last executing test programs: 1m48.14060059s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m44.704516756s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 1m40.784056841s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m28.09273097s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m24.861454027s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 1m22.251185978s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m7.475657219s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m4.284138684s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 1m2.508511403s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 47.004055389s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 44.579925453s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 43.78722384s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 29.230454151s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 28.404541723s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 26.195776065s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 10.841964161s ago: executing program 3 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket(0x25, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000900)={{r4, 0x4, 0x3, 0x0, 0x8, 0x401, 0x80000001, 0x0, 0x2, 0x0, 0x3, 0x1, 0xffffffff, 0x4f4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x1, {0x0, 0x1, 0x1}, {0x2}}], 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf254a00000008000300", @ANYRES32=r13, @ANYBLOB="4da1159be268c23487210aa482c0235bdb22c1131e6e90bc4f74519c914ed8b96481913054e72e5e15"], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaff000000626c37ae7ca94e027fbd004500001c000000666a6993564b28be99f2e34f12a74265f5380149d98df36e7c6df5e26238329e8e9111cbbdc0e8f94def2adab3191f564cba7176592e8c1f8208096f46b44fc0b1fcc48473b951add100a0d08ce15bb335b1c183b26c1476f6d2eaa1ce23ec238c111e642d3459420cfa56e1428fbfcfdbded10d48906e635a9130af24da0709e06ad29ebf8532510f0932aecb6ea2504410ab2480e2de6ff269382d9b78fc275355a56ab0dd"], 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "63a8499b00b1803e640908116c0b1b51a594e1468ca41506c8b68df9d7648d99", "3ba2cc4fcd677c78f85b1bc50629a38dce8199252d0928e5146a5f501e9c1757faf30484835a25cd1bacaf9980b7fdbf", "c7de1d4b1cd11e1d6b2ca7c71b9763afca15ba32d83bd91b604325c7", {"1cea4aa6a696de061bd7653f46aa6005", "103bc1df664a017d9a70b565e8acedc9"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 10.232509816s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.229944918s ago: executing program 2 (id=1981): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0xd70d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r12 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r12, 0x11, 0x66, 0x0, &(0x7f0000000b80)) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x3f}, 0x1c) listen(r9, 0x2) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r13, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in6={0xa, 0x4e23, 0x0, @ipv4}], 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.142669257s ago: executing program 4 (id=855): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 4.43952303s ago: executing program 2 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000000000000000064e641188cbd8f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001100000000000500100000000000"], 0x44}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x2, 0x3, {{0xf, 0x4, 0x0, 0x20, 0x3c, 0x68, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@generic={0x86, 0x9, "41e2693c96e368"}, @timestamp_addr={0x44, 0x1c, 0x5f, 0x1, 0xa, [{@local, 0x7f}, {@multicast1, 0x7}, {@private=0xa010101, 0xffff0000}]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x200400d4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7f, 0xa, 0x5, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7800, 0x80000000, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x12, &(0x7f0000003580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a50000008713c0ff04000000950000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r15], 0x3c}}, 0x0) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfe, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r18}, @IFLA_MASTER={0x8, 0xa, r18}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'gre0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0x3, 0xfffffff8, {{0x4c, 0x4, 0x3, 0x9, 0x130, 0x67, 0x0, 0xe, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1f, 0xe7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100]}, @cipso={0x86, 0x3d, 0x2, [{0x5, 0x3, '\f'}, {0x0, 0x6, "f609722b"}, {0x1, 0xd, "9258189750211a4f16457e"}, {0x7, 0x2}, {0x5, 0xc, "2e91302d0e4ccf15ee56"}, {0x0, 0x8, "027befa5333a"}, {0x5, 0xb, "4642eaa9f607c932d7"}]}, @timestamp={0x44, 0x2c, 0xaf, 0x0, 0x4, [0x3, 0x7fb10, 0x0, 0xb, 0x302, 0x6, 0x50, 0xd, 0x7fffffff, 0x9e0]}, @cipso={0x86, 0x64, 0x3, [{0x5, 0x8, "fbd2df25c9c5"}, {0x5, 0x12, "bccf27b2b46a0d9d423ef1261aebd9f0"}, {0x2, 0x5, "e04263"}, {0x5, 0x7, "14e420d92c"}, {0x7, 0x12, "ab189ef4b516fc93c52582ae2bf4ccbd"}, {0x1, 0x3, 'D'}, {0x2, 0xc, "652ce8eaf4427767cefd"}, {0x5, 0xc, "4391eed765188a7668db"}, {0x1, 0xb, "b31481d2bb6d6652b7"}]}, @noop, @timestamp={0x44, 0x18, 0x86, 0x0, 0x7, [0x400, 0x9, 0x5, 0x1, 0xaa]}, @cipso={0x86, 0x13, 0x2, [{0x1, 0xd, "6c059d1404d4ebe20ae87e"}]}, @noop]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@RTM_DELMDB={0x158, 0x55, 0x100, 0x70bd29, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x2, 0x0, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x1, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x2, {@ip4=@private=0xa010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x0, {@ip4=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x3, 0x1, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x2, 0x2, {@in6_addr=@remote, 0x82dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x0, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x25}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r18, 0x0, 0x2, 0x4, {@in6_addr=@loopback, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r20, 0x1, 0x1, 0x3, {@in6_addr=@empty, 0x800}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x280408c0}, 0x800) 3.639630118s ago: executing program 2 (id=1986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x11, 0x2, 0x80000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) socket$netlink(0x10, 0x3, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x14, 0x0, &(0x7f00000007c0)) socket$inet6(0xa, 0x4, 0x71e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f0800000000000920000000000002"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x24044040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000000000000080000000bb2000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800fc00000000003b5c01801a849c31", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000800100002c002b8008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r10, @ANYBLOB="080003000600000008000500", @ANYRES32=r5, @ANYBLOB="08002e0002200000050010000400000008000500", @ANYRES32=r7, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.5134482s ago: executing program 2 (id=1991): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x3}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40010) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40010) (async) 2.331963513s ago: executing program 2 (id=1993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000045d66de06aab2210c8e8697a06c50be000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e834ad5e0300d06340d53640555c9c410515c889699b344ececae2be26e5374610840b1295ba5fc4deb51bd1fc7658bee0cd19823e3c9da0434c7dbfb90016a134cad87318e4bdb6db9b37fef5c9da41b065c819740c0ece6c65701357587a8706e0", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000fffffffffdffffff00"/28], 0x50) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="6a0ac4ffff03002c5d41e56b35902c88b72ef9519cb8d2380089103a0000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xab}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18c}}}, &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r3], &(0x7f0000000680)=[{0x5, 0x3, 0x9, 0x7}, {0x0, 0x2, 0xc, 0x8}, {0x1, 0x3, 0xd, 0xf}], 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='cpuhp_enter\x00', r8, 0x0, 0x3}, 0x18) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r10 = getpid() syz_open_procfs$namespace(r10, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="654d98"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r12, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB="18000000", @ANYRES32, @ANYBLOB="d94839194fa8004373085391f56fc3f4247a9fb59656eb6f2050c7b8e96cadbb840a61851d8e15821021f70bd09a3797ce1d386f107fd401034eb8aaca0d44b61e96b52d844c5e3b8c758007d8a1bc0608e751006199a5dceb0d72bde512bdd77f03eabff9aafbd3b3113b425d5700"/123, @ANYRES64=0x0], 0x20) recvmsg(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x1, @ANYRESOCT=r6, @ANYRESDEC=r8, @ANYRES32=r11, @ANYRESOCT=r7, @ANYRESHEX=r6, @ANYRESDEC=r3, @ANYRES32=r0, @ANYRESDEC], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r13, &(0x7f0000000000)='.'}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="626f6e6400000000aeff028008001c008c04000005003a0000"], 0x44}}, 0x0) 2.26016664s ago: executing program 2 (id=1994): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r3, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0x7, 0x81, 0x800, 0xa}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) write(r1, &(0x7f0000000000)="3b000000010006", 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r5, 0xffffe000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r9}}}], 0x20}, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0xb0, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0xb0}}, 0x0) 1.525904559s ago: executing program 1 (id=1997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000600), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000600), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) recvmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/224, 0xe0}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000300)=""/187, 0xbb}], 0x4, &(0x7f0000000580)=""/30, 0x1e}, 0x2000) 598.026993ms ago: executing program 1 (id=1998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MAP={0x24}]}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) 387.090376ms ago: executing program 1 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079104f0000000000c30000000000000095000000000000005f28915975974c9a146f45d1e506b532a635cc34ca7fdf6590722013dfe2bccf41bdb189b413016ba188a4ee95ad313f63a320864846b51ec0541a7d889da1c3caee65ebb681b4eee400d91a7d8aae93ed47883fe6f8eac1c878e62af215d6eaccd90a9928c70205ff89f111e646db51c57502e235c6307e5521cd1a8102e235889409a6ed96e2adf63cb650d110d757ec97b1472e19ad842be031e6471a003cd351c8f596f2d102eda63cdc57de1b3db42a530d65cd198aab470b3c013505cfe0d8888d15023baefd81da141d592b949d78a591ac4db02e22a03ec1b7c8a670a09ca7df31ccd5396e488b2772d9bec3257e34f555a8dcb89e9cb9558d998634610ccde96614e971b8af"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x8, 0x801076469c94fa06, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 291.616378ms ago: executing program 1 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x8d}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) 141.315941ms ago: executing program 1 (id=2001): r0 = socket(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x2, 0x4001) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 0s ago: executing program 1 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=@newlink={0x64, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2242}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x7f}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c00028006000840000000000500070000000006050009"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=@newlink={0x64, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2242}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x7f}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c00028006000840000000000500070000000006050009"], 0x4c}}, 0x0) (async) kernel console output (not intermixed with test programs): 04][ T8790] team0 (unregistering): Port device team_slave_0 removed [ 254.568099][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1638'. [ 254.668649][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.690371][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.761144][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.776432][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.785028][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.794471][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.823490][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.870702][T11679] lo speed is unknown, defaulting to 1000 [ 255.017455][T11618] chnl_net:caif_netlink_parms(): no params data found [ 255.341843][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 255.351444][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 255.387652][ T5845] Bluetooth: hci2: command tx timeout [ 255.558767][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.574594][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.582253][T11618] bridge_slave_0: entered allmulticast mode [ 255.599650][T11618] bridge_slave_0: entered promiscuous mode [ 255.614533][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.632899][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.641486][T11618] bridge_slave_1: entered allmulticast mode [ 255.656774][T11618] bridge_slave_1: entered promiscuous mode [ 255.764643][T11706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.775717][T11706] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1645'. [ 255.803953][T11618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.817705][T11618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.870452][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.979366][T11618] team0: Port device team_slave_0 added [ 256.010214][T11618] team0: Port device team_slave_1 added [ 256.161370][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.180345][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.194772][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.207393][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.216730][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.243178][ T8783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.271910][T11618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.303417][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.331088][T11618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.348130][T11618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.355209][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.382778][T11618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.451191][ T8783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.452130][T11717] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1647'. [ 256.528922][T11618] hsr_slave_0: entered promiscuous mode [ 256.550026][T11618] hsr_slave_1: entered promiscuous mode [ 256.586217][T11618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.593933][T11618] Cannot create hsr debugfs directory [ 256.690599][T11730] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1649'. [ 256.703383][ T8783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.805925][T11712] lo speed is unknown, defaulting to 1000 [ 256.866896][ T8783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.905658][ T5845] Bluetooth: hci3: command tx timeout [ 257.139067][T11679] chnl_net:caif_netlink_parms(): no params data found [ 257.202502][ T12] tipc: Subscription rejected, illegal request [ 257.476557][ T5845] Bluetooth: hci2: command tx timeout [ 257.565382][T11749] lo speed is unknown, defaulting to 1000 [ 257.797072][ T8783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.849378][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.861284][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.870311][T11679] bridge_slave_0: entered allmulticast mode [ 257.882112][T11679] bridge_slave_0: entered promiscuous mode [ 257.891669][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.898941][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.906636][T11679] bridge_slave_1: entered allmulticast mode [ 257.914252][T11679] bridge_slave_1: entered promiscuous mode [ 258.034329][ T8783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.084513][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.098866][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.162031][ T8783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.246665][T11679] team0: Port device team_slave_0 added [ 258.265397][ T5845] Bluetooth: hci4: command tx timeout [ 258.382605][T11679] team0: Port device team_slave_1 added [ 258.503583][ T8783] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.552278][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.568134][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.599056][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.638842][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.646845][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.676002][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.697357][T11712] chnl_net:caif_netlink_parms(): no params data found [ 258.831104][T11679] hsr_slave_0: entered promiscuous mode [ 258.841189][T11679] hsr_slave_1: entered promiscuous mode [ 258.847711][T11679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.855985][T11679] Cannot create hsr debugfs directory [ 258.895781][T11618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.983273][T11618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.002712][ T5845] Bluetooth: hci3: command tx timeout [ 259.111335][T11618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.132131][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.142344][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.150409][T11712] bridge_slave_0: entered allmulticast mode [ 259.166343][T11712] bridge_slave_0: entered promiscuous mode [ 259.181156][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.195622][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.203020][T11712] bridge_slave_1: entered allmulticast mode [ 259.226327][T11712] bridge_slave_1: entered promiscuous mode [ 259.243930][T11618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.252694][T11782] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1663'. [ 259.399767][ T8783] bridge_slave_1: left allmulticast mode [ 259.411952][ T8783] bridge_slave_1: left promiscuous mode [ 259.420337][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.450390][ T8783] bridge_slave_1: left allmulticast mode [ 259.460693][ T8783] bridge_slave_1: left promiscuous mode [ 259.467266][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.483351][ T8783] bridge_slave_0: left allmulticast mode [ 259.489639][ T8783] bridge_slave_0: left promiscuous mode [ 259.495711][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.508187][ T8783] bridge_slave_1: left allmulticast mode [ 259.514155][ T8783] bridge_slave_1: left promiscuous mode [ 259.520075][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.535824][ T8783] bridge_slave_0: left allmulticast mode [ 259.541696][ T8783] bridge_slave_0: left promiscuous mode [ 259.547589][ T5845] Bluetooth: hci2: command tx timeout [ 259.553370][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.346031][ T5845] Bluetooth: hci4: command tx timeout [ 260.658375][ T8783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.669802][ T8783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.683434][ T8783] bond0 (unregistering): Released all slaves [ 260.811019][ T8783] bond1 (unregistering): Released all slaves [ 260.922127][ T8783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.933338][ T8783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.943714][ T8783] bond0 (unregistering): Released all slaves [ 261.065884][ T5845] Bluetooth: hci3: command tx timeout [ 261.073904][ T8783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.085018][ T8783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.098605][ T8783] bond0 (unregistering): Released all slaves [ 261.123967][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.213852][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.407947][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 261.449244][T11712] team0: Port device team_slave_0 added [ 261.466746][T11712] team0: Port device team_slave_1 added [ 261.607497][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.614740][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.654987][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.798908][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.812915][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.815120][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 261.843070][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.869968][ T5845] block nbd4: Receive control failed (result -32) [ 262.281633][T11712] hsr_slave_0: entered promiscuous mode [ 262.308415][T11712] hsr_slave_1: entered promiscuous mode [ 262.314925][T11712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.325292][T11712] Cannot create hsr debugfs directory [ 262.425719][ T5845] Bluetooth: hci4: command tx timeout [ 263.155332][ T5845] Bluetooth: hci3: command tx timeout [ 263.182842][T11679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.266957][T11679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.321983][T11618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.453922][T11679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.650620][T11679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.736460][T11618] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.821543][ T8783] hsr_slave_0: left promiscuous mode [ 263.831194][ T8783] hsr_slave_1: left promiscuous mode [ 263.837491][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.845037][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.856843][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.864285][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.880818][ T8783] hsr_slave_0: left promiscuous mode [ 263.887208][ T8783] hsr_slave_1: left promiscuous mode [ 263.894107][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.902224][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.910459][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.918939][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.932941][ T8783] hsr_slave_0: left promiscuous mode [ 263.939271][ T8783] hsr_slave_1: left promiscuous mode [ 263.945328][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.952832][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.965289][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.972794][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.042863][ T8783] veth1_macvtap: left promiscuous mode [ 264.048751][ T8783] veth0_macvtap: left promiscuous mode [ 264.054634][ T8783] veth1_vlan: left promiscuous mode [ 264.060205][ T8783] veth0_vlan: left promiscuous mode [ 264.074790][ T8783] veth1_macvtap: left promiscuous mode [ 264.080618][ T8783] veth0_macvtap: left promiscuous mode [ 264.087487][ T8783] veth1_vlan: left promiscuous mode [ 264.092908][ T8783] veth0_vlan: left promiscuous mode [ 264.099831][ T8783] veth1_macvtap: left promiscuous mode [ 264.106570][ T8783] veth0_macvtap: left promiscuous mode [ 264.112330][ T8783] veth1_vlan: left promiscuous mode [ 264.117866][ T8783] veth0_vlan: left promiscuous mode [ 264.505514][ T5845] Bluetooth: hci4: command tx timeout [ 265.025473][ T8783] team0 (unregistering): Port device team_slave_1 removed [ 265.071180][ T8783] team0 (unregistering): Port device team_slave_0 removed [ 265.851608][ T8783] team0 (unregistering): Port device team_slave_1 removed [ 265.907304][ T8783] team0 (unregistering): Port device team_slave_0 removed [ 266.771606][ T8783] team0 (unregistering): Port device team_slave_1 removed [ 266.848818][ T8783] team0 (unregistering): Port device team_slave_0 removed [ 267.411009][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.418430][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.521736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.529651][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.869324][T11679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.981075][T11712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.013761][T11712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.054216][T11679] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.070110][T11712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.107165][T11712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.162008][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.169311][ T8790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.209600][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.216883][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.283098][T11618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.532697][T11618] veth0_vlan: entered promiscuous mode [ 268.589614][T11618] veth1_vlan: entered promiscuous mode [ 268.722870][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.760094][ T8783] IPVS: stop unused estimator thread 0... [ 268.820759][T11618] veth0_macvtap: entered promiscuous mode [ 268.870102][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.885000][T11911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1698'. [ 268.891366][T11618] veth1_macvtap: entered promiscuous mode [ 268.961442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.968652][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.012490][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.044239][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.054612][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.067095][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.079436][T11618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.089481][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.096730][ T8790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.134041][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.152039][T11918] netlink: 'syz.2.1700': attribute type 2 has an invalid length. [ 269.157020][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.172191][T11618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.268225][T11923] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1701'. [ 269.272954][T11618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.303595][T11618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.324130][T11618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.328024][T11924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.333509][T11618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.371641][T11679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.626575][ T8789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.634544][ T8789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.763188][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.795794][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.150368][T11679] veth0_vlan: entered promiscuous mode [ 270.186764][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.216585][T11679] veth1_vlan: entered promiscuous mode [ 270.228265][T11945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1705'. [ 270.599255][ T8789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.759028][ T8789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.824506][T11679] veth0_macvtap: entered promiscuous mode [ 270.854515][T11679] veth1_macvtap: entered promiscuous mode [ 270.868780][T11712] veth0_vlan: entered promiscuous mode [ 270.900410][T11712] veth1_vlan: entered promiscuous mode [ 270.919410][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.930624][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.940633][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.952270][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.963131][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.973836][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.986849][T11679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.011564][ T8789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.034346][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.046690][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.058467][T11679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.070196][T11679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.081582][T11679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.094337][T11679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.104159][T11679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.115078][T11679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.124922][T11679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.163786][ T8789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.192503][T11712] veth0_macvtap: entered promiscuous mode [ 271.212460][T11712] veth1_macvtap: entered promiscuous mode [ 271.349609][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.373114][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.394949][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.405849][T11952] netlink: 'syz.1.1706': attribute type 21 has an invalid length. [ 271.412901][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.442057][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.472607][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.484696][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.502679][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.526925][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.640659][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.661698][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.684687][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 271.704817][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.724167][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 271.736830][T11962] IPVS: set_ctl: invalid protocol: 4705 172.20.20.170:20004 [ 271.758310][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.775470][T11712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.794277][T11712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.813319][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.824766][ T8790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.852147][ T8790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.948047][T11712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.010431][T11712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.025017][T11712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.056993][T11712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.250184][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.264419][ T8789] bridge_slave_1: left allmulticast mode [ 272.272780][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.274623][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.281031][ T8789] bridge_slave_1: left promiscuous mode [ 272.295753][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.317481][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.327727][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.329788][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.342330][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.369498][ T8789] bridge_slave_0: left allmulticast mode [ 272.381210][ T8789] bridge_slave_0: left promiscuous mode [ 272.397528][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.795776][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.807952][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.818988][ T8789] bond0 (unregistering): Released all slaves [ 272.974254][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.995259][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.030726][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1716'. [ 273.188303][T11973] lo speed is unknown, defaulting to 1000 [ 273.309485][ T8784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.340414][ T8784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.989191][ T8789] hsr_slave_0: left promiscuous mode [ 274.017725][ T8789] hsr_slave_1: left promiscuous mode [ 274.034364][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.061056][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.083282][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.096788][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.123456][ T8789] veth1_macvtap: left promiscuous mode [ 274.130033][ T8789] veth0_macvtap: left promiscuous mode [ 274.136056][ T8789] veth1_vlan: left promiscuous mode [ 274.141545][ T8789] veth0_vlan: left promiscuous mode [ 274.425757][ T5842] Bluetooth: hci2: command tx timeout [ 274.718985][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.739585][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.753468][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.776785][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.797571][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.931409][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.942098][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.953661][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.965107][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.980943][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.200486][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 275.254681][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 275.904814][T12014] lo speed is unknown, defaulting to 1000 [ 276.067563][T12027] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 276.084156][T12027] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1726'. [ 276.090550][T12030] tc_dump_action: action bad kind [ 276.115758][T11973] chnl_net:caif_netlink_parms(): no params data found [ 276.298891][T12018] lo speed is unknown, defaulting to 1000 [ 276.506938][ T5845] Bluetooth: hci2: command tx timeout [ 276.529498][T12041] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 276.534019][T11973] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.580789][T11973] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.636965][T11973] bridge_slave_0: entered allmulticast mode [ 276.661437][T11973] bridge_slave_0: entered promiscuous mode [ 276.673989][T11973] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.688700][T11973] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.699389][T11973] bridge_slave_1: entered allmulticast mode [ 276.709944][T12050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'. [ 276.717704][T11973] bridge_slave_1: entered promiscuous mode [ 276.781697][T12052] can: request_module (can-proto-5) failed. [ 276.855404][T12059] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 276.864133][T11973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.866653][T12059] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 276.906158][ T5845] Bluetooth: hci3: command tx timeout [ 276.928902][T11973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.042258][T11973] team0: Port device team_slave_0 added [ 277.065978][ T5845] Bluetooth: hci4: command tx timeout [ 277.108893][ T8789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.130894][T11973] team0: Port device team_slave_1 added [ 277.263736][ T8789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.283817][T11973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.292472][T11973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.322254][T11973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.379364][T11973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.396504][T11973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.433448][T11973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.627811][ T8789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.690913][ T5845] block nbd5: Receive control failed (result -32) [ 277.823179][ T8789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.893679][T11973] hsr_slave_0: entered promiscuous mode [ 277.905298][T11973] hsr_slave_1: entered promiscuous mode [ 277.911922][T11973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.936784][T12094] FAULT_INJECTION: forcing a failure. [ 277.936784][T12094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 277.955223][T11973] Cannot create hsr debugfs directory [ 277.964243][T12094] CPU: 0 UID: 0 PID: 12094 Comm: syz.1.1741 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 277.964287][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 277.964308][T12094] Call Trace: [ 277.964321][T12094] [ 277.964330][T12094] dump_stack_lvl+0x189/0x250 [ 277.964376][T12094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.964404][T12094] ? __pfx__printk+0x10/0x10 [ 277.964432][T12094] should_fail_ex+0x414/0x560 [ 277.964463][T12094] _copy_to_user+0x31/0xb0 [ 277.964487][T12094] simple_read_from_buffer+0xe1/0x170 [ 277.964511][T12094] proc_fail_nth_read+0x1df/0x250 [ 277.964537][T12094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.964569][T12094] ? rw_verify_area+0x258/0x650 [ 277.964585][T12094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.964609][T12094] vfs_read+0x1fd/0x980 [ 277.964631][T12094] ? __pfx___mutex_lock+0x10/0x10 [ 277.964651][T12094] ? __pfx_vfs_read+0x10/0x10 [ 277.964669][T12094] ? __fget_files+0x2a/0x420 [ 277.964694][T12094] ? __fget_files+0x3a0/0x420 [ 277.964713][T12094] ? __fget_files+0x2a/0x420 [ 277.964741][T12094] ksys_read+0x145/0x250 [ 277.964761][T12094] ? __pfx_ksys_read+0x10/0x10 [ 277.964782][T12094] ? do_syscall_64+0xba/0x210 [ 277.964805][T12094] do_syscall_64+0xf6/0x210 [ 277.964824][T12094] ? clear_bhb_loop+0x45/0xa0 [ 277.964843][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.964859][T12094] RIP: 0033:0x7f2c05b8d37c [ 277.964878][T12094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.964892][T12094] RSP: 002b:00007f2c06979030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.964909][T12094] RAX: ffffffffffffffda RBX: 00007f2c05db6080 RCX: 00007f2c05b8d37c [ 277.964921][T12094] RDX: 000000000000000f RSI: 00007f2c069790a0 RDI: 0000000000000004 [ 277.964931][T12094] RBP: 00007f2c06979090 R08: 0000000000000000 R09: 0000000000000000 [ 277.964940][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.964950][T12094] R13: 0000000000000001 R14: 00007f2c05db6080 R15: 00007ffc5b084608 [ 277.964975][T12094] [ 278.225750][T12014] chnl_net:caif_netlink_parms(): no params data found [ 278.275844][T12018] chnl_net:caif_netlink_parms(): no params data found [ 278.349231][T12098] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1742'. [ 278.547272][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 278.590110][ T5845] Bluetooth: hci2: command tx timeout [ 278.672039][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.683356][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.698867][T12014] bridge_slave_0: entered allmulticast mode [ 278.709088][T12014] bridge_slave_0: entered promiscuous mode [ 278.758261][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.765807][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.773421][T12014] bridge_slave_1: entered allmulticast mode [ 278.782708][T12014] bridge_slave_1: entered promiscuous mode [ 278.930583][T12014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.985658][ T5845] Bluetooth: hci3: command tx timeout [ 278.993118][ T8789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.012203][T12018] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.022267][T12018] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.029797][T12018] bridge_slave_0: entered allmulticast mode [ 279.038054][T12018] bridge_slave_0: entered promiscuous mode [ 279.145602][ T5845] Bluetooth: hci4: command tx timeout [ 279.184395][T12014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.199055][T12018] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.207222][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.214521][T12018] bridge_slave_1: entered allmulticast mode [ 279.223070][T12018] bridge_slave_1: entered promiscuous mode [ 279.287696][ T8789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.427168][T12018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.448376][T12018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.474820][ T8789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.503828][T12014] team0: Port device team_slave_0 added [ 279.617620][T12018] team0: Port device team_slave_0 added [ 279.630181][T12014] team0: Port device team_slave_1 added [ 279.665807][ T8789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.709633][T12018] team0: Port device team_slave_1 added [ 279.872399][T12018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.883339][T12018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.917954][T12018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.931426][T12018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.938615][T12018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.984983][T12018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.021043][T12014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.029077][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.083810][T12014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.104813][T12014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.127706][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.154418][T12014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.349673][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 280.368600][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 280.384018][T12144] netlink: 'syz.2.1755': attribute type 15 has an invalid length. [ 280.490987][T12014] hsr_slave_0: entered promiscuous mode [ 280.499034][T12014] hsr_slave_1: entered promiscuous mode [ 280.513768][T12014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.523078][T12014] Cannot create hsr debugfs directory [ 280.614207][ T8789] bridge_slave_1: left allmulticast mode [ 280.620417][ T8789] bridge_slave_1: left promiscuous mode [ 280.626626][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.637207][ T8789] bridge_slave_0: left allmulticast mode [ 280.642941][ T8789] bridge_slave_0: left promiscuous mode [ 280.649172][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.661667][ T8789] bridge_slave_1: left allmulticast mode [ 280.668208][ T5845] Bluetooth: hci2: command tx timeout [ 280.673852][ T8789] bridge_slave_1: left promiscuous mode [ 280.680369][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.690851][ T8789] bridge_slave_0: left allmulticast mode [ 280.699383][ T8789] bridge_slave_0: left promiscuous mode [ 280.705103][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.065549][ T5845] Bluetooth: hci3: command tx timeout [ 281.225583][ T5845] Bluetooth: hci4: command tx timeout [ 281.341010][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.352971][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.363945][ T8789] bond0 (unregistering): Released all slaves [ 281.489650][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.507270][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.523412][ T8789] bond0 (unregistering): Released all slaves [ 281.610274][T12018] hsr_slave_0: entered promiscuous mode [ 281.617462][T12018] hsr_slave_1: entered promiscuous mode [ 281.624114][T12018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.632427][T12018] Cannot create hsr debugfs directory [ 283.158607][ T5845] Bluetooth: hci3: command tx timeout [ 283.309593][ T5845] Bluetooth: hci4: command tx timeout [ 283.888471][T12174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1762'. [ 284.029890][T11973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 284.108109][T11973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 284.193815][T11973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 284.250614][T11973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.755556][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1769'. [ 284.848983][ T8789] hsr_slave_0: left promiscuous mode [ 284.855735][ T8789] hsr_slave_1: left promiscuous mode [ 284.861869][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.871894][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.886546][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.894062][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.919514][ T8789] hsr_slave_0: left promiscuous mode [ 284.926163][ T8789] hsr_slave_1: left promiscuous mode [ 284.932126][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.940128][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.948826][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.956530][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.994531][ T8789] veth1_macvtap: left promiscuous mode [ 285.000347][ T8789] veth0_macvtap: left promiscuous mode [ 285.006604][ T8789] veth1_vlan: left promiscuous mode [ 285.012057][ T8789] veth0_vlan: left promiscuous mode [ 285.018927][ T8789] veth1_macvtap: left promiscuous mode [ 285.024932][ T8789] veth0_macvtap: left promiscuous mode [ 285.030999][ T8789] veth1_vlan: left promiscuous mode [ 285.037546][ T8789] veth0_vlan: left promiscuous mode [ 285.630896][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 285.673711][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 286.503170][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 286.551065][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 286.997328][T12200] tipc: Enabling of bearer rejected, already enabled [ 287.167666][T11973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.279230][T11973] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.315996][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.323177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.353186][T12014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.407166][T12014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.432494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.439739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.570621][T12014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.598373][T12014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.167175][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.206529][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 288.296700][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.411290][T12018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.427684][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.434950][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.453720][T12018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.480599][T11973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.493550][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.500779][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.524841][T12018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.556635][T12018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.712473][T11973] veth0_vlan: entered promiscuous mode [ 288.751322][T11973] veth1_vlan: entered promiscuous mode [ 288.873912][T11973] veth0_macvtap: entered promiscuous mode [ 288.930807][T11973] veth1_macvtap: entered promiscuous mode [ 289.002917][T12018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.039653][T11973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.052831][T11973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.063084][T11973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.074099][T11973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.086066][T11973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.102082][T11973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.114135][T11973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.127226][T11973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.158101][T11973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.167552][T11973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.176578][T11973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.185379][T11973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.200681][T12018] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.231343][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.238575][ T8783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.277499][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.284711][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.325541][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.604440][ T8790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.664564][ T8790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.772697][T12294] FAULT_INJECTION: forcing a failure. [ 289.772697][T12294] name failslab, interval 1, probability 0, space 0, times 1 [ 289.780158][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.805065][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.818143][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.1.1794 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 289.818173][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 289.818186][T12294] Call Trace: [ 289.818194][T12294] [ 289.818202][T12294] dump_stack_lvl+0x189/0x250 [ 289.818240][T12294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.818269][T12294] ? __pfx__printk+0x10/0x10 [ 289.818296][T12294] ? __pfx___might_resched+0x10/0x10 [ 289.818314][T12294] ? fs_reclaim_acquire+0x7d/0x100 [ 289.818348][T12294] should_fail_ex+0x414/0x560 [ 289.818431][T12294] should_failslab+0xa8/0x100 [ 289.818458][T12294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 289.818483][T12294] ? __alloc_skb+0x112/0x2d0 [ 289.818510][T12294] __alloc_skb+0x112/0x2d0 [ 289.818536][T12294] netlink_ack+0x146/0xa50 [ 289.818553][T12294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.818577][T12294] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 289.818597][T12294] ? __pfx_nl80211_post_doit+0x10/0x10 [ 289.818617][T12294] ? ref_tracker_free+0x63a/0x7d0 [ 289.818636][T12294] ? __copy_skb_header+0xa7/0x550 [ 289.818672][T12294] netlink_rcv_skb+0x2a0/0x490 [ 289.818693][T12294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 289.818721][T12294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.818768][T12294] ? down_read+0x1ad/0x2e0 [ 289.818796][T12294] genl_rcv+0x28/0x40 [ 289.818819][T12294] netlink_unicast+0x758/0x8d0 [ 289.818862][T12294] netlink_sendmsg+0x805/0xb30 [ 289.818893][T12294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.818918][T12294] ? aa_sock_msg_perm+0x94/0x160 [ 289.818940][T12294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.818963][T12294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.818985][T12294] __sock_sendmsg+0x219/0x270 [ 289.819018][T12294] ____sys_sendmsg+0x505/0x830 [ 289.819051][T12294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.819086][T12294] ? import_iovec+0x74/0xa0 [ 289.819115][T12294] ___sys_sendmsg+0x21f/0x2a0 [ 289.819143][T12294] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.819210][T12294] ? __fget_files+0x2a/0x420 [ 289.819233][T12294] ? __fget_files+0x3a0/0x420 [ 289.819271][T12294] __x64_sys_sendmsg+0x19b/0x260 [ 289.819299][T12294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.819344][T12294] ? do_syscall_64+0xba/0x210 [ 289.819409][T12294] do_syscall_64+0xf6/0x210 [ 289.819434][T12294] ? clear_bhb_loop+0x45/0xa0 [ 289.819459][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.819478][T12294] RIP: 0033:0x7f2c05b8e969 [ 289.819497][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.819514][T12294] RSP: 002b:00007f2c0699a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.819535][T12294] RAX: ffffffffffffffda RBX: 00007f2c05db5fa0 RCX: 00007f2c05b8e969 [ 289.819549][T12294] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 289.819562][T12294] RBP: 00007f2c0699a090 R08: 0000000000000000 R09: 0000000000000000 [ 289.819574][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.819585][T12294] R13: 0000000000000000 R14: 00007f2c05db5fa0 R15: 00007ffc5b084608 [ 289.819618][T12294] [ 290.270092][T12018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.562812][T12018] veth0_vlan: entered promiscuous mode [ 290.564209][T12308] can: request_module (can-proto-0) failed. [ 290.599396][T12014] veth0_vlan: entered promiscuous mode [ 290.614194][T12014] veth1_vlan: entered promiscuous mode [ 290.674420][T12018] veth1_vlan: entered promiscuous mode [ 290.694575][T12315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1800'. [ 290.694858][T12317] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1799'. [ 290.724508][T12317] openvswitch: netlink: Actions may not be safe on all matching packets [ 290.744083][T12317] tipc: Started in network mode [ 290.752270][T12317] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 290.768352][T12317] tipc: Enabling of bearer rejected, failed to enable media [ 290.818962][ T8789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.898090][T12014] veth0_macvtap: entered promiscuous mode [ 290.955022][T12014] veth1_macvtap: entered promiscuous mode [ 290.988224][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.002492][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.017387][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.029029][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.039543][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.050173][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.070679][T12014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.094189][T12018] veth0_macvtap: entered promiscuous mode [ 291.109499][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.133925][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.144035][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.158650][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.170332][T12014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.194872][ T8789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.222146][T12014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.233150][T12014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.242509][T12014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.251824][T12014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.268241][T12018] veth1_macvtap: entered promiscuous mode [ 291.298721][ T8789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.351786][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.369839][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.380739][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.393050][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.408192][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.419298][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.429482][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.440343][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.451851][T12018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.478892][ T8789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.512440][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.523103][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.533204][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.544359][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.554498][T12018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.565520][T12018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.576776][T12018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.600112][T12018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.610800][T12018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.619696][T12018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.629392][T12018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.703572][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.715948][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.910403][ T8789] bridge_slave_1: left allmulticast mode [ 291.918931][ T8789] bridge_slave_1: left promiscuous mode [ 291.924793][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.945471][ T8789] bridge_slave_0: left allmulticast mode [ 291.957051][ T8789] bridge_slave_0: left promiscuous mode [ 291.968174][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.259048][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.276561][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.288491][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.301846][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.318391][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.480381][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.491977][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.503671][ T8789] bond0 (unregistering): Released all slaves [ 292.527396][ T8790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.558140][ T8790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.681096][T12335] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.738211][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.787392][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.904601][T12328] lo speed is unknown, defaulting to 1000 [ 293.039608][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.070843][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.123178][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 293.669521][ T8789] hsr_slave_0: left promiscuous mode [ 293.686055][ T8789] hsr_slave_1: left promiscuous mode [ 293.692373][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.725238][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.736308][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.750584][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.817156][ T8789] veth1_macvtap: left promiscuous mode [ 293.822755][ T8789] veth0_macvtap: left promiscuous mode [ 293.843247][ T8789] veth1_vlan: left promiscuous mode [ 293.854061][ T8789] veth0_vlan: left promiscuous mode [ 294.259825][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.271762][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.280299][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.291539][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.322607][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.348825][ T5845] Bluetooth: hci2: command tx timeout [ 294.801048][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.826924][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.836054][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.849305][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.871078][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.921539][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 294.960978][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 295.573307][T12374] lo speed is unknown, defaulting to 1000 [ 295.606188][T12377] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 295.667732][T12379] netlink: 'syz.1.1815': attribute type 9 has an invalid length. [ 295.707708][T12379] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.1815'. [ 295.759669][T12377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.821325][T12377] syz.1.1815 (12377) used greatest stack depth: 19080 bytes left [ 295.848596][T12328] chnl_net:caif_netlink_parms(): no params data found [ 296.034969][T12362] lo speed is unknown, defaulting to 1000 [ 296.162266][T12397] netlink: 'syz.2.1819': attribute type 12 has an invalid length. [ 296.170383][T12397] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 296.187241][T12397] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1819'. [ 296.264762][T12397] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 296.280788][T12397] netlink: 'syz.2.1819': attribute type 2 has an invalid length. [ 296.294559][T12397] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1819'. [ 296.391520][T12328] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.400286][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.413222][T12328] bridge_slave_0: entered allmulticast mode [ 296.421725][T12328] bridge_slave_0: entered promiscuous mode [ 296.428254][ T55] Bluetooth: hci3: command tx timeout [ 296.436001][ T55] Bluetooth: hci2: command tx timeout [ 296.449322][T12328] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.457154][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.464627][T12328] bridge_slave_1: entered allmulticast mode [ 296.473050][T12328] bridge_slave_1: entered promiscuous mode [ 296.537430][T12328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.551213][T12328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.698806][T12328] team0: Port device team_slave_0 added [ 296.732339][T12328] team0: Port device team_slave_1 added [ 296.784181][T12412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.881764][ T8789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.884827][T12418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 296.906114][ T55] Bluetooth: hci4: command tx timeout [ 296.942435][T12328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.954775][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.993904][T12328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.007494][T12328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.014900][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.044158][T12328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.094736][ T8789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.188740][T12374] chnl_net:caif_netlink_parms(): no params data found [ 297.270596][ T8789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.319958][T12328] hsr_slave_0: entered promiscuous mode [ 297.328748][T12328] hsr_slave_1: entered promiscuous mode [ 297.335107][T12328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.342832][T12328] Cannot create hsr debugfs directory [ 297.353834][T12425] xt_hashlimit: invalid interval [ 297.437134][ T8789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.452521][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1826'. [ 297.553683][T12362] chnl_net:caif_netlink_parms(): no params data found [ 297.704238][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.711592][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.720651][T12374] bridge_slave_0: entered allmulticast mode [ 297.728769][T12374] bridge_slave_0: entered promiscuous mode [ 297.746414][T12438] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 297.770315][T12374] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.778182][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.786622][T12374] bridge_slave_1: entered allmulticast mode [ 297.794629][T12374] bridge_slave_1: entered promiscuous mode [ 297.947958][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 297.963472][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 297.974005][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 298.069868][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.113836][T12453] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 298.152431][T12362] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.162556][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.170531][T12362] bridge_slave_0: entered allmulticast mode [ 298.178707][T12362] bridge_slave_0: entered promiscuous mode [ 298.189674][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.246008][T12455] macvlan3: entered promiscuous mode [ 298.251449][T12455] macvlan3: entered allmulticast mode [ 298.257967][T12362] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.265796][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.273252][T12362] bridge_slave_1: entered allmulticast mode [ 298.281592][T12362] bridge_slave_1: entered promiscuous mode [ 298.413439][T12362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.444021][T12374] team0: Port device team_slave_0 added [ 298.454355][T12374] team0: Port device team_slave_1 added [ 298.482142][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1835'. [ 298.491647][T12362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.515572][ T55] Bluetooth: hci2: command tx timeout [ 298.521148][ T55] Bluetooth: hci3: command tx timeout [ 298.537842][T12462] nbd: must specify an index to disconnect [ 298.560550][ T8789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.743765][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.761910][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.790645][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.938063][ T8789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.985515][ T5845] Bluetooth: hci4: command tx timeout [ 299.070791][T12362] team0: Port device team_slave_0 added [ 299.082839][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.113375][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.140425][T12479] netlink: 'syz.1.1839': attribute type 3 has an invalid length. [ 299.162543][ T30] audit: type=1800 audit(1746511346.214:3): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1839" name=45CB390407251FA4188CC219BFFC053ED5A81F25EF0D0F976994AFB2C8BF6AE44A44659AF5EBC90174AD57D7D2BBF87F229A90AB05087FBD84ADD787AACFFDD153137BF89BCF9532CE96AEF1DC32D611F082D5F13DC317FCCBB8E4DA254609889183436067EABA5B151D313B57CF20567D4E8DC59DEC9EE307C0E373938D3701605066668BF7352A437106179353B938DE1CF93EF57CB6325F48E25527 dev="tmpfs" ino=2751 res=0 errno=0 [ 299.210382][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.268346][ T8789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.310965][T12362] team0: Port device team_slave_1 added [ 299.343711][T12486] netlink: 'syz.1.1841': attribute type 153 has an invalid length. [ 299.427867][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 299.442071][T12374] hsr_slave_0: entered promiscuous mode [ 299.458092][T12374] hsr_slave_1: entered promiscuous mode [ 299.464316][T12374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.478128][T12493] IPVS: length: 105 != 8 [ 299.482867][T12374] Cannot create hsr debugfs directory [ 299.483867][T12493] IPVS: length: 105 != 8 [ 299.568630][T12362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.585619][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.645288][T12362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.658228][T12362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.665778][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.697925][T12362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.725970][ T8789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.991559][T12362] hsr_slave_0: entered promiscuous mode [ 300.000950][T12362] hsr_slave_1: entered promiscuous mode [ 300.009906][T12362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.018156][T12362] Cannot create hsr debugfs directory [ 300.398080][T12328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.422096][T12328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.568724][ T8789] bridge_slave_1: left allmulticast mode [ 300.585503][ T5845] Bluetooth: hci3: command tx timeout [ 300.587253][ T55] Bluetooth: hci2: command tx timeout [ 300.596619][ T8789] bridge_slave_1: left promiscuous mode [ 300.596900][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.708736][ T8789] bridge_slave_0: left allmulticast mode [ 300.714445][ T8789] bridge_slave_0: left promiscuous mode [ 300.722064][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.759988][ T8789] bridge_slave_1: left allmulticast mode [ 300.766427][ T8789] bridge_slave_1: left promiscuous mode [ 300.773123][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.784947][ T8789] bridge_slave_0: left allmulticast mode [ 300.791376][ T8789] bridge_slave_0: left promiscuous mode [ 300.798205][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.065538][ T55] Bluetooth: hci4: command tx timeout [ 301.438853][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.450644][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.461459][ T8789] bond0 (unregistering): Released all slaves [ 301.580866][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.591806][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.602236][ T8789] bond0 (unregistering): Released all slaves [ 301.615975][T12328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.627650][T12328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.698520][T12527] __nla_validate_parse: 2 callbacks suppressed [ 301.698541][T12527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1851'. [ 301.716757][T12531] validate_nla: 2 callbacks suppressed [ 301.716775][T12531] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 301.886346][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.904788][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.922735][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.933279][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.955594][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.973662][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 301.983969][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 302.011990][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 302.022155][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 302.374757][T12553] ksmbd: Unknown IPC event: 4, ignore. [ 302.468673][T12374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.501384][T12374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.591852][T12374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.619556][T12374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.673901][ T55] Bluetooth: hci3: command tx timeout [ 302.731496][T12328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.829011][T12328] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.891056][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.898404][ T8784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.943692][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.950965][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.119161][ T8789] hsr_slave_0: left promiscuous mode [ 303.139681][ T8789] hsr_slave_1: left promiscuous mode [ 303.146073][ T55] Bluetooth: hci4: command tx timeout [ 303.152017][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.160581][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.169152][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.177045][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.190426][ T8789] hsr_slave_0: left promiscuous mode [ 303.197251][ T8789] hsr_slave_1: left promiscuous mode [ 303.203237][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.211098][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.219715][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.229348][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.269293][ T8789] veth1_macvtap: left promiscuous mode [ 303.274877][ T8789] veth0_macvtap: left promiscuous mode [ 303.281064][ T8789] veth1_vlan: left promiscuous mode [ 303.286572][ T8789] veth0_vlan: left promiscuous mode [ 303.293181][ T8789] veth1_macvtap: left promiscuous mode [ 303.298979][ T8789] veth0_macvtap: left promiscuous mode [ 303.304696][ T8789] veth1_vlan: left promiscuous mode [ 303.310941][ T8789] veth0_vlan: left promiscuous mode [ 303.894063][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 303.939281][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 304.721635][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 304.773922][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 305.454080][T12362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.510560][T12362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.538221][T12572] nbd: nbd1 already in use [ 305.550198][T12362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.556663][T12572] block nbd1: NBD_DISCONNECT [ 305.562133][T12572] block nbd1: Send disconnect failed -32 [ 305.569385][T12572] block nbd1: shutting down sockets [ 305.624558][T12362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.699680][T12374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.787324][T12374] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.830902][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.838244][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.860360][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.890873][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.898062][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.128551][T12588] xt_TCPMSS: Only works on TCP SYN packets [ 306.187799][T12588] netdevsim netdevsim2: Direct firmware load for . [ 306.187799][T12588] failed with error -2 [ 306.216641][T12588] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 306.216641][T12588] [ 306.249558][T12328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.276519][T12362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.339081][T12362] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.397837][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.405067][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.454180][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.461700][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.534955][T12328] veth0_vlan: entered promiscuous mode [ 306.571497][T12374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.590014][T12328] veth1_vlan: entered promiscuous mode [ 306.607029][T12362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.721283][T12328] veth0_macvtap: entered promiscuous mode [ 306.761259][T12328] veth1_macvtap: entered promiscuous mode [ 306.837188][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.851921][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.864519][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.882209][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.894589][T12328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.903793][T12374] veth0_vlan: entered promiscuous mode [ 306.923156][T12607] bond0: (slave vcan1): refused to change device type [ 306.949634][T12328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.960536][T12328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.974687][T12328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.016503][T12605] vti1: entered promiscuous mode [ 307.027367][T12609] sctp: [Deprecated]: syz.2.1871 (pid 12609) Use of int in max_burst socket option deprecated. [ 307.027367][T12609] Use struct sctp_assoc_value instead [ 307.041906][T12374] veth1_vlan: entered promiscuous mode [ 307.083243][T12328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.095627][T12328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.109447][T12328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.118592][T12328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.170382][T12362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.173972][T12613] __nla_validate_parse: 27 callbacks suppressed [ 307.173997][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 307.230074][T12613] netlink: 'syz.1.1872': attribute type 10 has an invalid length. [ 307.271711][T12374] veth0_macvtap: entered promiscuous mode [ 307.304506][T12374] veth1_macvtap: entered promiscuous mode [ 307.402966][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.420247][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.431136][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.448064][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.463220][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.484546][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.503411][T12374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.536323][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.572755][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.595228][T12374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.611713][T12374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.623825][T12374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.652123][ T8782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.657553][T12374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.678370][ T8782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.686276][T12374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.686315][T12374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.686345][T12374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.804156][T12626] lo speed is unknown, defaulting to 1000 [ 307.960353][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.992292][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.140823][T12362] veth0_vlan: entered promiscuous mode [ 308.156632][ T8785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.182894][ T8785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.212213][T12362] veth1_vlan: entered promiscuous mode [ 308.367183][ T8790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.386994][ T8790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.637591][ T8789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.711592][T12643] lo: left promiscuous mode [ 308.721031][T12643] erspan0: left allmulticast mode [ 308.742550][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.749827][T12643] bridge0: port 1(bridge_slave_0) entered listening state [ 308.771688][T12643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.877164][ T8789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.893933][T12362] veth0_macvtap: entered promiscuous mode [ 308.930585][T12362] veth1_macvtap: entered promiscuous mode [ 308.954037][ T8789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.092920][ T8789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.193473][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.221017][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.241742][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.265299][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.284475][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.298682][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.330304][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.352906][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.374666][T12362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.529614][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.549707][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.564213][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.578272][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.591759][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.610245][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.623509][T12362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.714003][T12362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.724130][T12362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.737950][T12362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.745601][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.746954][T12362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.759387][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.777264][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.791017][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.799370][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.848758][ T8789] bridge_slave_1: left allmulticast mode [ 309.854571][ T8789] bridge_slave_1: left promiscuous mode [ 309.893036][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.914358][ T8789] bridge_slave_0: left allmulticast mode [ 309.931619][ T8789] bridge_slave_0: left promiscuous mode [ 309.944438][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.159713][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.169999][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.189665][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.216567][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.228288][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.479807][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.492518][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.503030][ T8789] bond0 (unregistering): Released all slaves [ 310.737585][T12649] lo speed is unknown, defaulting to 1000 [ 310.838556][ T8782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.873670][ T8782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.062262][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.095812][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.352549][T12658] lo speed is unknown, defaulting to 1000 [ 311.682427][T12687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1891'. [ 311.824185][T12687] batman_adv: batadv0: Interface deactivated: dummy0 [ 311.866091][ T5845] Bluetooth: hci2: command tx timeout [ 312.091249][T12649] chnl_net:caif_netlink_parms(): no params data found [ 312.113636][ T8789] hsr_slave_0: left promiscuous mode [ 312.120680][ T8789] hsr_slave_1: left promiscuous mode [ 312.126846][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.134264][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.142341][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.150505][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.173304][ T8789] veth1_macvtap: left promiscuous mode [ 312.179429][ T8789] veth0_macvtap: left promiscuous mode [ 312.186155][ T8789] veth1_vlan: left promiscuous mode [ 312.192846][ T8789] veth0_vlan: left promiscuous mode [ 312.265668][ T5845] Bluetooth: hci4: command tx timeout [ 312.684610][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 312.726942][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 313.325532][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.395672][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.459743][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.554061][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.564153][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.602167][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.630050][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.644571][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.654656][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.663953][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.670273][T12649] bridge_slave_0: entered allmulticast mode [ 313.687766][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.700187][T12649] bridge_slave_0: entered promiscuous mode [ 313.707290][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1893'. [ 313.719846][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.744217][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.762213][T12649] bridge_slave_1: entered allmulticast mode [ 313.794718][T12649] bridge_slave_1: entered promiscuous mode [ 313.865826][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.878722][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.887961][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.907664][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.919795][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.946708][ T55] Bluetooth: hci2: command tx timeout [ 314.091778][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.109223][T12658] chnl_net:caif_netlink_parms(): no params data found [ 314.127561][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.320284][T12735] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 314.347881][ T55] Bluetooth: hci4: command tx timeout [ 314.472361][T12710] lo speed is unknown, defaulting to 1000 [ 314.485447][T12649] team0: Port device team_slave_0 added [ 314.496451][T12649] team0: Port device team_slave_1 added [ 314.614633][T12738] syzkaller1: entered promiscuous mode [ 314.622872][T12738] syzkaller1: entered allmulticast mode [ 314.649744][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.660302][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.704039][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.724305][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.731643][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.768802][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.937719][ T8789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.022979][ T8789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.043336][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.059311][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.069438][T12658] bridge_slave_0: entered allmulticast mode [ 315.081732][T12658] bridge_slave_0: entered promiscuous mode [ 315.166418][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.173749][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.181584][T12658] bridge_slave_1: entered allmulticast mode [ 315.189496][T12658] bridge_slave_1: entered promiscuous mode [ 315.212566][ T8789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.241151][T12649] hsr_slave_0: entered promiscuous mode [ 315.249159][T12649] hsr_slave_1: entered promiscuous mode [ 315.255809][T12649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.263496][T12649] Cannot create hsr debugfs directory [ 315.320447][ T8789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.369350][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.433264][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.671483][T12760] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 315.694151][T12658] team0: Port device team_slave_0 added [ 315.707157][T12658] team0: Port device team_slave_1 added [ 315.921128][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.943617][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.973215][ T55] Bluetooth: hci3: command tx timeout [ 315.979885][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.026473][ T55] Bluetooth: hci2: command tx timeout [ 316.049609][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.065524][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.134225][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.269069][T12710] chnl_net:caif_netlink_parms(): no params data found [ 316.335688][T12658] hsr_slave_0: entered promiscuous mode [ 316.344078][T12658] hsr_slave_1: entered promiscuous mode [ 316.360214][T12658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.369639][T12658] Cannot create hsr debugfs directory [ 316.429862][ T55] Bluetooth: hci4: command tx timeout [ 316.444947][ T8789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.495516][T12788] C: renamed from lo (while UP) [ 316.654656][ T8789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.756127][ T8789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.879228][ T8789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.899598][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.908344][T12710] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.916444][T12710] bridge_slave_0: entered allmulticast mode [ 316.923879][T12710] bridge_slave_0: entered promiscuous mode [ 317.000028][T12710] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.007986][T12710] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.016990][T12710] bridge_slave_1: entered allmulticast mode [ 317.025377][T12710] bridge_slave_1: entered promiscuous mode [ 317.105957][T12710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.124911][T12710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.149531][T12801] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 317.211714][T12710] team0: Port device team_slave_0 added [ 317.251037][T12710] team0: Port device team_slave_1 added [ 317.269899][T12805] xt_hashlimit: overflow, rate too high: 0 [ 317.312282][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.399935][T12710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.407191][T12710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.438931][T12710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.508001][T12710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.522310][T12710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.561148][T12710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.642905][ T8789] bridge_slave_1: left allmulticast mode [ 317.655347][ T8789] bridge_slave_1: left promiscuous mode [ 317.660988][T12813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.661207][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.698380][ T8789] bridge_slave_0: left allmulticast mode [ 317.714302][ T8789] bridge_slave_0: left promiscuous mode [ 317.720414][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.737495][ T8789] bridge_slave_1: left allmulticast mode [ 317.744478][ T8789] bridge_slave_1: left promiscuous mode [ 317.750584][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.762814][ T8789] bridge_slave_0: left allmulticast mode [ 317.769067][ T8789] bridge_slave_0: left promiscuous mode [ 317.777423][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.028109][ T55] Bluetooth: hci3: command tx timeout [ 318.111002][ T55] Bluetooth: hci2: command tx timeout [ 318.474827][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.491834][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.503107][ T8789] bond0 (unregistering): Released all slaves [ 318.509597][ T55] Bluetooth: hci4: command tx timeout [ 318.639760][ T8789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.653240][ T8789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.664181][ T8789] bond0 (unregistering): Released all slaves [ 318.839794][T12710] hsr_slave_0: entered promiscuous mode [ 318.856467][T12710] hsr_slave_1: entered promiscuous mode [ 318.863139][T12710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.883573][T12710] Cannot create hsr debugfs directory [ 318.908017][T12822] batman_adv: batadv0: Interface activated: dummy0 [ 318.915390][T12822] batadv0: mtu less than device minimum [ 318.922773][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.934586][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.946448][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.958236][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.970093][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.981908][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 318.993680][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 319.004900][T12822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 319.615937][T12846] __nla_validate_parse: 28 callbacks suppressed [ 319.615959][T12846] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1931'. [ 319.778316][T12850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1933'. [ 319.798294][T12850] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 319.812966][T12850] netlink: 'syz.1.1933': attribute type 3 has an invalid length. [ 319.822662][T12850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1933'. [ 319.839778][T12850] NCSI netlink: No device for ifindex 0 [ 319.871006][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 319.907382][T12658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.063140][T12658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.105542][ T55] Bluetooth: hci3: command tx timeout [ 320.172094][T12658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.194464][T12658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.392314][ T8789] hsr_slave_0: left promiscuous mode [ 320.400512][ T8789] hsr_slave_1: left promiscuous mode [ 320.406898][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.414542][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.427752][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.436442][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.452537][ T8789] hsr_slave_0: left promiscuous mode [ 320.459708][ T8789] hsr_slave_1: left promiscuous mode [ 320.466129][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.473598][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.490247][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.498518][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.541724][ T8789] veth1_macvtap: left promiscuous mode [ 320.548286][ T8789] veth0_macvtap: left promiscuous mode [ 320.554127][ T8789] veth1_vlan: left promiscuous mode [ 320.559673][ T8789] veth0_vlan: left promiscuous mode [ 320.566452][ T8789] veth1_macvtap: left promiscuous mode [ 320.572169][ T8789] veth0_macvtap: left promiscuous mode [ 320.578064][ T8789] veth1_vlan: left promiscuous mode [ 320.583473][ T8789] veth0_vlan: left promiscuous mode [ 321.239075][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 321.286962][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 322.108980][ T8789] team0 (unregistering): Port device team_slave_1 removed [ 322.162325][ T8789] team0 (unregistering): Port device team_slave_0 removed [ 322.185661][ T55] Bluetooth: hci3: command tx timeout [ 322.631451][T12649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.642571][T12649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.708472][T12649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.739458][T12649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.892330][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 322.929722][T12872] netlink: 'syz.2.1940': attribute type 18 has an invalid length. [ 323.061290][T12875] netlink: 'syz.1.1941': attribute type 5 has an invalid length. [ 323.072967][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.210314][T12658] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.218097][T12877] net_ratelimit: 12 callbacks suppressed [ 323.218114][T12877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.239454][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.246806][ T8785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.307841][T12649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.346859][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.354174][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.444527][T12882] tipc: Enabling of bearer rejected, already enabled [ 323.460790][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 323.602336][T12649] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.638586][T12710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.681757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.688975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.710685][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 323.721973][T12710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.740863][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.748076][ T8785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.823361][T12710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.836155][T12710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.068084][T12900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1948'. [ 324.118704][T12900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1948'. [ 324.300887][T12710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.427906][T12710] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.459405][T12658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.490081][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.497306][ T8789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.530630][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.537829][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.616949][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.707826][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1953'. [ 324.724460][T12918] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1952'. [ 324.744592][T12658] veth0_vlan: entered promiscuous mode [ 324.811859][T12658] veth1_vlan: entered promiscuous mode [ 324.861663][T12649] veth0_vlan: entered promiscuous mode [ 324.917063][T12649] veth1_vlan: entered promiscuous mode [ 325.053070][T12658] veth0_macvtap: entered promiscuous mode [ 325.115004][T12658] veth1_macvtap: entered promiscuous mode [ 325.170705][T12649] veth0_macvtap: entered promiscuous mode [ 325.185036][T12649] veth1_macvtap: entered promiscuous mode [ 325.212339][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.231655][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.244328][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.261991][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.286890][T12658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.332534][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.367181][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.387640][T12658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.411385][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.430001][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.443955][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.468626][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.484629][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.495620][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.508113][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.576180][T12658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.584953][T12658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.615229][T12658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.624511][T12658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.654601][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.666204][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.678625][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.689333][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.701707][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.715055][T12710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.743062][T12649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.766072][T12649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.785767][T12649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.794617][T12649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.878264][T12946] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 326.107813][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.146538][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.211173][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.244712][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.271920][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 326.309809][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.322387][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.369631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.403084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.459958][T12710] veth0_vlan: entered promiscuous mode [ 326.521187][T12710] veth1_vlan: entered promiscuous mode [ 326.545890][T12963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1963'. [ 326.661326][T12966] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 326.672856][T12965] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 326.780106][T12965] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1964'. [ 326.808680][T12970] netlink: 'syz.1.1966': attribute type 21 has an invalid length. [ 326.829773][T12710] veth0_macvtap: entered promiscuous mode [ 326.844305][T12970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1966'. [ 326.879313][T12710] veth1_macvtap: entered promiscuous mode [ 326.977729][ T8785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.112524][T12976] syzkaller0: entered promiscuous mode [ 327.122264][T12976] syzkaller0: entered allmulticast mode [ 327.150297][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.181976][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.192141][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.202933][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.213586][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.230308][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.243995][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.255016][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.267174][T12710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.861434][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.881623][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.898264][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.912797][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.929083][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.781776][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.805504][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.821132][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.852138][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.868363][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.622745][ T8785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.655936][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.666996][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.677272][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.688249][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.698240][T12710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.716587][T12710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.736465][T12710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.806835][ T8785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.832207][T12989] lo speed is unknown, defaulting to 1000 [ 329.839379][T12710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.865096][T12710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.883894][T12710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.899447][T12710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.974206][ T8785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.025785][ T5845] Bluetooth: hci2: command tx timeout [ 330.246273][T12979] lo speed is unknown, defaulting to 1000 [ 330.324958][ T8783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.347691][T13014] netlink: 'syz.1.1975': attribute type 10 has an invalid length. [ 330.362756][ T8783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.456038][ T8785] bridge_slave_1: left allmulticast mode [ 330.461781][ T8785] bridge_slave_1: left promiscuous mode [ 330.470678][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.497241][ T8785] bridge_slave_0: left allmulticast mode [ 330.503243][ T8785] bridge_slave_0: left promiscuous mode [ 330.509969][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.870996][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'. [ 330.909075][ T5845] Bluetooth: hci4: command tx timeout [ 331.004063][ T8785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.018581][ T8785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.029366][ T8785] bond0 (unregistering): Released all slaves [ 331.123782][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.165572][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.233319][T13026] xt_bpf: check failed: parse error [ 331.409913][T13034] xt_nat: multiple ranges no longer supported [ 331.510330][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 331.556872][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 331.589762][T13039] batman_adv: batadv0: Interface deactivated: dummy0 [ 331.674337][T13039] batman_adv: batadv0: Removing interface: dummy0 [ 331.825589][T12989] chnl_net:caif_netlink_parms(): no params data found [ 332.105333][ T5845] Bluetooth: hci2: command tx timeout [ 332.125094][ T8785] hsr_slave_0: left promiscuous mode [ 332.131678][ T8785] hsr_slave_1: left promiscuous mode [ 332.139950][ T8785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.148176][ T8785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.156535][ T8785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.164082][ T8785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.188584][ T8785] veth1_macvtap: left promiscuous mode [ 332.194828][ T8785] veth0_macvtap: left promiscuous mode [ 332.200874][ T8785] veth1_vlan: left promiscuous mode [ 332.206369][ T8785] veth0_vlan: left promiscuous mode [ 332.686818][ T8785] team0 (unregistering): Port device team_slave_1 removed [ 332.762956][ T8785] team0 (unregistering): Port device team_slave_0 removed [ 332.991394][ T5845] Bluetooth: hci4: command tx timeout [ 333.326736][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1983'. [ 333.520171][T12989] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.538304][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.555897][T12989] bridge_slave_0: entered allmulticast mode [ 333.594961][T12989] bridge_slave_0: entered promiscuous mode [ 333.780228][T12989] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.794126][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.824619][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.835484][T12989] bridge_slave_1: entered allmulticast mode [ 333.841660][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.851756][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.855898][T12989] bridge_slave_1: entered promiscuous mode [ 333.884485][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.900049][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.065961][T13068] dvmrp0: left allmulticast mode [ 334.122874][T12989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.144680][T12989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.160319][T12979] chnl_net:caif_netlink_parms(): no params data found [ 334.185404][ T5845] Bluetooth: hci2: command tx timeout [ 334.283247][T13078] netlink: 'syz.1.1987': attribute type 2 has an invalid length. [ 334.288816][T12989] team0: Port device team_slave_0 added [ 334.322317][T12989] team0: Port device team_slave_1 added [ 334.406588][T12989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.413949][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.449869][T12989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.520932][T12989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.538422][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.578375][T12989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.606077][T13065] lo speed is unknown, defaulting to 1000 [ 334.731860][T13083] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1988'. [ 334.754956][ T8785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.931849][ T8785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.029662][T12989] hsr_slave_0: entered promiscuous mode [ 335.036934][T12989] hsr_slave_1: entered promiscuous mode [ 335.043350][T12989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.052763][T12989] Cannot create hsr debugfs directory [ 335.073430][ T5845] Bluetooth: hci4: command tx timeout [ 335.105672][T12979] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.113040][T12979] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.128841][T12979] bridge_slave_0: entered allmulticast mode [ 335.137515][T12979] bridge_slave_0: entered promiscuous mode [ 335.184917][ T8785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.208134][T12979] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.221962][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.231130][T12979] bridge_slave_1: entered allmulticast mode [ 335.239856][T12979] bridge_slave_1: entered promiscuous mode [ 335.329963][ T8785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.469464][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.497671][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.817703][T12979] team0: Port device team_slave_0 added [ 335.922116][T12979] team0: Port device team_slave_1 added [ 335.945516][ T5845] Bluetooth: hci3: command tx timeout [ 335.992910][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.002791][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.012357][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.033785][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.045038][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.061471][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.070867][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.088341][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.100650][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.113839][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'. [ 336.211959][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.227319][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.255255][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.263363][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.270448][ T5842] Bluetooth: hci2: command tx timeout [ 336.278229][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.305083][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.314433][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.341098][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.404146][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.411943][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.460990][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.538716][ T8785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.560938][T13065] chnl_net:caif_netlink_parms(): no params data found [ 336.614771][T13111] lo speed is unknown, defaulting to 1000 [ 336.657455][ T8785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.781142][T12979] hsr_slave_0: entered promiscuous mode [ 336.792138][T12979] hsr_slave_1: entered promiscuous mode [ 336.804293][T12979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.821493][T12979] Cannot create hsr debugfs directory [ 336.862282][ T8785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.978509][ T8785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.000921][T13065] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.009343][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.017188][T13065] bridge_slave_0: entered allmulticast mode [ 337.025321][T13065] bridge_slave_0: entered promiscuous mode [ 337.054788][T13065] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.062238][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.070284][T13065] bridge_slave_1: entered allmulticast mode [ 337.078670][T13065] bridge_slave_1: entered promiscuous mode [ 337.158914][ T55] Bluetooth: hci4: command tx timeout [ 337.195625][T13123] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 337.248653][T13065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.262356][T13065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.422843][T13065] team0: Port device team_slave_0 added [ 337.449091][T13065] team0: Port device team_slave_1 added [ 337.519154][T13065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.527040][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.553469][T13065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.568906][T13065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.582565][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.617946][T13065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.771956][T13065] hsr_slave_0: entered promiscuous mode [ 337.779132][T13065] hsr_slave_1: entered promiscuous mode [ 337.785796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.791223][T13065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.794611][ C1] ================================================================== [ 337.801900][T13065] Cannot create hsr debugfs directory [ 337.809786][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 337.809827][ C1] Read of size 2 at addr ffff88801b76182a by task swapper/1/0 [ 337.809843][ C1] [ 337.809867][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 337.809890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 337.809907][ C1] Call Trace: [ 337.809920][ C1] [ 337.809928][ C1] dump_stack_lvl+0x189/0x250 [ 337.809962][ C1] ? __virt_addr_valid+0x18c/0x540 [ 337.809991][ C1] ? rcu_is_watching+0x15/0xb0 [ 337.810025][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.810056][ C1] ? rcu_is_watching+0x15/0xb0 [ 337.810088][ C1] ? lock_release+0x4b/0x3e0 [ 337.810121][ C1] ? __virt_addr_valid+0x18c/0x540 [ 337.810148][ C1] ? __virt_addr_valid+0x469/0x540 [ 337.810178][ C1] print_report+0xb4/0x290 [ 337.810204][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 337.810241][ C1] kasan_report+0x118/0x150 [ 337.810271][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 337.810307][ C1] rose_timer_expiry+0x471/0x4b0 [ 337.810339][ C1] call_timer_fn+0x17b/0x5f0 [ 337.810368][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.810397][ C1] ? call_timer_fn+0xbe/0x5f0 [ 337.810425][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 337.810459][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.810480][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.810502][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.810533][ C1] __run_timer_base+0x61a/0x860 [ 337.810557][ C1] ? ktime_get+0x3e/0x1f0 [ 337.810586][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 337.810610][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 337.810644][ C1] run_timer_softirq+0xb7/0x180 [ 337.810671][ C1] handle_softirqs+0x283/0x870 [ 337.810706][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 337.810729][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 337.810764][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 337.810793][ C1] __irq_exit_rcu+0xca/0x1f0 [ 337.810811][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 337.810837][ C1] irq_exit_rcu+0x9/0x30 [ 337.810854][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 337.810876][ C1] [ 337.810884][ C1] [ 337.810892][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.810915][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 337.810939][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 2b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 337.810957][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 337.810978][ C1] RAX: 6dd2403ba997f900 RBX: ffffffff81973f28 RCX: 6dd2403ba997f900 [ 337.810995][ C1] RDX: 0000000000000001 RSI: ffffffff8d749ecb RDI: ffffffff8bc1cde0 [ 337.811010][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 337.811027][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ed370 [ 337.811043][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 337.811061][ C1] ? do_idle+0x1e8/0x510 [ 337.811087][ C1] default_idle+0x13/0x20 [ 337.811111][ C1] default_idle_call+0x74/0xb0 [ 337.811139][ C1] do_idle+0x1e8/0x510 [ 337.811161][ C1] ? __pfx_do_idle+0x10/0x10 [ 337.811192][ C1] cpu_startup_entry+0x44/0x60 [ 337.811210][ C1] start_secondary+0x101/0x110 [ 337.811236][ C1] common_startup_64+0x13e/0x147 [ 337.811279][ C1] [ 337.811286][ C1] [ 338.152265][ C1] Allocated by task 12374: [ 338.156694][ C1] kasan_save_track+0x3e/0x80 [ 338.161381][ C1] __kasan_kmalloc+0x93/0xb0 [ 338.165977][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 338.170831][ C1] fib6_info_alloc+0x30/0xf0 [ 338.175431][ C1] ip6_route_info_create+0x4b3/0x1360 [ 338.180827][ C1] ip6_route_add+0x28/0x160 [ 338.185592][ C1] add_v4_addrs+0x8fa/0xc30 [ 338.190151][ C1] addrconf_init_auto_addrs+0x39a/0xb80 [ 338.195701][ C1] addrconf_notify+0xacc/0x1010 [ 338.200572][ C1] notifier_call_chain+0x1b3/0x3e0 [ 338.205845][ C1] __dev_notify_flags+0x18d/0x2e0 [ 338.210889][ C1] netif_change_flags+0xe8/0x1a0 [ 338.215933][ C1] do_setlink+0xcb9/0x40d0 [ 338.220362][ C1] rtnl_newlink+0x160b/0x1c70 [ 338.225059][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 338.230001][ C1] netlink_rcv_skb+0x219/0x490 [ 338.234771][ C1] netlink_unicast+0x758/0x8d0 [ 338.239634][ C1] netlink_sendmsg+0x805/0xb30 [ 338.244405][ C1] __sock_sendmsg+0x219/0x270 [ 338.249105][ C1] __sys_sendto+0x3bd/0x520 [ 338.253789][ C1] __x64_sys_sendto+0xde/0x100 [ 338.258641][ C1] do_syscall_64+0xf6/0x210 [ 338.263163][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.269087][ C1] [ 338.271410][ C1] Freed by task 23: [ 338.275214][ C1] kasan_save_track+0x3e/0x80 [ 338.279981][ C1] kasan_save_free_info+0x46/0x50 [ 338.285012][ C1] __kasan_slab_free+0x62/0x70 [ 338.289867][ C1] kfree+0x193/0x440 [ 338.293767][ C1] rcu_core+0xca5/0x1710 [ 338.298017][ C1] handle_softirqs+0x283/0x870 [ 338.302795][ C1] run_ksoftirqd+0x9b/0x100 [ 338.307301][ C1] smpboot_thread_fn+0x53f/0xa60 [ 338.312265][ C1] kthread+0x70e/0x8a0 [ 338.316337][ C1] ret_from_fork+0x4b/0x80 [ 338.320778][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.325637][ C1] [ 338.327964][ C1] Last potentially related work creation: [ 338.333695][ C1] kasan_save_stack+0x3e/0x60 [ 338.338472][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 338.343683][ C1] call_rcu+0x142/0x990 [ 338.347925][ C1] fib6_del+0x111f/0x1550 [ 338.352252][ C1] fib6_clean_node+0x29f/0x590 [ 338.357022][ C1] fib6_walk_continue+0x678/0x910 [ 338.362051][ C1] fib6_walk+0x149/0x290 [ 338.366386][ C1] __fib6_clean_all+0x234/0x380 [ 338.371266][ C1] rt6_disable_ip+0x120/0x720 [ 338.375963][ C1] addrconf_ifdown+0x15d/0x1880 [ 338.380854][ C1] addrconf_notify+0x1bc/0x1010 [ 338.385713][ C1] notifier_call_chain+0x1b3/0x3e0 [ 338.391070][ C1] dev_close_many+0x29c/0x410 [ 338.395770][ C1] unregister_netdevice_many_notify+0x834/0x2330 [ 338.402118][ C1] cleanup_net+0x6a3/0xbd0 [ 338.406543][ C1] process_scheduled_works+0xadb/0x17a0 [ 338.412201][ C1] worker_thread+0x8a0/0xda0 [ 338.416800][ C1] kthread+0x70e/0x8a0 [ 338.420872][ C1] ret_from_fork+0x4b/0x80 [ 338.425300][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.430077][ C1] [ 338.432412][ C1] The buggy address belongs to the object at ffff88801b761800 [ 338.432412][ C1] which belongs to the cache kmalloc-512 of size 512 [ 338.446563][ C1] The buggy address is located 42 bytes inside of [ 338.446563][ C1] freed 512-byte region [ffff88801b761800, ffff88801b761a00) [ 338.460276][ C1] [ 338.462605][ C1] The buggy address belongs to the physical page: [ 338.469033][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801b763000 pfn:0x1b760 [ 338.479815][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 338.488549][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 338.496964][ C1] page_type: f5(slab) [ 338.500972][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 338.509567][ C1] raw: ffff88801b763000 000000000010000a 00000000f5000000 0000000000000000 [ 338.518334][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 338.527110][ C1] head: ffff88801b763000 000000000010000a 00000000f5000000 0000000000000000 [ 338.535791][ C1] head: 00fff00000000002 ffffea00006dd801 00000000ffffffff 00000000ffffffff [ 338.544473][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 338.553148][ C1] page dumped because: kasan: bad access detected [ 338.559595][ C1] page_owner tracks the page as allocated [ 338.565332][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 92429649546, free_ts 92382000682 [ 338.586977][ C1] post_alloc_hook+0x1d8/0x230 [ 338.591765][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 338.597325][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 338.603140][ C1] alloc_pages_mpol+0x232/0x4a0 [ 338.607998][ C1] allocate_slab+0x8a/0x3b0 [ 338.613109][ C1] ___slab_alloc+0xbfc/0x1480 [ 338.617972][ C1] __kmalloc_noprof+0x305/0x4f0 [ 338.622830][ C1] fib6_info_alloc+0x30/0xf0 [ 338.627457][ C1] ip6_route_info_create+0x4b3/0x1360 [ 338.632919][ C1] ip6_route_add+0x28/0x160 [ 338.637544][ C1] addrconf_add_dev+0x24f/0x340 [ 338.642396][ C1] addrconf_init_auto_addrs+0x674/0xb80 [ 338.647952][ C1] addrconf_notify+0xacc/0x1010 [ 338.652842][ C1] notifier_call_chain+0x1b3/0x3e0 [ 338.657953][ C1] __dev_notify_flags+0x18d/0x2e0 [ 338.662990][ C1] netif_change_flags+0xe8/0x1a0 [ 338.667934][ C1] page last free pid 5833 tgid 5833 stack trace: [ 338.674258][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 338.679376][ C1] __put_partials+0x161/0x1c0 [ 338.684071][ C1] put_cpu_partial+0x17c/0x250 [ 338.688847][ C1] __slab_free+0x2f7/0x400 [ 338.693275][ C1] qlist_free_all+0x9a/0x140 [ 338.697865][ C1] kasan_quarantine_reduce+0x148/0x160 [ 338.703322][ C1] __kasan_slab_alloc+0x22/0x80 [ 338.708177][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 338.714168][ C1] __alloc_skb+0x112/0x2d0 [ 338.718593][ C1] netlink_sendmsg+0x5c6/0xb30 [ 338.723356][ C1] __sock_sendmsg+0x219/0x270 [ 338.728044][ C1] __sys_sendto+0x3bd/0x520 [ 338.732548][ C1] __x64_sys_sendto+0xde/0x100 [ 338.737319][ C1] do_syscall_64+0xf6/0x210 [ 338.741830][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.747732][ C1] [ 338.750147][ C1] Memory state around the buggy address: [ 338.755791][ C1] ffff88801b761700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.763851][ C1] ffff88801b761780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.771915][ C1] >ffff88801b761800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.780244][ C1] ^ [ 338.785625][ C1] ffff88801b761880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.793693][ C1] ffff88801b761900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.801750][ C1] ================================================================== [ 338.809900][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.817380][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 338.829080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 338.839197][ C1] Call Trace: [ 338.842503][ C1] [ 338.845378][ C1] dump_stack_lvl+0x99/0x250 [ 338.850017][ C1] ? __asan_memcpy+0x40/0x70 [ 338.854640][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.859880][ C1] ? __pfx__printk+0x10/0x10 [ 338.864512][ C1] panic+0x2db/0x790 [ 338.868429][ C1] ? __pfx_panic+0x10/0x10 [ 338.872862][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 338.878761][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.884687][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.891018][ C1] ? print_memory_metadata+0x314/0x400 [ 338.896489][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.902254][ C1] check_panic_on_warn+0x89/0xb0 [ 338.907208][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.912340][ C1] end_report+0x78/0x160 [ 338.916676][ C1] kasan_report+0x129/0x150 [ 338.921194][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 338.926317][ C1] rose_timer_expiry+0x471/0x4b0 [ 338.931270][ C1] call_timer_fn+0x17b/0x5f0 [ 338.935870][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.941339][ C1] ? call_timer_fn+0xbe/0x5f0 [ 338.946053][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 338.951292][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.956548][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.961955][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.967547][ C1] __run_timer_base+0x61a/0x860 [ 338.972417][ C1] ? ktime_get+0x3e/0x1f0 [ 338.976784][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 338.982169][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 338.988424][ C1] run_timer_softirq+0xb7/0x180 [ 338.993289][ C1] handle_softirqs+0x283/0x870 [ 338.998086][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 339.002858][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 339.008190][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 339.013415][ C1] __irq_exit_rcu+0xca/0x1f0 [ 339.018099][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 339.023485][ C1] irq_exit_rcu+0x9/0x30 [ 339.027742][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 339.033445][ C1] [ 339.036420][ C1] [ 339.039590][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.045861][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 339.051721][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 2b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 339.071443][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 339.077627][ C1] RAX: 6dd2403ba997f900 RBX: ffffffff81973f28 RCX: 6dd2403ba997f900 [ 339.085609][ C1] RDX: 0000000000000001 RSI: ffffffff8d749ecb RDI: ffffffff8bc1cde0 [ 339.093586][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 339.101580][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ed370 [ 339.109588][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 339.117580][ C1] ? do_idle+0x1e8/0x510 [ 339.121939][ C1] default_idle+0x13/0x20 [ 339.126279][ C1] default_idle_call+0x74/0xb0 [ 339.131140][ C1] do_idle+0x1e8/0x510 [ 339.135304][ C1] ? __pfx_do_idle+0x10/0x10 [ 339.139994][ C1] cpu_startup_entry+0x44/0x60 [ 339.144758][ C1] start_secondary+0x101/0x110 [ 339.149526][ C1] common_startup_64+0x13e/0x147 [ 339.154486][ C1] [ 339.157769][ C1] Kernel Offset: disabled [ 339.162556][ C1] Rebooting in 86400 seconds..