][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.218177][ T7410] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 102.218214][ T7410] skb_clone+0x20c/0x390 [ 102.218235][ T7410] __netlink_deliver_tap+0x3cc/0x7f0 [ 102.228300][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.230717][ T7410] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.236615][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.240226][ T7410] netlink_deliver_tap+0x19d/0x1b0 [ 102.240261][ T7410] netlink_unicast+0x7c4/0x990 [ 102.249247][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.252384][ T7410] ? __pfx_netlink_unicast+0x10/0x10 [ 102.252416][ T7410] ? __virt_addr_valid+0x183/0x530 [ 102.260500][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.264424][ T7410] ? __check_object_size+0x48e/0x900 [ 102.264459][ T7410] netlink_sendmsg+0x8e4/0xcb0 [ 102.264493][ T7410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.264520][ T7410] ? aa_sock_msg_perm+0x91/0x160 [ 102.269931][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.276248][ T7410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.276283][ T7410] __sock_sendmsg+0x221/0x270 [ 102.276308][ T7410] ____sys_sendmsg+0x52a/0x7e0 [ 102.276340][ T7410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.276377][ T7410] __sys_sendmsg+0x292/0x380 [ 102.276403][ T7410] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.276437][ T7410] ? __pfx_vfs_write+0x10/0x10 [ 102.276480][ T7410] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.276507][ T7410] ? do_syscall_64+0x100/0x230 [ 102.366905][ T7410] ? do_syscall_64+0xb6/0x230 [ 102.371630][ T7410] do_syscall_64+0xf3/0x230 [ 102.376163][ T7410] ? clear_bhb_loop+0x35/0x90 [ 102.380874][ T7410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.386795][ T7410] RIP: 0033:0x7f345e37e819 [ 102.391232][ T7410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.410961][ T7410] RSP: 002b:00007f345f0cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.419415][ T7410] RAX: ffffffffffffffda RBX: 00007f345e536080 RCX: 00007f345e37e819 [ 102.427769][ T7410] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 102.435768][ T7410] RBP: 00007f345f0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 102.443776][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.451774][ T7410] R13: 0000000000000000 R14: 00007f345e536080 R15: 00007ffd63b4da58 [ 102.459795][ T7410] [ 102.797770][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.808616][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.818763][ T12] bond0 (unregistering): Released all slaves [ 102.960785][ T7412] lo speed is unknown, defaulting to 1000 [ 103.056913][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 103.139270][ T7437] netlink: 236 bytes leftover after parsing attributes in process `syz.3.336'. [ 103.151303][ T7438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.337'. [ 103.169942][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 103.568845][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 103.620511][ T12] hsr_slave_0: left promiscuous mode [ 103.653812][ T12] hsr_slave_1: left promiscuous mode [ 103.657222][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 103.679748][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.694870][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 103.696912][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.724719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.734354][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.776740][ T12] veth1_macvtap: left promiscuous mode [ 103.782329][ T12] veth0_macvtap: left promiscuous mode [ 103.792320][ T12] veth1_vlan: left promiscuous mode [ 103.801184][ T12] veth0_vlan: left promiscuous mode [ 103.831654][ T7473] netlink: 'syz.4.338': attribute type 11 has an invalid length. [ 103.863859][ T7473] netlink: 224 bytes leftover after parsing attributes in process `syz.4.338'. [ 104.285017][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.325068][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.355638][ T55] Bluetooth: hci3: command tx timeout [ 104.855000][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.901203][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.929785][ T7412] bridge_slave_0: entered allmulticast mode [ 104.954159][ T7412] bridge_slave_0: entered promiscuous mode [ 104.977333][ T7489] team0: Device gtp0 is of different type [ 105.000639][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.008250][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.015909][ T7412] bridge_slave_1: entered allmulticast mode [ 105.024991][ T7412] bridge_slave_1: entered promiscuous mode [ 105.065752][ T7491] FAULT_INJECTION: forcing a failure. [ 105.065752][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 105.101736][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.120847][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.3.345 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 105.131491][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 105.141591][ T7491] Call Trace: [ 105.144894][ T7491] [ 105.147833][ T7491] dump_stack_lvl+0x241/0x360 [ 105.152517][ T7491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.157745][ T7491] ? __pfx__printk+0x10/0x10 [ 105.162375][ T7491] ? __kmalloc_noprof+0xb0/0x400 [ 105.167323][ T7491] ? __pfx___might_resched+0x10/0x10 [ 105.172606][ T7491] should_fail_ex+0x3b0/0x4e0 [ 105.176359][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.177367][ T7491] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.177394][ T7491] should_failslab+0xac/0x100 [ 105.177418][ T7491] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.177436][ T7491] __kmalloc_noprof+0xd8/0x400 [ 105.177458][ T7491] ? apparmor_capable+0x13b/0x1b0 [ 105.177487][ T7491] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.177514][ T7491] genl_rcv_msg+0x802/0xec0 [ 105.177543][ T7491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.177591][ T7491] ? __pfx_lock_acquire+0x10/0x10 [ 105.177613][ T7491] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 105.177634][ T7491] ? __pfx_nl80211_new_interface+0x10/0x10 [ 105.177653][ T7491] ? __pfx_nl80211_post_doit+0x10/0x10 [ 105.177675][ T7491] ? __pfx___might_resched+0x10/0x10 [ 105.177705][ T7491] netlink_rcv_skb+0x1e3/0x430 [ 105.177730][ T7491] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.177751][ T7491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.177796][ T7491] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 105.177832][ T7491] genl_rcv+0x28/0x40 [ 105.280770][ T7491] netlink_unicast+0x7f6/0x990 [ 105.285555][ T7491] ? __pfx_netlink_unicast+0x10/0x10 [ 105.290841][ T7491] ? __virt_addr_valid+0x183/0x530 [ 105.295948][ T7491] ? __check_object_size+0x48e/0x900 [ 105.301235][ T7491] netlink_sendmsg+0x8e4/0xcb0 [ 105.306009][ T7491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.311305][ T7491] ? aa_sock_msg_perm+0x91/0x160 [ 105.316249][ T7491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.321546][ T7491] __sock_sendmsg+0x221/0x270 [ 105.326241][ T7491] ____sys_sendmsg+0x52a/0x7e0 [ 105.331051][ T7491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.336372][ T7491] __sys_sendmsg+0x292/0x380 [ 105.340982][ T7491] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.346111][ T7491] ? __pfx_vfs_write+0x10/0x10 [ 105.350903][ T7491] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.357245][ T7491] ? do_syscall_64+0x100/0x230 [ 105.362034][ T7491] ? do_syscall_64+0xb6/0x230 [ 105.366729][ T7491] do_syscall_64+0xf3/0x230 [ 105.371245][ T7491] ? clear_bhb_loop+0x35/0x90 [ 105.375940][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.381848][ T7491] RIP: 0033:0x7f909b17e819 [ 105.386270][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.406021][ T7491] RSP: 002b:00007f909bf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.414453][ T7491] RAX: ffffffffffffffda RBX: 00007f909b335fa0 RCX: 00007f909b17e819 [ 105.422436][ T7491] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 105.430425][ T7491] RBP: 00007f909bf3d090 R08: 0000000000000000 R09: 0000000000000000 [ 105.438405][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.446380][ T7491] R13: 0000000000000000 R14: 00007f909b335fa0 R15: 00007ffd98b6f738 [ 105.454365][ T7491] [ 105.481264][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.612008][ T7508] trusted_key: syz.4.348 sent an empty control message without MSG_MORE. [ 105.652495][ T7412] team0: Port device team_slave_0 added [ 105.697406][ T7412] team0: Port device team_slave_1 added [ 105.771454][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.783238][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.813245][ T7515] netlink: 'syz.3.349': attribute type 4 has an invalid length. [ 105.850910][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.886646][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 105.922699][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.942808][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.023823][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.088187][ T7515] syz.3.349 (7515) used greatest stack depth: 18704 bytes left [ 106.240817][ T7412] hsr_slave_0: entered promiscuous mode [ 106.262005][ T7545] netlink: 52 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.284144][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 106.288105][ T7412] hsr_slave_1: entered promiscuous mode [ 106.397841][ T7551] FAULT_INJECTION: forcing a failure. [ 106.397841][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 106.427844][ T7551] CPU: 0 UID: 0 PID: 7551 Comm: syz.3.357 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 106.438504][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 106.448592][ T7551] Call Trace: [ 106.451902][ T7551] [ 106.454865][ T7551] dump_stack_lvl+0x241/0x360 [ 106.459571][ T7551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.464802][ T7551] ? __pfx__printk+0x10/0x10 [ 106.469414][ T7551] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 106.475399][ T7551] ? __pfx___might_resched+0x10/0x10 [ 106.480728][ T7551] should_fail_ex+0x3b0/0x4e0 [ 106.485413][ T7551] should_failslab+0xac/0x100 [ 106.490095][ T7551] ? __alloc_skb+0x1c3/0x440 [ 106.494686][ T7551] kmem_cache_alloc_node_noprof+0x71/0x320 [ 106.500498][ T7551] ? nl80211_parse_mon_options+0x72e/0x970 [ 106.506317][ T7551] __alloc_skb+0x1c3/0x440 [ 106.510742][ T7551] ? __pfx_nl80211_parse_mon_options+0x10/0x10 [ 106.516906][ T7551] ? trace_contention_end+0x3c/0x120 [ 106.522196][ T7551] ? __pfx___alloc_skb+0x10/0x10 [ 106.527142][ T7551] ? cfg80211_iftype_allowed+0x19e/0x300 [ 106.532782][ T7551] nl80211_new_interface+0x68a/0x1180 [ 106.538170][ T7551] ? __pfx___cfg80211_rdev_from_attrs+0x10/0x10 [ 106.544437][ T7551] ? __pfx_nl80211_new_interface+0x10/0x10 [ 106.550265][ T7551] genl_rcv_msg+0xb14/0xec0 [ 106.554785][ T7551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.559831][ T7551] ? __pfx_lock_acquire+0x10/0x10 [ 106.564855][ T7551] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 106.570227][ T7551] ? __pfx_nl80211_new_interface+0x10/0x10 [ 106.576032][ T7551] ? __pfx_nl80211_post_doit+0x10/0x10 [ 106.581495][ T7551] ? __pfx___might_resched+0x10/0x10 [ 106.586788][ T7551] netlink_rcv_skb+0x1e3/0x430 [ 106.591551][ T7551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.596600][ T7551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.601926][ T7551] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 106.607400][ T7551] genl_rcv+0x28/0x40 [ 106.611386][ T7551] netlink_unicast+0x7f6/0x990 [ 106.616170][ T7551] ? __pfx_netlink_unicast+0x10/0x10 [ 106.621470][ T7551] ? __virt_addr_valid+0x183/0x530 [ 106.626597][ T7551] ? __check_object_size+0x48e/0x900 [ 106.631908][ T7551] netlink_sendmsg+0x8e4/0xcb0 [ 106.636696][ T7551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.642085][ T7551] ? aa_sock_msg_perm+0x91/0x160 [ 106.647039][ T7551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.652331][ T7551] __sock_sendmsg+0x221/0x270 [ 106.657014][ T7551] ____sys_sendmsg+0x52a/0x7e0 [ 106.661790][ T7551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.667095][ T7551] __sys_sendmsg+0x292/0x380 [ 106.671780][ T7551] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.677259][ T7551] ? __pfx_vfs_write+0x10/0x10 [ 106.682049][ T7551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.688389][ T7551] ? do_syscall_64+0x100/0x230 [ 106.693160][ T7551] ? do_syscall_64+0xb6/0x230 [ 106.697845][ T7551] do_syscall_64+0xf3/0x230 [ 106.702388][ T7551] ? clear_bhb_loop+0x35/0x90 [ 106.707081][ T7551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.712984][ T7551] RIP: 0033:0x7f909b17e819 [ 106.717409][ T7551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.737550][ T7551] RSP: 002b:00007f909bf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.746011][ T7551] RAX: ffffffffffffffda RBX: 00007f909b335fa0 RCX: 00007f909b17e819 [ 106.753998][ T7551] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000006 [ 106.761977][ T7551] RBP: 00007f909bf3d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.770070][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.778058][ T7551] R13: 0000000000000000 R14: 00007f909b335fa0 R15: 00007ffd98b6f738 [ 106.786057][ T7551] [ 106.801426][ T55] Bluetooth: hci3: command tx timeout [ 106.952550][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'. [ 107.096771][ T7575] sctp: [Deprecated]: syz.1.360 (pid 7575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.096771][ T7575] Use struct sctp_sack_info instead [ 107.311557][ T7564] netlink: 96 bytes leftover after parsing attributes in process `syz.1.360'. [ 107.557690][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 107.595491][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 107.613871][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 108.123769][ T7627] netlink: 'syz.4.372': attribute type 23 has an invalid length. [ 108.141286][ T7627] netlink: 244 bytes leftover after parsing attributes in process `syz.4.372'. [ 108.242060][ T7616] lo speed is unknown, defaulting to 1000 [ 108.376207][ T7641] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 108.539490][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.550120][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.575969][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.589804][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.598347][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.606463][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.693740][ T7412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.710938][ T7412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.750090][ T7412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.836271][ T5855] Bluetooth: hci3: command tx timeout [ 108.853857][ T7412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.877826][ T7646] lo speed is unknown, defaulting to 1000 [ 109.198788][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.325440][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.384800][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.391942][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.447373][ T7412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.457917][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.486055][ T7646] chnl_net:caif_netlink_parms(): no params data found [ 109.570657][ T7682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.619026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.626228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.825684][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.882028][ T7715] netlink: 'syz.3.391': attribute type 3 has an invalid length. [ 109.895441][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.908405][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.919973][ T7646] bridge_slave_0: entered allmulticast mode [ 109.935928][ T7646] bridge_slave_0: entered promiscuous mode [ 109.979371][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.016427][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.045934][ T7646] bridge_slave_1: entered allmulticast mode [ 110.052996][ T7646] bridge_slave_1: entered promiscuous mode [ 110.152451][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.168482][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.211465][ T7412] veth0_vlan: entered promiscuous mode [ 110.223157][ T7412] veth1_vlan: entered promiscuous mode [ 110.250061][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'. [ 110.326896][ T7646] team0: Port device team_slave_0 added [ 110.356318][ T7646] team0: Port device team_slave_1 added [ 110.400106][ T7412] veth0_macvtap: entered promiscuous mode [ 110.430909][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.442307][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.469160][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.482857][ T7412] veth1_macvtap: entered promiscuous mode [ 110.493541][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.518805][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.577322][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.674426][ T5855] Bluetooth: hci1: command tx timeout [ 110.691143][ T7756] sctp: [Deprecated]: syz.4.400 (pid 7756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.691143][ T7756] Use struct sctp_sack_info instead [ 110.716245][ T7756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.782206][ T7646] hsr_slave_0: entered promiscuous mode [ 110.796251][ T7646] hsr_slave_1: entered promiscuous mode [ 110.842313][ T7646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.854760][ T7646] Cannot create hsr debugfs directory [ 110.914631][ T5855] Bluetooth: hci3: command tx timeout [ 110.979657][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.010650][ T7774] __nla_validate_parse: 3 callbacks suppressed [ 111.010668][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 111.011215][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.027074][ T7774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.404'. [ 111.057377][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.068506][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.078675][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.089409][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.099523][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.110412][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.135286][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.190157][ T7771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.211960][ T7771] bond3: (slave bond4): Enslaving as an active interface with an up link [ 111.396158][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.413680][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.442198][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.461280][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.471389][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.486626][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 111.495623][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.505514][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 111.521539][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.533375][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.550535][ T7786] xt_CONNSECMARK: invalid mode: 0 [ 111.551311][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.822069][ T7412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.834687][ T7412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.843715][ T7412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.852532][ T7412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.157887][ T7646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.350267][ T7646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.379106][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 112.398805][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.433198][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.522259][ T7646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.608072][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.630890][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.761732][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 112.763882][ T5855] Bluetooth: hci1: command tx timeout [ 112.861316][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.915954][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 113.261778][ T7646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.281679][ T7646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.293087][ T7646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.307079][ T7646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.481467][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.531565][ T7646] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.567993][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.576014][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.626655][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.633847][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.663018][ T7864] x_tables: duplicate underflow at hook 1 [ 113.748289][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.770743][ T7865] x_tables: duplicate underflow at hook 2 [ 113.771114][ T7864] sctp: [Deprecated]: syz.3.421 (pid 7864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.771114][ T7864] Use struct sctp_sack_info instead [ 113.937301][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.100285][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.172585][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.222490][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.344994][ T82] bridge_slave_1: left allmulticast mode [ 114.350887][ T82] bridge_slave_1: left promiscuous mode [ 114.374059][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.383124][ T82] bridge_slave_0: left allmulticast mode [ 114.395230][ T82] bridge_slave_0: left promiscuous mode [ 114.400964][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.776404][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 114.834075][ T5855] Bluetooth: hci1: command tx timeout [ 114.980674][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.994995][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 114.999041][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.019718][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.028416][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 115.056757][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.065984][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.073310][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.605874][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.779953][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.809017][ T82] bond0 (unregistering): Released all slaves [ 115.833490][ T7646] veth0_vlan: entered promiscuous mode [ 116.123965][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.149493][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.172765][ T7909] bond0 (unregistering): (slave team0): Releasing backup interface [ 116.192726][ T7909] team0: left allmulticast mode [ 116.204578][ T7909] team_slave_0: left allmulticast mode [ 116.210187][ T7909] team_slave_1: left allmulticast mode [ 116.223489][ T7909] team0: left promiscuous mode [ 116.228695][ T7909] team_slave_0: left promiscuous mode [ 116.234575][ T7909] team_slave_1: left promiscuous mode [ 116.243897][ T7909] bridge0: port 3(vlan2) entered disabled state [ 116.268140][ T7909] bond0 (unregistering): Released all slaves [ 116.579441][ T7646] veth1_vlan: entered promiscuous mode [ 116.664315][ T7908] lo speed is unknown, defaulting to 1000 [ 116.904302][ T7983] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 116.911401][ T59] IPVS: starting estimator thread 0... [ 116.916998][ T55] Bluetooth: hci1: command tx timeout [ 116.979346][ T82] hsr_slave_0: left promiscuous mode [ 117.019608][ T82] hsr_slave_1: left promiscuous mode [ 117.033855][ T7991] IPVS: using max 28 ests per chain, 67200 per kthread [ 117.049002][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.057757][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.066845][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.084594][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.132414][ T82] veth1_macvtap: left promiscuous mode [ 117.144148][ T82] veth0_macvtap: left promiscuous mode [ 117.154040][ T55] Bluetooth: hci3: command tx timeout [ 117.158239][ T82] veth1_vlan: left promiscuous mode [ 117.172299][ T82] veth0_vlan: left promiscuous mode [ 117.189244][ T7999] xt_CT: No such helper "pptp" [ 117.671691][ T82] team0 (unregistering): Port device team_slave_1 removed [ 117.710275][ T82] team0 (unregistering): Port device team_slave_0 removed [ 118.122083][ T7646] veth0_macvtap: entered promiscuous mode [ 118.150251][ T7646] veth1_macvtap: entered promiscuous mode [ 118.239058][ T8005] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 118.272094][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.302887][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 118.319664][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.331684][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.349408][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.363024][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.380290][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.390897][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.401672][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.412699][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.430910][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.443372][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.453429][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.464111][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.474045][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.484735][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.495569][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.506224][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.523310][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.565875][ T7646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.585307][ T7646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.595685][ T7646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.605010][ T7646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.742789][ T8019] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.756279][ T8019] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 118.789146][ T7908] chnl_net:caif_netlink_parms(): no params data found [ 118.799925][ T8021] bridge0: port 3(gretap0) entered blocking state [ 118.808164][ T8021] bridge0: port 3(gretap0) entered disabled state [ 118.817372][ T8021] bridge0: port 3(gretap0) entered blocking state [ 118.823926][ T8021] bridge0: port 3(gretap0) entered forwarding state [ 118.896694][ T8024] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 118.910220][ T8024] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 118.940055][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.942162][ T8021] bridge0: port 3(gretap0) entered disabled state [ 118.961018][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.005974][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.025900][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.080427][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.107027][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.134078][ T7908] bridge_slave_0: entered allmulticast mode [ 119.155087][ T7908] bridge_slave_0: entered promiscuous mode [ 119.210927][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.225491][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.232828][ T7908] bridge_slave_1: entered allmulticast mode [ 119.240533][ T55] Bluetooth: hci3: command tx timeout [ 119.248419][ T7908] bridge_slave_1: entered promiscuous mode [ 119.283072][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.300446][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.357623][ T7908] team0: Port device team_slave_0 added [ 119.375150][ T7908] team0: Port device team_slave_1 added [ 119.413981][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.421051][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.448498][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.478723][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.486032][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.486108][ T7646] syz-executor (7646) used greatest stack depth: 18136 bytes left [ 119.512092][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.766291][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.867268][ T7908] hsr_slave_0: entered promiscuous mode [ 119.905547][ T7908] hsr_slave_1: entered promiscuous mode [ 120.018192][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.069032][ T8048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.447'. [ 120.183170][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.194086][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.213196][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.214769][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.246473][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.260212][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.268420][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.432959][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.557485][ T8051] lo speed is unknown, defaulting to 1000 [ 120.998064][ T8084] netlink: 'syz.4.451': attribute type 12 has an invalid length. [ 121.011330][ T8084] netlink: 244 bytes leftover after parsing attributes in process `syz.4.451'. [ 121.131867][ T35] bridge_slave_1: left allmulticast mode [ 121.144788][ T35] bridge_slave_1: left promiscuous mode [ 121.158988][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.168115][ T35] bridge_slave_0: left allmulticast mode [ 121.174369][ T35] bridge_slave_0: left promiscuous mode [ 121.180146][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.314593][ T55] Bluetooth: hci3: command tx timeout [ 121.587574][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.601385][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.611765][ T35] bond0 (unregistering): Released all slaves [ 122.203899][ T8119] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 122.232228][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 122.301533][ T7908] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.340818][ T8131] sctp: [Deprecated]: syz.1.461 (pid 8131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.340818][ T8131] Use struct sctp_sack_info instead [ 122.357739][ T55] Bluetooth: hci1: command tx timeout [ 122.366985][ T35] hsr_slave_0: left promiscuous mode [ 122.380767][ T35] hsr_slave_1: left promiscuous mode [ 122.389551][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 122.410646][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.441553][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.494955][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.502451][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.567522][ T35] veth1_macvtap: left promiscuous mode [ 122.573223][ T35] veth0_macvtap: left promiscuous mode [ 122.579377][ T35] veth1_vlan: left promiscuous mode [ 122.584907][ T35] veth0_vlan: left promiscuous mode [ 122.740358][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 123.212120][ T35] team0 (unregistering): Port device team_slave_1 removed [ 123.252769][ T35] team0 (unregistering): Port device team_slave_0 removed [ 123.404787][ T55] Bluetooth: hci3: command tx timeout [ 123.669339][ T7908] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.739504][ T7908] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.764995][ T7908] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.952323][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.973958][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.984848][ T8051] bridge_slave_0: entered allmulticast mode [ 124.005103][ T8051] bridge_slave_0: entered promiscuous mode [ 124.050059][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.067649][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.089790][ T8051] bridge_slave_1: entered allmulticast mode [ 124.111044][ T8051] bridge_slave_1: entered promiscuous mode [ 124.286870][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.391207][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.434377][ T55] Bluetooth: hci1: command tx timeout [ 124.548234][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.624335][ T8051] team0: Port device team_slave_0 added [ 124.655566][ T8051] team0: Port device team_slave_1 added [ 124.747142][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.783750][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.840551][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.867227][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.879930][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.907562][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.950460][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.996170][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.003390][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.027845][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.035057][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.224969][ T8051] hsr_slave_0: entered promiscuous mode [ 125.260108][ T8051] hsr_slave_1: entered promiscuous mode [ 125.271457][ T8051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.283149][ T8051] Cannot create hsr debugfs directory [ 125.711331][ T7908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.272051][ T7908] veth0_vlan: entered promiscuous mode [ 126.299728][ T7908] veth1_vlan: entered promiscuous mode [ 126.355820][ T7908] veth0_macvtap: entered promiscuous mode [ 126.388617][ T7908] veth1_macvtap: entered promiscuous mode [ 126.470151][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.487601][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.501009][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.516005][ T55] Bluetooth: hci1: command tx timeout [ 126.518251][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.535046][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.545697][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.558494][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.569216][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.585069][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.625211][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.640461][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.653981][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.665605][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.699506][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.720699][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.739400][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.780191][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.801125][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.850057][ T7908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.882470][ T7908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.891801][ T7908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.908338][ T7908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.922502][ T8051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.944949][ T8051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.000828][ T8051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.014960][ T8051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.179332][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.197697][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.247721][ T8316] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.310201][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.346951][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.384855][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.432135][ T8051] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.479089][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.486287][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.556975][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.564244][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.995851][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 128.347333][ T2924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.420073][ T8051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.517169][ T2924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.586933][ T2924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.604244][ T55] Bluetooth: hci1: command tx timeout [ 128.616141][ T8051] veth0_vlan: entered promiscuous mode [ 128.639471][ T8051] veth1_vlan: entered promiscuous mode [ 128.692821][ T8051] veth0_macvtap: entered promiscuous mode [ 128.712918][ T2924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.736081][ T8051] veth1_macvtap: entered promiscuous mode [ 128.754442][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.768676][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.778594][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.789250][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.799315][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.813801][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.823910][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.835067][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.845266][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.855825][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.867021][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.881507][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.892994][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.903063][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.925569][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.940872][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.958962][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.970156][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.988604][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.004212][ T8051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.021478][ T8051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.037094][ T8051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.066367][ T8051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.077809][ T8051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.087199][ T8051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.096087][ T8051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.267468][ T2924] bridge_slave_1: left allmulticast mode [ 129.273196][ T2924] bridge_slave_1: left promiscuous mode [ 129.312612][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 129.318298][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.362012][ T2924] bridge_slave_0: left allmulticast mode [ 129.380016][ T2924] bridge_slave_0: left promiscuous mode [ 129.400848][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.754899][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.774589][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.783350][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.809837][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.837521][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.845354][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.009883][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.020561][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.030684][ T2924] bond0 (unregistering): Released all slaves [ 130.154729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.162772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.260044][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.273051][ T8412] lo speed is unknown, defaulting to 1000 [ 130.276228][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.449648][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.513'. [ 130.494444][ T8430] netlink: 43 bytes leftover after parsing attributes in process `syz.4.513'. [ 130.503374][ T8430] netlink: 'syz.4.513': attribute type 6 has an invalid length. [ 130.560021][ T8430] netlink: 'syz.4.513': attribute type 5 has an invalid length. [ 130.583022][ T8430] netlink: 43 bytes leftover after parsing attributes in process `syz.4.513'. [ 130.682992][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.710515][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.730112][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.741320][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.763129][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.783730][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.802619][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.826371][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.843836][ T8443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.861681][ T8443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.007360][ T2924] hsr_slave_0: left promiscuous mode [ 131.013515][ T2924] hsr_slave_1: left promiscuous mode [ 131.037984][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.053696][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.067037][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.093803][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.119115][ T2924] veth1_macvtap: left promiscuous mode [ 131.125153][ T2924] veth0_macvtap: left promiscuous mode [ 131.131004][ T2924] veth1_vlan: left promiscuous mode [ 131.136783][ T2924] veth0_vlan: left promiscuous mode [ 131.655480][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.665366][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.675023][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.699011][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.714338][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 131.733914][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.953984][ T55] Bluetooth: hci3: command tx timeout [ 132.056643][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 132.099181][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 132.754727][ T8469] lo speed is unknown, defaulting to 1000 [ 132.780412][ T8493] netlink: 'syz.4.522': attribute type 8 has an invalid length. [ 132.831442][ T8412] chnl_net:caif_netlink_parms(): no params data found [ 133.079841][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265500][ T8530] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 133.301422][ T8530] netlink: 236 bytes leftover after parsing attributes in process `syz.3.528'. [ 133.332821][ T8530] NCSI netlink: No device for ifindex 196272 [ 133.408110][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.417935][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.426670][ T8412] bridge_slave_0: entered allmulticast mode [ 133.442456][ T8412] bridge_slave_0: entered promiscuous mode [ 133.537296][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.554380][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.580642][ T8412] bridge_slave_1: entered allmulticast mode [ 133.594013][ T8412] bridge_slave_1: entered promiscuous mode [ 133.663154][ T2978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.796810][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 133.803842][ T55] Bluetooth: hci1: command tx timeout [ 133.872550][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.885188][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.000974][ T2978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.034358][ T55] Bluetooth: hci3: command tx timeout [ 134.082098][ T8412] team0: Port device team_slave_0 added [ 134.113156][ T8412] team0: Port device team_slave_1 added [ 134.145438][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.152704][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.161889][ T8469] bridge_slave_0: entered allmulticast mode [ 134.169992][ T8469] bridge_slave_0: entered promiscuous mode [ 134.213055][ T2978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.256679][ T8583] ipt_ECN: cannot use operation on non-tcp rule [ 134.379913][ T2978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.397423][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.408571][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.415935][ T8469] bridge_slave_1: entered allmulticast mode [ 134.422760][ T8469] bridge_slave_1: entered promiscuous mode [ 134.452267][ T8582] lo speed is unknown, defaulting to 1000 [ 134.461736][ T8593] syzkaller0: entered allmulticast mode [ 134.488051][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.495424][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.521838][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.535606][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.542574][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.569270][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.590125][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.607021][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.727324][ T8469] team0: Port device team_slave_0 added [ 134.777216][ T8469] team0: Port device team_slave_1 added [ 134.822197][ T8412] hsr_slave_0: entered promiscuous mode [ 134.830767][ T8412] hsr_slave_1: entered promiscuous mode [ 134.855284][ T2978] bridge_slave_1: left allmulticast mode [ 134.862665][ T2978] bridge_slave_1: left promiscuous mode [ 134.868979][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.891199][ T2978] bridge_slave_0: left allmulticast mode [ 134.905295][ T2978] bridge_slave_0: left promiscuous mode [ 134.918744][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.361350][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.376124][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.406661][ T2978] bond0 (unregistering): Released all slaves [ 135.438800][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.452603][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.488017][ T8469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.544665][ T8469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.551799][ T8469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.578408][ T8469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.765931][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 135.849026][ T8469] hsr_slave_0: entered promiscuous mode [ 135.865112][ T8469] hsr_slave_1: entered promiscuous mode [ 135.873803][ T5855] Bluetooth: hci1: command tx timeout [ 135.879442][ T8469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.896351][ T8469] Cannot create hsr debugfs directory [ 136.063032][ T2978] hsr_slave_0: left promiscuous mode [ 136.078582][ T2978] hsr_slave_1: left promiscuous mode [ 136.090170][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.108400][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.119601][ T5855] Bluetooth: hci3: command tx timeout [ 136.134552][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.145421][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.180487][ T2978] veth1_macvtap: left promiscuous mode [ 136.187685][ T2978] veth0_macvtap: left promiscuous mode [ 136.193435][ T2978] veth1_vlan: left promiscuous mode [ 136.199166][ T2978] veth0_vlan: left promiscuous mode [ 136.627740][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 136.674702][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 137.164870][ T8646] lo speed is unknown, defaulting to 1000 [ 137.176906][ T8646] lo speed is unknown, defaulting to 1000 [ 137.195091][ T8646] lo speed is unknown, defaulting to 1000 [ 137.358891][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'. [ 137.483801][ T8646] infiniband syz0: set active [ 137.494743][ T8646] infiniband syz0: added lo [ 137.511288][ T8657] team_slave_1: entered allmulticast mode [ 137.528156][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 137.539335][ T8] lo speed is unknown, defaulting to 1000 [ 137.548048][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.592609][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.628760][ T8646] RDS/IB: syz0: added [ 137.643471][ T8646] smc: adding ib device syz0 with port count 1 [ 137.648389][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.656521][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.663015][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.678351][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.689213][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.696898][ T8646] smc: ib device syz0 port 1 has pnetid [ 137.706097][ T8664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 137.708738][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.746523][ T8660] ipt_ECN: cannot use operation on non-tcp rule [ 137.780042][ T8646] lo speed is unknown, defaulting to 1000 [ 137.808120][ T8] lo speed is unknown, defaulting to 1000 [ 137.963583][ T5855] Bluetooth: hci1: command 0x040f tx timeout [ 137.983227][ T8646] lo speed is unknown, defaulting to 1000 [ 138.203776][ T55] Bluetooth: hci3: command tx timeout [ 138.213586][ T8646] lo speed is unknown, defaulting to 1000 [ 138.362539][ T8412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.437603][ T8412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.455145][ T8680] nbd: must specify a size in bytes for the device [ 138.529861][ T8646] lo speed is unknown, defaulting to 1000 [ 138.530388][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 138.536974][ T8412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.574043][ T8412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.598926][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 138.760658][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 138.797859][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 138.854565][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 138.863467][ T8646] lo speed is unknown, defaulting to 1000 [ 138.896228][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 138.950695][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.998071][ T8412] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.117208][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.124415][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.162464][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.185502][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.192758][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.280857][ T8646] lo speed is unknown, defaulting to 1000 [ 139.325963][ T8469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.349011][ T8469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.384691][ T8469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.406774][ T8469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.610808][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.651688][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.697279][ T8412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.720151][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.727392][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.758077][ T8646] lo speed is unknown, defaulting to 1000 [ 139.783482][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.790781][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.860165][ T8469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.870858][ T8469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.935795][ T8412] veth0_vlan: entered promiscuous mode [ 139.958666][ T8412] veth1_vlan: entered promiscuous mode [ 140.026069][ T8412] veth0_macvtap: entered promiscuous mode [ 140.044730][ T5855] Bluetooth: hci1: command 0x040f tx timeout [ 140.062682][ T8412] veth1_macvtap: entered promiscuous mode [ 140.145161][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.178701][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.203898][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.221227][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.272753][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.313380][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.362584][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.407568][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.440050][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.552277][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.612124][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.628842][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.650519][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.671804][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.691212][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.713905][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.744014][ T8412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.765704][ T8412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.785551][ T8412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.810244][ T8412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.849958][ T8412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.873783][ T8412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.903057][ T8412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.095330][ T8469] veth0_vlan: entered promiscuous mode [ 141.113003][ T8469] veth1_vlan: entered promiscuous mode [ 141.137523][ T8469] veth0_macvtap: entered promiscuous mode [ 141.146420][ T8469] veth1_macvtap: entered promiscuous mode [ 141.221064][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 141.311144][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.334017][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.348613][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.360711][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.370732][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.381442][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.391386][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.402251][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.412323][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.422956][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.431443][ T8775] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.434978][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.450456][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.461185][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.471454][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.482312][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.492337][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.503020][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.513112][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.523919][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.534322][ T8469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.545421][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.556898][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.652724][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.689452][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.740532][ T8469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.750454][ T8469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.774246][ T8469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.783024][ T8469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.893493][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.917174][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.123983][ T55] Bluetooth: hci1: command 0x040f tx timeout [ 142.248909][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.276165][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.362645][ T8797] netlink: 'syz.3.592': attribute type 2 has an invalid length. [ 142.454469][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.462365][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.608350][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 143.364096][ T2924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.429008][ T8836] netlink: 'syz.1.598': attribute type 39 has an invalid length. [ 143.590238][ T2924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.749431][ T2924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.882755][ T2924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.046400][ T2924] bridge_slave_1: left allmulticast mode [ 144.061205][ T2924] bridge_slave_1: left promiscuous mode [ 144.067123][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.083151][ T2924] bridge_slave_0: left allmulticast mode [ 144.090649][ T2924] bridge_slave_0: left promiscuous mode [ 144.103543][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.261502][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.286834][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.312616][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.337172][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.360263][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.368241][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.631099][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.602'. [ 144.706361][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.720702][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.729676][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.739610][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.747341][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.754831][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.839796][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.853376][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.863577][ T2924] bond0 (unregistering): Released all slaves [ 145.092881][ T8883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.604'. [ 145.313215][ T8893] ip6gre2: entered allmulticast mode [ 145.398880][ T8855] lo speed is unknown, defaulting to 1000 [ 145.459875][ T8871] lo speed is unknown, defaulting to 1000 [ 145.469387][ T8855] lo speed is unknown, defaulting to 1000 [ 145.502377][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 145.758879][ T8871] lo speed is unknown, defaulting to 1000 [ 146.218896][ T8934] x_tables: duplicate underflow at hook 3 [ 146.301771][ T2924] hsr_slave_0: left promiscuous mode [ 146.308357][ T2924] hsr_slave_1: left promiscuous mode [ 146.325076][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.333509][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.364967][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.386265][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.419799][ T2924] veth1_macvtap: left promiscuous mode [ 146.425574][ T2924] veth0_macvtap: left promiscuous mode [ 146.431422][ T2924] veth1_vlan: left promiscuous mode [ 146.436876][ T5855] Bluetooth: hci1: command tx timeout [ 146.438181][ T2924] veth0_vlan: left promiscuous mode [ 146.835598][ T5855] Bluetooth: hci3: command tx timeout [ 146.923441][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 146.965670][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 147.391178][ T8946] tipc: Enabling of bearer rejected, media not registered [ 147.533882][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 147.841207][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 147.847551][ T8971] raw_sendmsg: syz.4.620 forgot to set AF_INET. Fix it! [ 147.932486][ T8962] lo speed is unknown, defaulting to 1000 [ 147.935694][ T8976] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20001 [ 147.990846][ T8962] lo speed is unknown, defaulting to 1000 [ 148.242854][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.273125][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.303281][ T8855] bridge_slave_0: entered allmulticast mode [ 148.320068][ T8855] bridge_slave_0: entered promiscuous mode [ 148.344234][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.372565][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.393942][ T8871] bridge_slave_0: entered allmulticast mode [ 148.421533][ T8871] bridge_slave_0: entered promiscuous mode [ 148.455961][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.486356][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.504020][ T8871] bridge_slave_1: entered allmulticast mode [ 148.512449][ T8871] bridge_slave_1: entered promiscuous mode [ 148.518640][ T5855] Bluetooth: hci1: command tx timeout [ 148.534860][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.551039][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.563921][ T8855] bridge_slave_1: entered allmulticast mode [ 148.570957][ T8855] bridge_slave_1: entered promiscuous mode [ 148.686321][ T9014] netlink: 'syz.4.626': attribute type 11 has an invalid length. [ 148.703226][ T9014] netlink: 224 bytes leftover after parsing attributes in process `syz.4.626'. [ 148.748112][ T9022] netlink: 'syz.3.627': attribute type 2 has an invalid length. [ 148.760559][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.785758][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.812238][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.924192][ T5855] Bluetooth: hci3: command tx timeout [ 148.932612][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.000611][ T8855] team0: Port device team_slave_0 added [ 149.055524][ T8855] team0: Port device team_slave_1 added [ 149.111016][ T8871] team0: Port device team_slave_0 added [ 149.201757][ T2924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.228053][ T8871] team0: Port device team_slave_1 added [ 149.238759][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.258359][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.300764][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.357536][ T2924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.376004][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.382990][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.385142][ T9044] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.409924][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.427946][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 149.460095][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.489862][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.523813][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.559175][ T9047] netlink: 'syz.3.635': attribute type 8 has an invalid length. [ 149.569349][ T2924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.598157][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.605570][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.634229][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.654590][ T9047] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 149.677948][ T8855] hsr_slave_0: entered promiscuous mode [ 149.685574][ T8855] hsr_slave_1: entered promiscuous mode [ 149.706414][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 149.716521][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 149.720254][ T2924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.890729][ T8871] hsr_slave_0: entered promiscuous mode [ 149.903167][ T8871] hsr_slave_1: entered promiscuous mode [ 149.912022][ T8871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.926609][ T8871] Cannot create hsr debugfs directory [ 149.988842][ T9054] (unnamed net_device) (uninitialized): option mode: invalid value (240) [ 150.150678][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 150.188701][ T9055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.637'. [ 150.202110][ T9055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.637'. [ 150.244232][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 150.293132][ T2924] bridge_slave_1: left allmulticast mode [ 150.309884][ T2924] bridge_slave_1: left promiscuous mode [ 150.323047][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.344048][ T2924] bridge_slave_0: left allmulticast mode [ 150.349929][ T2924] bridge_slave_0: left promiscuous mode [ 150.365475][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.603887][ T5855] Bluetooth: hci1: command tx timeout [ 150.619259][ T9076] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 150.845801][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.874129][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.889243][ T2924] bond0 (unregistering): Released all slaves [ 150.994363][ T5855] Bluetooth: hci3: command tx timeout [ 151.598065][ T9111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 151.773457][ T2924] hsr_slave_0: left promiscuous mode [ 151.791807][ T2924] hsr_slave_1: left promiscuous mode [ 151.804099][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.817830][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.833242][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.840926][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.887182][ T2924] veth1_macvtap: left promiscuous mode [ 151.894139][ T2924] veth0_macvtap: left promiscuous mode [ 151.899969][ T2924] veth1_vlan: left promiscuous mode [ 151.912071][ T2924] veth0_vlan: left promiscuous mode [ 152.684060][ T5855] Bluetooth: hci1: command tx timeout [ 152.722329][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 152.762633][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 153.076712][ T5855] Bluetooth: hci3: command tx timeout [ 153.138397][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079870000: rx timeout, send abort [ 153.148636][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079870000: 0x1ee00: (3) A timeout occurred and this is the connection abort to close the session. [ 153.163263][ C0] ------------[ cut here ]------------ [ 153.168748][ C0] refcount_t: underflow; use-after-free. [ 153.174866][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 153.184245][ C0] Modules linked in: [ 153.188172][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 153.198821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.208957][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 153.215218][ C0] Code: e0 c8 60 8c e8 d7 13 98 fc 90 0f 0b 90 90 eb 99 e8 5b 1d d7 fc c6 05 7d 6b 49 0b 01 90 48 c7 c7 40 c9 60 8c e8 b7 13 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d d7 fc c6 05 57 6b 49 0b 01 90 [ 153.234914][ C0] RSP: 0018:ffffc900001574e0 EFLAGS: 00010246 [ 153.241015][ C0] RAX: 45a731634cff4c00 RBX: ffff888032bccae4 RCX: ffff88801ce8da00 [ 153.249025][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.257072][ C0] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 153.265113][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888079870068 [ 153.273128][ C0] R13: ffff888032bccae4 R14: 1ffff1100f30e018 R15: ffff888079870000 [ 153.281162][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 153.290154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.296773][ C0] CR2: 000000110c358770 CR3: 000000007cd8c000 CR4: 00000000003526f0 [ 153.304888][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.312970][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.321082][ C0] Call Trace: [ 153.324418][ C0] [ 153.327376][ C0] ? __warn+0x168/0x4e0 [ 153.331557][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 153.337154][ C0] ? report_bug+0x2b3/0x500 [ 153.341693][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 153.347396][ C0] ? handle_bug+0x60/0x90 [ 153.351839][ C0] ? exc_invalid_op+0x1a/0x50 [ 153.356546][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 153.361576][ C0] ? __warn_printk+0x292/0x360 [ 153.366400][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 153.371974][ C0] j1939_session_put+0x1ed/0x440 [ 153.376949][ C0] j1939_tp_recv+0x92a/0x1050 [ 153.381635][ C0] j1939_can_recv+0x732/0xb20 [ 153.386371][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 153.391601][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 153.396886][ C0] can_rcv_filter+0x359/0x7f0 [ 153.401596][ C0] can_receive+0x327/0x480 [ 153.406168][ C0] ? can_receive+0x1c9/0x480 [ 153.410811][ C0] can_rcv+0x144/0x260 [ 153.414943][ C0] ? __pfx_can_rcv+0x10/0x10 [ 153.419641][ C0] __netif_receive_skb+0x2e0/0x650 [ 153.424807][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 153.429863][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 153.435551][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.441559][ C0] ? __pfx_lock_release+0x10/0x10 [ 153.446733][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 153.451883][ C0] process_backlog+0x662/0x15b0 [ 153.456803][ C0] ? process_backlog+0x33b/0x15b0 [ 153.461856][ C0] ? __pfx_process_backlog+0x10/0x10 [ 153.467189][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.473202][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.479564][ C0] __napi_poll+0xcb/0x490 [ 153.483937][ C0] net_rx_action+0x89b/0x1240 [ 153.488657][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 153.493812][ C0] ? __run_timer_base+0x178/0x8e0 [ 153.498860][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 153.504576][ C0] handle_softirqs+0x2c5/0x980 [ 153.509364][ C0] ? run_ksoftirqd+0xca/0x130 [ 153.514107][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 153.519423][ C0] run_ksoftirqd+0xca/0x130 [ 153.523975][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 153.529115][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 153.534901][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 153.540047][ C0] smpboot_thread_fn+0x544/0xa30 [ 153.545059][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 153.550118][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 153.555633][ C0] kthread+0x2f0/0x390 [ 153.559726][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 153.565286][ C0] ? __pfx_kthread+0x10/0x10 [ 153.569877][ C0] ret_from_fork+0x4b/0x80 [ 153.574336][ C0] ? __pfx_kthread+0x10/0x10 [ 153.578953][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.583804][ C0] [ 153.586840][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.594124][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 153.604723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.614793][ C0] Call Trace: [ 153.618181][ C0] [ 153.621127][ C0] dump_stack_lvl+0x241/0x360 [ 153.625828][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.631018][ C0] ? __pfx__printk+0x10/0x10 [ 153.635620][ C0] ? vscnprintf+0x5d/0x90 [ 153.639976][ C0] panic+0x349/0x880 [ 153.643902][ C0] ? __warn+0x177/0x4e0 [ 153.648082][ C0] ? __pfx_panic+0x10/0x10 [ 153.652516][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 153.657484][ C0] __warn+0x34b/0x4e0 [ 153.661467][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 153.667020][ C0] report_bug+0x2b3/0x500 [ 153.671361][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 153.676924][ C0] handle_bug+0x60/0x90 [ 153.681270][ C0] exc_invalid_op+0x1a/0x50 [ 153.686134][ C0] asm_exc_invalid_op+0x1a/0x20 [ 153.691003][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 153.697218][ C0] Code: e0 c8 60 8c e8 d7 13 98 fc 90 0f 0b 90 90 eb 99 e8 5b 1d d7 fc c6 05 7d 6b 49 0b 01 90 48 c7 c7 40 c9 60 8c e8 b7 13 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d d7 fc c6 05 57 6b 49 0b 01 90 [ 153.717055][ C0] RSP: 0018:ffffc900001574e0 EFLAGS: 00010246 [ 153.723139][ C0] RAX: 45a731634cff4c00 RBX: ffff888032bccae4 RCX: ffff88801ce8da00 [ 153.731152][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.739395][ C0] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 153.747462][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888079870068 [ 153.755439][ C0] R13: ffff888032bccae4 R14: 1ffff1100f30e018 R15: ffff888079870000 [ 153.763426][ C0] ? __warn_printk+0x292/0x360 [ 153.768207][ C0] j1939_session_put+0x1ed/0x440 [ 153.773159][ C0] j1939_tp_recv+0x92a/0x1050 [ 153.777854][ C0] j1939_can_recv+0x732/0xb20 [ 153.782549][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 153.787774][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 153.792996][ C0] can_rcv_filter+0x359/0x7f0 [ 153.797714][ C0] can_receive+0x327/0x480 [ 153.802148][ C0] ? can_receive+0x1c9/0x480 [ 153.806757][ C0] can_rcv+0x144/0x260 [ 153.810832][ C0] ? __pfx_can_rcv+0x10/0x10 [ 153.815427][ C0] __netif_receive_skb+0x2e0/0x650 [ 153.820553][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 153.825592][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 153.831236][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.837260][ C0] ? __pfx_lock_release+0x10/0x10 [ 153.842309][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 153.847461][ C0] process_backlog+0x662/0x15b0 [ 153.852341][ C0] ? process_backlog+0x33b/0x15b0 [ 153.857389][ C0] ? __pfx_process_backlog+0x10/0x10 [ 153.862693][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.868717][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.875076][ C0] __napi_poll+0xcb/0x490 [ 153.879428][ C0] net_rx_action+0x89b/0x1240 [ 153.884128][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 153.889268][ C0] ? __run_timer_base+0x178/0x8e0 [ 153.894366][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 153.900096][ C0] handle_softirqs+0x2c5/0x980 [ 153.905480][ C0] ? run_ksoftirqd+0xca/0x130 [ 153.910185][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 153.915487][ C0] run_ksoftirqd+0xca/0x130 [ 153.920003][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 153.925132][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 153.930958][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 153.936097][ C0] smpboot_thread_fn+0x544/0xa30 [ 153.941405][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 153.946540][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 153.952002][ C0] kthread+0x2f0/0x390 [ 153.956075][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 153.961538][ C0] ? __pfx_kthread+0x10/0x10 [ 153.966228][ C0] ret_from_fork+0x4b/0x80 [ 153.970917][ C0] ? __pfx_kthread+0x10/0x10 [ 153.975529][ C0] ret_from_fork_asm+0x1a/0x30 [ 153.980307][ C0] [ 153.983461][ C0] Kernel Offset: disabled [ 153.988327][ C0] Rebooting in 86400 seconds..