last executing test programs: 56.203891052s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 55.499414965s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 44.961681867s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 43.083780907s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 33.149766726s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 30.821792272s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 18.855768237s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 16.310784337s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 13.804387795s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 10.656701545s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) 5.515074935s ago: executing program 4 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x26804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="d1a486ba", 0x4, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000080)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="579e3bb1e46557c9686c9ed9e369f9801dfdb40600d895c87e7307f33235589e4421ba382ba65de23c993fcd9049ceeecfab0aca917164a80e06b368c757c157217e431fff3de8e1af70dbab9286d3904a4a481bf2449524fcaa110881bd8f7ae5dd9133d7761676279a2ed277abbe70d9dc6b2ea2982f476d09f513a911439f4279eb90951e94a9f88215ac66dd45fc4256ee71dda291dc05a162b7de4b4281eeb6efc04349bb122097912fdbf09d23699a00122cf575521a0f", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xf3a}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r4, 0x1) shutdown(r2, 0x1) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r10, 0x8b32, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000140)={r10, r6, 0x2, 0x1000, &(0x7f0000000b40)="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", 0xf8, 0x5, 0x3, 0x80, 0x5, 0x3, 0x1ff, 'syz0\x00'}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000200), 0x8) 5.002621604s ago: executing program 4 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000cc0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x1, 0x5000, 0x9, 0x4, 0x2}, &(0x7f0000000d80)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000dc0)={r4, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000c00)={0x0, @in6={{0xa, 0x4e22, 0x4, @private0, 0x7}}, 0x9, 0x7fff}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000004c0)="4bc97d7eaa2abc11f483f28153a2e7da2b18797b40c662706c6f66b2af5a8533b2b4c5df1d38ac2b0848fc31952040faecaecd20c5bbe3d2a7315762238c411dbb25b6333820d7e609dcf54ca2792e60b26c47d583f9f9409c951cf0eeaa71e86f794d711a5252f092e8c93bc1a11ec5a6c3deb1179988484995fc2b29110e5b4c1f7e8284043ce9f47d589b1febcd817d4c117691a835a4a03a48a4312cf45ce7237e7ed12fd0042516678090a606c8370d41999fae8d54da47", 0xba}, {&(0x7f0000000580)="f17827406e569ff6d74970caa60437b073f8a97730dc372978bc2e8b245aebd5af0d853f7bbb5bed35e9e2ed64d55f585996f62a64704749eebe90ee54047417707586dbe34b4aaeba913a5615389e0bd8d9ac52de8f835505352d9748675283d2ecc3dfd6868cb2ae92dcdf74a3e3d79cfc7b6f3699e52ea0980d7465d7544d84d57d98b3e2a3181f4bce0990ae4603d46c46849b8fa3c4a0524f5d18aa5474a92347f646be79f6e9c3672bc0caab2d45bda6368992556ae193fccc0e6a880a8548e339795f11bacea0a7da596d9a7a64f6617f2a0178f5d7418adef2f3", 0xde}, {&(0x7f0000000100)="a36dc717a6b81f97b5469eb2775e2ced1824a64cbbab8c9010584724855ca301e194663666ac0380f151c256316fb760404b2411db6160545f554ee113e563e6691befd80287eaa447d93a89f8261bb9a861094442cd94d66ed4084823094c1dbc3447d0eac7", 0x66}, {&(0x7f0000000780)="4d5eeca7edf2776bde1ab566639d1a3f448007c2c76f8990d376341951b337a11ffc55db807a5588986a65420579edae33aad0538da56442d5a32735994cb97720f4cef2c47c3adc9d3297884f1398fcb70f88d9f6291f8fb70f01193ace80b247d34f99fef75b844f5f70c1fe40595a2fd792727a06b3786f5afc68af8d160c9c45c93fffa94a7f3591079a25cd9ea148d831bc9127bb81b187365e3a98ccbe4a66d43f96d9", 0xa6}, {&(0x7f00000003c0)="d90fec2ab119d751dcbba265089dd5889ef3bdd6fdde81a340116047fec2c6875845e87d468bc93ae7be815b81c5bb8d6aa3945f669d3d53d2a77c32d13168e768004f932f1f48e714832e29521015908487c213fd64", 0x56}], 0x5, &(0x7f0000000940)=[@ip_retopts={{0xe4, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xcb, [@loopback]}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x2, [0x9]}, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0xb, [{@broadcast, 0x81}]}, @end, @ra={0x94, 0x4}, @generic={0x83, 0x12, "6c39136e7f870a496675f8430935f1c0"}, @generic={0x94, 0x9, "52cd4726e5cf02"}, @end, @cipso={0x86, 0x97, 0x2, [{0x7, 0xe, "d0e31f6325e5fd74acd33639"}, {0x3, 0x12, "aad88778bf659401054c17da22daeb1c"}, {0x1, 0x5, "25bd9c"}, {0x0, 0x11, "11a766d0aac6440c11304928b791db"}, {0x6, 0x12, "a50001b857a24ce633a3945559fbbf77"}, {0x6, 0xa, "a7271c46c6072c98"}, {0x0, 0xf, "2be566e7998be15a176b34bbdc"}, {0x0, 0x12, "bd22b970cd6cb591e74c29a8356d0b67"}, {0x2, 0xe, "20b6c3bd27d2b4b19a3cd9ec"}, {0x7, 0x10, "49a0b53d7d5c69d8e9e30d56f354"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x100}}, {{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000a40)="6de7e17f514ae8535a8f0e966e5fd54215aef037a5e123a99f6bba1d71597c89c967eb77615b06e10af8081bae59d8d20fdc8d2e50c847184ff4e19ac7611cfaaf72c4bd4a40d07b32b27ea1dff54b10076651a8a28c32ef6bfc10200fc34c852d5e96c93d6ea4589584216c8423369f087ae0d73ec42d2017f1aa43b64c7d37079bdd2441ee2f0bd550e681b74129af7215a6b456f5f28df0855ce10a5fcb783feb396a87023642a23cf1eaf8edf3d3af9a172f2d25b0fe3319b8cb2e7b183f9211257bf9d4a137b55922d23ea2ad216651873852eeee0f816831", 0xdb}], 0x1, &(0x7f0000000b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x2, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000300)}, 0x5}], 0x1, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7a00000063000000660000000000000016000000000000009500190000000000"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x57, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.609527804s ago: executing program 1 (id=2008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd28, 0x7, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 4.534245973s ago: executing program 3 (id=2009): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000086d1ca5263110c00000000b2df0f395ab200379a03a0baa2ff2e00009500a505"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfeab, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d605596e3d582a1c9322827787f4befc77fb80946a5bfccb7f13ed319ab96cbe2ff25f4a5efa691026d5ebd147fcd4a69476e1f2decbb48b2d7fe", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0xfffffffffffffff8, 0xf}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @private=0xa010101}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x28, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'vlan0\x00'}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, 0x0, &(0x7f0000000800)) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0xfffd, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) 4.081098321s ago: executing program 4 (id=2010): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001940)=[{{&(0x7f0000000380)={0x20, 0x4e23, 0x4, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x20040001, 0x0, 0x0, 0x0, 0x10000, 0xffffffff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000180)) 4.080851682s ago: executing program 2 (id=563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24004011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x7, 0x6, 0x5, 0xf}, 0xc) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x2, 0x1}, 0xe) 1.751769238s ago: executing program 1 (id=2011): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9a, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9a, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0xb7, 0x2}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0xb7, 0x2}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x8, 0x0}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x66, 0x0, 0xb, 0x88, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfca) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, [@generic={0x5, 0x5, 0xd, 0x859, 0x75}, @generic={0x10, 0x5, 0x9, 0x2, 0x8d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb0}}, @generic={0x5, 0x4, 0x7, 0x5, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0xcd, 0xa4, &(0x7f0000000640)=""/164, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xa, 0xf, 0xd}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000780)=[{0x2, 0x4, 0xc, 0x9}, {0x4, 0x5, 0x0, 0x2}, {0x0, 0x1, 0x2, 0xc}, {0x2, 0x4, 0x5, 0x6}, {0x0, 0x4, 0xd, 0xb}], 0x10, 0xc, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xdef2, 0x0, 0xffffffffffffffff, 0xa5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xdef2, 0x0, 0xffffffffffffffff, 0xa5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x204}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0xd, 0x1, 0x4, 0xc, 0x8}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x2, 0x4f, &(0x7f0000000380)=""/79, 0x41000, 0x57, '\x00', 0x0, @cgroup_sock_addr=0x14, r3, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r7, 0x2, &(0x7f0000000940)=[r8, 0x1, r9], &(0x7f0000000980)=[{0x2, 0x5, 0x5, 0x2}, {0x0, 0x3, 0x1, 0x1}], 0x10, 0x2, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r11, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r11], 0x24}}, 0x0) 1.731322951s ago: executing program 3 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0xa, 0x4e22, 0xd1, @remote, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x0, 0x204, 0xb, 0x81, 0x4, 0x7fff, 0x7, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0xfff}, 0x8) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000140)=@isdn={0x22, 0xe, 0x98, 0x9, 0xff}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e0000240002800800024000000101080001400000000008000340000020001ae67f0dffffffd90900010073797a30000000000900020073797a3200"], 0x8c}}, 0x0) 1.730850602s ago: executing program 4 (id=2013): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x2a}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r6], 0xdd12}], 0x1}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 1.496306324s ago: executing program 3 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000480), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x53f6, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r5], 0x54}}, 0x0) 1.232383714s ago: executing program 3 (id=2015): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}], 0x1, 0x1005) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_emit_ethernet(0x216, &(0x7f0000000800)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "22bd49", 0x1e0, 0x11, 0xff, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x0, 0x10, 0x4, 0x8, 0x8, 0x0, 0x6200, [@loopback, @loopback, @empty, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @empty, @local]}, @dstopts={0x1d, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x2e, 0xe, 0x4, 0x7, 0x8, 0x68, 0x101, [@private2={0xfc, 0x2, '\x00', 0xf}, @local, @rand_addr=' \x01\x00', @empty, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x11}]}, @dstopts={0x29, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x6, [0x1c6, 0x1, 0x2, 0x230, 0x7]}}, @ra={0x5, 0x2, 0x8}]}, @srh={0x3e, 0xc, 0x4, 0x6, 0x30, 0x68, 0x0, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @private0]}, @dstopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}], {0x4e24, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x6e, 0x100, @val=0x80}}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000040000000c0000000c0001800800", @ANYRES32=r4, @ANYBLOB="1c000380"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00002fd4", @ANYRES16=r8, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a0000060001000500000008000b000200000005001400fe0000000c0016000100000001000000"], 0x48}}, 0x20004000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xa0c0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r11}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.177907708s ago: executing program 1 (id=2016): socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095b62a05189bade2418b0da54c656ef79e647423016e98068adcbbbbbd937a4970aa10350aae35f157ea5ff44df1f502883679828c34b27d758ccfe69b7b6419753af4f30983cd529dfa5a1142af73dae8c0c5c5b4a843420400565a04e1d715e8f73d2c2a6d459ee85a11d8c49bb3e961de12ac67f82ccfdc9702bdbba0bcb2dc413a7cbb24e3e876eeaa18eaf4e4b8fd034ef9f4408da40303a44a867d34e5f4be61820397f733"], &(0x7f0000000100)='GPL\x00', 0xf26e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c00", @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="08000800e000000106000a004e200000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="2c00000042843aefe7a6919bbf2ef9e118179375a7e86d11b4220aeaf5b496457f2666eeb58fc03c26bdb1ff1ea0bf57255a3669f611f37450e81ca80cf5aa51fc198bfd7cb2c2d11888627daed03d2d82479ff63177b7627b89d99772"], 0x2c}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) write$cgroup_subtree(r7, 0x0, 0x9) write$cgroup_int(r7, &(0x7f0000000400)=0xc175, 0x12) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x2, 0x0, 0x0, 0xfffd}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r10) sendmsg$NLBL_CALIPSO_C_LISTALL(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000080a9778da140c5e7ac40c3cfe9945bc77ea0bc618b1c8eabd4a6efd7bcdc714ea3f7f333dd2ad958910ce4b49e3e270bb75e9885be1a7538ed1836b8c3c0849b54d862bb3eff8ee28bf7868f62afb4eef", @ANYRES16=r11, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) (async) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r13, 0xe03}, 0x8) 963.074358ms ago: executing program 1 (id=2017): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)={0x44, r1, 0x801, 0x1000, 0x1, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "48bee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 933.829293ms ago: executing program 4 (id=2018): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0x16}, @val={0x4, 0x80, 0x58af, 0x2, 0x8, 0x9}, @arp=@generic={0xfefe, 0x8863, 0x6, 0x0, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, "", @local}}, 0x22) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f00000033c0)={&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41040}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000240)=0xa5ec) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x8a, &(0x7f0000000000)={0x40000042}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5ea000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) socketpair(0x15, 0x800, 0x80000001, &(0x7f0000000000)) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv4_newnexthop={0x3c, 0x68, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x1, 0x0, 0x13}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x80}}, 0x0) 876.211475ms ago: executing program 3 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0x2d, 0x0, &(0x7f00000000c0)="b9ff03076844268cb89e14f00800ee65bf61c91122729b65a2e9d4ac93374a824e2ee3b96447d053105fdb032a", 0x0, 0xf, 0x60000000, 0x2a, 0x0, &(0x7f0000000380)="013111ce8c5ac6f5d532a4a8c69603477db303581b0870773e9b7ca7a0010d9dec6f9fa9a7ea04276381", 0x0, 0x1}, 0x50) r6 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000231195433aefe2a800c001f0000000000000000000c0020000000000000000000"], 0x4c}}, 0x0) 706.996741ms ago: executing program 1 (id=2020): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}, {}], "44942d"}, @ptr, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "84"}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt(r0, 0x28, 0xffffffff, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x69) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x2009}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x4, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x7f, 0xa1, "58b3bee3bc2f25b70e5177013bf06481190c6709f08bebb871f5ac095c73a9e9f2cd54dcbb595f5c6d78ec9374e7425bb52ae70d7880fad526aeca6a98eb826d87afc891c3532c162d338134467d28dbeb3a281f4b560a72c60388f6343a75fc8772d3a97372aeee540a74b48cc8f1db787ad000fba748534090923362c2f07e67a391c0a1c77e441559333ab1f180ee63f39b1fb79e9d9db6aa928cbd3c65676a"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x40010, r5, 0xfbd32000) 705.490831ms ago: executing program 4 (id=2021): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r5, 0x917, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x40000) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x0, '\x00', r4, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x7, 0x7fff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{0x5, 0x1, 0xe, 0x3}, {0x3, 0x2, 0xf, 0x8}, {0x3, 0x6, 0x3}, {0x4, 0x2, 0x4, 0xc}], 0x10, 0x4, @void, @value}, 0x94) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800800001800128008000100767469000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}}, 0x0) 511.486508ms ago: executing program 3 (id=2022): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000f00000009500000000000000437e3120a93486864bb3bd37654fa9a230eabde4f96f3185c2a0dbcd645c1434d293bb3e6af263528ded69780ee86c2a0e56c3c28000fde7f6efeee6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="c4", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='contention_end\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 465.361128ms ago: executing program 1 (id=2023): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000f00000009500000000000000437e3120a93486864bb3bd37654fa9a230eabde4f96f3185c2a0dbcd645c1434d293bb3e6af263528ded69780ee86c2a0e56c3c28000fde7f6efeee6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="c4", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='contention_end\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffffcd8b, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 0s ago: executing program 0 (id=748): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_delvlan={0x78, 0x71, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}, @BRIDGE_VLANDB_ENTRY={0xffffffffffffffde, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x38, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) kernel console output (not intermixed with test programs): devsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.138212][ T3522] bridge_slave_1: left allmulticast mode [ 313.143893][ T3522] bridge_slave_1: left promiscuous mode [ 313.150233][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.159578][ T3522] bridge_slave_0: left allmulticast mode [ 313.165240][ T3522] bridge_slave_0: left promiscuous mode [ 313.171109][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.563983][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.574896][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.590537][ T3522] bond0 (unregistering): Released all slaves [ 313.825131][T12278] lo speed is unknown, defaulting to 1000 [ 314.060295][ T3522] hsr_slave_0: left promiscuous mode [ 314.079791][ T3522] hsr_slave_1: left promiscuous mode [ 314.097014][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.104495][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.124224][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.133926][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.135449][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.154196][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.168785][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.184085][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.190006][ T3522] veth1_macvtap: left promiscuous mode [ 314.197974][ T3522] veth0_macvtap: left promiscuous mode [ 314.203743][ T3522] veth1_vlan: left promiscuous mode [ 314.209800][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.209868][ T3522] veth0_vlan: left promiscuous mode [ 314.222847][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.773999][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 314.823218][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 315.237132][T12283] lo speed is unknown, defaulting to 1000 [ 315.390708][T12287] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 315.715144][T12283] chnl_net:caif_netlink_parms(): no params data found [ 315.887679][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1617'. [ 315.947549][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1617'. [ 315.980780][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.995847][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.012713][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.022193][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.037200][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.046743][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.188559][T12283] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.201958][T12283] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.209796][T12283] bridge_slave_0: entered allmulticast mode [ 316.230320][T12283] bridge_slave_0: entered promiscuous mode [ 316.269446][T12283] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.286452][T12283] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.299456][T12283] bridge_slave_1: entered allmulticast mode [ 316.306686][ T5147] Bluetooth: hci0: command tx timeout [ 316.315481][T12283] bridge_slave_1: entered promiscuous mode [ 316.377632][T12283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.485557][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.540929][T12283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.563472][T12311] lo speed is unknown, defaulting to 1000 [ 316.614031][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 316.624631][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 316.664597][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.687848][T12283] team0: Port device team_slave_0 added [ 316.726536][T12283] team0: Port device team_slave_1 added [ 316.765913][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.814271][T12283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.831519][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.858996][T12283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.895625][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.953686][T12283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.961690][T12283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.990624][T12283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.067850][T12283] hsr_slave_0: entered promiscuous mode [ 317.074268][T12283] hsr_slave_1: entered promiscuous mode [ 317.080621][T12283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.089319][T12283] Cannot create hsr debugfs directory [ 317.350261][T12311] chnl_net:caif_netlink_parms(): no params data found [ 317.568412][ T3522] bridge_slave_1: left allmulticast mode [ 317.574130][ T3522] bridge_slave_1: left promiscuous mode [ 317.623897][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.673775][ T3522] bridge_slave_0: left allmulticast mode [ 317.689750][ T3522] bridge_slave_0: left promiscuous mode [ 317.707060][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.731507][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1627'. [ 317.744204][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 318.230854][ T5147] Bluetooth: hci1: command tx timeout [ 318.316632][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.332636][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.342721][ T3522] bond0 (unregistering): Released all slaves [ 318.371369][T12360] vlan0: entered promiscuous mode [ 318.386478][ T5147] Bluetooth: hci0: command tx timeout [ 318.403046][T12360] dummy0: entered promiscuous mode [ 318.433084][T12360] dummy0: left promiscuous mode [ 318.653906][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.674424][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.693029][T12311] bridge_slave_0: entered allmulticast mode [ 318.705091][T12311] bridge_slave_0: entered promiscuous mode [ 318.713636][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.722917][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.730519][T12311] bridge_slave_1: entered allmulticast mode [ 318.739025][T12311] bridge_slave_1: entered promiscuous mode [ 318.818580][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.940234][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.040297][T12311] team0: Port device team_slave_0 added [ 319.073219][T12311] team0: Port device team_slave_1 added [ 319.095371][ T3522] hsr_slave_0: left promiscuous mode [ 319.114570][ T3522] hsr_slave_1: left promiscuous mode [ 319.125869][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.141937][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.150218][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.155355][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 319.159001][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.194820][ T3522] veth1_macvtap: left promiscuous mode [ 319.201697][ T3522] veth0_macvtap: left promiscuous mode [ 319.207467][ T3522] veth1_vlan: left promiscuous mode [ 319.212787][ T3522] veth0_vlan: left promiscuous mode [ 319.333559][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 319.655734][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 319.708533][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 320.159228][T12283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.202172][T12283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.225631][T12283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.277518][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.284512][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.316482][ T5147] Bluetooth: hci1: command tx timeout [ 320.318050][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.390915][T12283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.426168][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.456145][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.482428][ T5147] Bluetooth: hci0: command tx timeout [ 320.488538][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.703231][T12311] hsr_slave_0: entered promiscuous mode [ 320.717253][T12311] hsr_slave_1: entered promiscuous mode [ 320.735586][T12311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.769365][T12311] Cannot create hsr debugfs directory [ 320.879698][T12412] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.927558][T12412] bridge0: port 1(batadv1) entered blocking state [ 320.940900][T12412] bridge0: port 1(batadv1) entered disabled state [ 320.956641][T12412] batadv1: entered allmulticast mode [ 320.963350][T12412] batadv1: entered promiscuous mode [ 321.054721][T12436] tun0: tun_chr_ioctl cmd 1074025677 [ 321.067128][T12436] tun0: linktype set to 270 [ 321.101394][ T29] audit: type=1107 audit(1741786723.183:6): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÃLžß=©O¦Š&~þ‡/®Kب…=ºûT\'†£4xŠ\(Ó#ÙO©Vë{"¾LÕÐ!â_s£¡)ÀËQµ6' [ 321.309305][T12283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.391598][ T747] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 321.400600][T12283] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.400883][ T747] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 321.417231][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.424403][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.456608][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 321.477283][T12452] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1655'. [ 321.511359][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.518557][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.576105][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 321.628656][T12458] tipc: Enabling of bearer rejected, failed to enable media [ 321.638457][T12452] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 321.974169][T12311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.014855][T12311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.054881][T12283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.085731][T12311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.160428][T12311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.253833][T12487] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1665'. [ 322.313860][T12283] veth0_vlan: entered promiscuous mode [ 322.386506][ T5147] Bluetooth: hci1: command tx timeout [ 322.428703][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 322.430557][T12283] veth1_vlan: entered promiscuous mode [ 322.454782][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 322.487260][T12491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1667'. [ 322.505917][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.537368][T12283] veth0_macvtap: entered promiscuous mode [ 322.549914][T12283] veth1_macvtap: entered promiscuous mode [ 322.556593][ T5147] Bluetooth: hci0: command tx timeout [ 322.612290][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.681195][T12497] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1669'. [ 322.685377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.697501][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.744224][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.751455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.769378][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.787509][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.829252][T12283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.839793][T12283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.856387][T12283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.875454][T12283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.960801][T12510] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1672'. [ 322.980205][T12311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.016537][T12506] lo speed is unknown, defaulting to 1000 [ 323.447185][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.467511][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.538183][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.557060][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.707998][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.741802][T12534] macsec0: left promiscuous mode [ 323.791144][T12506] netlink: 'syz.3.1671': attribute type 39 has an invalid length. [ 323.870188][T12311] veth0_vlan: entered promiscuous mode [ 323.890636][T12311] veth1_vlan: entered promiscuous mode [ 323.943614][T12311] veth0_macvtap: entered promiscuous mode [ 323.963822][T12311] veth1_macvtap: entered promiscuous mode [ 324.034339][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.055520][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.085689][T12311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.119023][T12311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.138992][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 324.165078][T12311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.177754][T12311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.188629][T12311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.201973][T12311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.211427][T12311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.220249][T12311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.378231][T12547] lo speed is unknown, defaulting to 1000 [ 324.437939][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.461520][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.469244][ T5147] Bluetooth: hci1: command tx timeout [ 324.596518][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.684003][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.739442][T12556] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 324.805795][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.908584][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.999298][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.097869][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.210179][ T3522] bridge_slave_1: left allmulticast mode [ 325.215850][ T3522] bridge_slave_1: left promiscuous mode [ 325.223478][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.232611][ T3522] bridge_slave_0: left allmulticast mode [ 325.238781][ T3522] bridge_slave_0: left promiscuous mode [ 325.244460][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.805033][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.820812][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.839119][ T3522] bond0 (unregistering): Released all slaves [ 325.875292][T12563] bridge0: port 2(gretap0) entered blocking state [ 325.883171][T12563] bridge0: port 2(gretap0) entered disabled state [ 325.926651][T12563] gretap0: entered allmulticast mode [ 325.950226][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.964359][T12564] gretap0: left allmulticast mode [ 325.971376][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.982317][T12564] bridge0: port 2(gretap0) entered disabled state [ 325.997632][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.021784][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.040678][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.051549][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.118246][T12565] lo speed is unknown, defaulting to 1000 [ 326.246337][ T3522] hsr_slave_0: left promiscuous mode [ 326.252270][ T3522] hsr_slave_1: left promiscuous mode [ 326.267823][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.275234][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.291636][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.299472][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.323692][ T3522] veth1_macvtap: left promiscuous mode [ 326.329480][ T3522] veth0_macvtap: left promiscuous mode [ 326.335113][ T3522] veth1_vlan: left promiscuous mode [ 326.340515][ T3522] veth0_vlan: left promiscuous mode [ 326.739439][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 326.785762][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 327.117265][T12572] __nla_validate_parse: 2 callbacks suppressed [ 327.117284][T12572] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1684'. [ 327.327607][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 327.508541][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.522576][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.547514][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.560449][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.570704][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.578647][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.584833][T12565] chnl_net:caif_netlink_parms(): no params data found [ 327.623442][T12582] IPv6: sit1: Disabled Multicast RS [ 327.720112][T12585] lo speed is unknown, defaulting to 1000 [ 327.765596][T12595] netlink: 'syz.4.1690': attribute type 27 has an invalid length. [ 328.003787][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.053178][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.065559][T12565] bridge_slave_0: entered allmulticast mode [ 328.084296][T12565] bridge_slave_0: entered promiscuous mode [ 328.156529][ T5147] Bluetooth: hci0: command tx timeout [ 328.169832][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.206526][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.213809][T12565] bridge_slave_1: entered allmulticast mode [ 328.234042][T12565] bridge_slave_1: entered promiscuous mode [ 328.256881][T12620] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 328.264639][T12620] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1695'. [ 328.346869][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.428805][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.581615][T12565] team0: Port device team_slave_0 added [ 328.588450][T12585] chnl_net:caif_netlink_parms(): no params data found [ 328.603294][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 328.615614][T12565] team0: Port device team_slave_1 added [ 328.742611][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1705'. [ 328.823507][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 328.833198][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.841183][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.896121][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.961519][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.999344][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.010761][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.041943][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.062781][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1705'. [ 329.099129][T12585] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.106766][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.114455][T12585] bridge_slave_0: entered allmulticast mode [ 329.121207][T12585] bridge_slave_0: entered promiscuous mode [ 329.156340][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.226545][T12640] wireguard0: entered promiscuous mode [ 329.235577][T12640] wireguard0: entered allmulticast mode [ 329.337277][T12585] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.344486][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.405102][T12585] bridge_slave_1: entered allmulticast mode [ 329.430156][T12585] bridge_slave_1: entered promiscuous mode [ 329.459912][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.476482][T12565] hsr_slave_0: entered promiscuous mode [ 329.482663][T12565] hsr_slave_1: entered promiscuous mode [ 329.489397][T12565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.497357][T12565] Cannot create hsr debugfs directory [ 329.575345][T12585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.585904][T12656] lo speed is unknown, defaulting to 1000 [ 329.666836][ T5147] Bluetooth: hci1: command tx timeout [ 329.682391][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.716684][T12585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.850625][T12679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1712'. [ 329.917405][T12585] team0: Port device team_slave_0 added [ 329.948091][T12585] team0: Port device team_slave_1 added [ 330.042356][T12585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.052626][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.080041][T12585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.109235][T12585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.118003][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.144241][T12585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.210407][T12692] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 330.210603][ T62] bridge_slave_1: left allmulticast mode [ 330.218610][T12693] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 330.237245][ T5147] Bluetooth: hci0: command tx timeout [ 330.238401][ T62] bridge_slave_1: left promiscuous mode [ 330.248897][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.262462][ T62] bridge_slave_0: left allmulticast mode [ 330.268386][ T62] bridge_slave_0: left promiscuous mode [ 330.274150][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 330.283366][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.723188][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.734663][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.746770][ T62] bond0 (unregistering): Released all slaves [ 330.803442][T12693] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 330.804302][T12692] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 330.860560][T12694] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 331.042702][T12585] hsr_slave_0: entered promiscuous mode [ 331.077821][T12585] hsr_slave_1: entered promiscuous mode [ 331.083754][T12585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.097733][T12585] Cannot create hsr debugfs directory [ 331.274139][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 331.312121][ T62] hsr_slave_0: left promiscuous mode [ 331.348504][ T62] hsr_slave_1: left promiscuous mode [ 331.364603][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.382725][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.403923][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.431222][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.469584][ T62] veth1_macvtap: left promiscuous mode [ 331.475150][ T62] veth0_macvtap: left promiscuous mode [ 331.481248][ T62] veth1_vlan: left promiscuous mode [ 331.486796][ T62] veth0_vlan: left promiscuous mode [ 331.760546][ T5147] Bluetooth: hci1: command tx timeout [ 332.023937][ T62] team0 (unregistering): Port device team_slave_1 removed [ 332.088735][ T62] team0 (unregistering): Port device team_slave_0 removed [ 332.316586][ T5147] Bluetooth: hci0: command tx timeout [ 332.583314][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1725'. [ 332.911820][T12565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.957617][T12565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.053073][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 333.068548][T12565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.116959][T12763] FAULT_INJECTION: forcing a failure. [ 333.116959][T12763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.131110][T12763] CPU: 1 UID: 0 PID: 12763 Comm: syz.4.1733 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 333.131133][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.131143][T12763] Call Trace: [ 333.131149][T12763] [ 333.131157][T12763] dump_stack_lvl+0x241/0x360 [ 333.131182][T12763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.131200][T12763] ? __pfx__printk+0x10/0x10 [ 333.131228][T12763] should_fail_ex+0x40a/0x550 [ 333.131254][T12763] _copy_from_user+0x2d/0xb0 [ 333.131275][T12763] copy_from_sockptr_offset+0x6b/0xb0 [ 333.131298][T12763] do_ip6t_set_ctl+0xbe6/0x1270 [ 333.131323][T12763] ? nf_setsockopt+0x240/0x2c0 [ 333.131346][T12763] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 333.131366][T12763] ? rcu_is_watching+0x15/0xb0 [ 333.131385][T12763] ? trace_contention_end+0x3c/0x120 [ 333.131412][T12763] ? __mutex_unlock_slowpath+0x227/0x800 [ 333.131440][T12763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.131459][T12763] ? aa_sk_perm+0x96d/0xab0 [ 333.131487][T12763] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.131511][T12763] nf_setsockopt+0x295/0x2c0 [ 333.131537][T12763] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.131558][T12763] do_sock_setsockopt+0x3af/0x720 [ 333.131581][T12763] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.131602][T12763] ? __fget_files+0x395/0x410 [ 333.131622][T12763] ? __fget_files+0x2a/0x410 [ 333.131651][T12763] __x64_sys_setsockopt+0x1ee/0x280 [ 333.131674][T12763] do_syscall_64+0xf3/0x230 [ 333.131692][T12763] ? clear_bhb_loop+0x35/0x90 [ 333.131721][T12763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.131741][T12763] RIP: 0033:0x7ff99e38d169 [ 333.131756][T12763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.131770][T12763] RSP: 002b:00007ff99f12d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.131788][T12763] RAX: ffffffffffffffda RBX: 00007ff99e5a5fa0 RCX: 00007ff99e38d169 [ 333.131800][T12763] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 333.131809][T12763] RBP: 00007ff99f12d090 R08: 00000000000006f0 R09: 0000000000000000 [ 333.131820][T12763] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.131830][T12763] R13: 0000000000000000 R14: 00007ff99e5a5fa0 R15: 00007ffe9458dc18 [ 333.131857][T12763] [ 333.378474][T12565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.555616][T12769] macvlan2: left promiscuous mode [ 333.561050][T12769] macvlan2: left allmulticast mode [ 333.577985][T12769] bond2: left promiscuous mode [ 333.588166][T12769] bond2: left allmulticast mode [ 333.678381][T12775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 333.829466][ T5147] Bluetooth: hci1: command tx timeout [ 333.907320][T12791] FAULT_INJECTION: forcing a failure. [ 333.907320][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.920779][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.4.1741 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 333.920803][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.920813][T12791] Call Trace: [ 333.920819][T12791] [ 333.920825][T12791] dump_stack_lvl+0x241/0x360 [ 333.920849][T12791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.920866][T12791] ? __pfx__printk+0x10/0x10 [ 333.920883][T12791] ? __pfx_lock_release+0x10/0x10 [ 333.920913][T12791] should_fail_ex+0x40a/0x550 [ 333.920939][T12791] _copy_from_user+0x2d/0xb0 [ 333.920960][T12791] smc_setsockopt+0x452/0xd10 [ 333.920983][T12791] ? __pfx_smc_setsockopt+0x10/0x10 [ 333.921001][T12791] ? aa_sock_opt_perm+0x79/0x120 [ 333.921026][T12791] ? __pfx_smc_setsockopt+0x10/0x10 [ 333.921041][T12791] do_sock_setsockopt+0x3af/0x720 [ 333.921064][T12791] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.921083][T12791] ? __fget_files+0x395/0x410 [ 333.921103][T12791] ? __fget_files+0x2a/0x410 [ 333.921129][T12791] __x64_sys_setsockopt+0x1ee/0x280 [ 333.921151][T12791] do_syscall_64+0xf3/0x230 [ 333.921169][T12791] ? clear_bhb_loop+0x35/0x90 [ 333.921193][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.921212][T12791] RIP: 0033:0x7ff99e38d169 [ 333.921227][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.921241][T12791] RSP: 002b:00007ff99f12d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.921258][T12791] RAX: ffffffffffffffda RBX: 00007ff99e5a5fa0 RCX: 00007ff99e38d169 [ 333.921269][T12791] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 333.921279][T12791] RBP: 00007ff99f12d090 R08: 0000000000000048 R09: 0000000000000000 [ 333.921290][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.921300][T12791] R13: 0000000000000000 R14: 00007ff99e5a5fa0 R15: 00007ffe9458dc18 [ 333.921326][T12791] [ 333.935725][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.135694][T12789] vlan4: entered promiscuous mode [ 334.201430][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.263969][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 334.354065][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 334.384140][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.391329][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.426445][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.433595][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.522270][T12815] sctp: [Deprecated]: syz.4.1748 (pid 12815) Use of int in max_burst socket option deprecated. [ 334.522270][T12815] Use struct sctp_assoc_value instead [ 334.534974][T12585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.551365][T12585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.584221][T12585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.614988][T12585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.660036][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1749'. [ 334.822564][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.847951][T12585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.865330][T12585] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.892889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.900044][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.939721][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.946896][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.039580][T12565] veth0_vlan: entered promiscuous mode [ 335.099814][T12565] veth1_vlan: entered promiscuous mode [ 335.155796][T12565] veth0_macvtap: entered promiscuous mode [ 335.179110][T12565] veth1_macvtap: entered promiscuous mode [ 335.216065][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.247105][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.275128][T12565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.284609][T12565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.294708][T12565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.303972][T12565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.334526][T12585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.650768][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 335.697935][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.709768][T12585] veth0_vlan: entered promiscuous mode [ 335.717879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.791328][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.802433][T12585] veth1_vlan: entered promiscuous mode [ 335.820332][T12863] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 335.829495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.890407][T12863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.906429][ T5147] Bluetooth: hci1: command tx timeout [ 335.961358][T12863] bond3: (slave veth3): Enslaving as an active interface with a down link [ 336.070904][T12585] veth0_macvtap: entered promiscuous mode [ 336.096352][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1761'. [ 336.132635][T12585] veth1_macvtap: entered promiscuous mode [ 336.180180][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.194845][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.214095][T12585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.273324][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1760'. [ 336.324463][T12585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.335560][T12585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.350770][T12585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.364744][T12585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.374052][T12585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.404199][T12585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.420794][T12585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.605403][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 336.613328][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.650992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.736032][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.752273][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.998363][T12900] lo speed is unknown, defaulting to 1000 [ 337.218706][ T5887] IPVS: starting estimator thread 0... [ 337.287933][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.316540][T12906] IPVS: using max 27 ests per chain, 64800 per kthread [ 337.775012][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.930676][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.940067][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.948542][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.956694][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.965370][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.973744][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.008165][T12910] lo speed is unknown, defaulting to 1000 [ 338.040340][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.117287][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.162148][T12910] chnl_net:caif_netlink_parms(): no params data found [ 338.218853][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.226081][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.234511][T12910] bridge_slave_0: entered allmulticast mode [ 338.243375][T12910] bridge_slave_0: entered promiscuous mode [ 338.250669][T12910] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.258557][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.265722][T12910] bridge_slave_1: entered allmulticast mode [ 338.272555][T12910] bridge_slave_1: entered promiscuous mode [ 338.312805][T12910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.333839][T12910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.360056][ T35] bridge_slave_1: left allmulticast mode [ 338.365747][ T35] bridge_slave_1: left promiscuous mode [ 338.371581][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.381234][ T35] bridge_slave_0: left allmulticast mode [ 338.389339][ T35] bridge_slave_0: left promiscuous mode [ 338.395046][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.761306][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.772299][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.783094][ T35] bond0 (unregistering): Released all slaves [ 338.803120][T12910] team0: Port device team_slave_0 added [ 338.825961][T12910] team0: Port device team_slave_1 added [ 338.894551][T12910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.908433][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.934768][T12910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.947279][T12910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.954246][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.980386][T12910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.066791][T12910] hsr_slave_0: entered promiscuous mode [ 339.072929][T12910] hsr_slave_1: entered promiscuous mode [ 339.081937][T12910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.089723][T12910] Cannot create hsr debugfs directory [ 339.127953][ T35] hsr_slave_0: left promiscuous mode [ 339.133725][ T35] hsr_slave_1: left promiscuous mode [ 339.139932][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.148674][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.156423][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.163848][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.189570][ T35] veth1_macvtap: left promiscuous mode [ 339.195110][ T35] veth0_macvtap: left promiscuous mode [ 339.201009][ T35] veth1_vlan: left promiscuous mode [ 339.206699][ T35] veth0_vlan: left promiscuous mode [ 339.335351][T12923] __nla_validate_parse: 67 callbacks suppressed [ 339.335371][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 339.791171][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.802964][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.816015][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.825442][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.833493][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.850546][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.081795][ T5851] Bluetooth: hci0: command tx timeout [ 340.135039][ T35] team0 (unregistering): Port device team_slave_1 removed [ 340.189309][ T35] team0 (unregistering): Port device team_slave_0 removed [ 340.616133][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 340.690329][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 340.700290][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 340.775990][T12935] lo speed is unknown, defaulting to 1000 [ 340.824464][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'. [ 340.854375][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 340.886665][T12939] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 341.220116][T12935] chnl_net:caif_netlink_parms(): no params data found [ 341.295606][T12960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1781'. [ 341.514487][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.571232][T12935] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.584125][T12935] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.602399][T12935] bridge_slave_0: entered allmulticast mode [ 341.609266][T12935] bridge_slave_0: entered promiscuous mode [ 341.679286][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.715614][T12935] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.736456][T12935] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.743719][T12935] bridge_slave_1: entered allmulticast mode [ 341.761846][T12935] bridge_slave_1: entered promiscuous mode [ 341.774202][T12910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.785039][T12910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.811285][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.849073][T12910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.870084][T12910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.906561][ T5851] Bluetooth: hci1: command tx timeout [ 341.932199][T12935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.979531][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.022018][T12982] lo speed is unknown, defaulting to 1000 [ 342.052290][T12935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.135114][T12935] team0: Port device team_slave_0 added [ 342.145079][T12935] team0: Port device team_slave_1 added [ 342.147105][ T5851] Bluetooth: hci0: command tx timeout [ 342.212694][T12983] lo speed is unknown, defaulting to 1000 [ 342.247745][T12935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.273493][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.284077][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 342.299789][T12935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.327471][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 342.344939][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 342.419564][T12935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.435124][T12935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.464475][T12996] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 342.470897][T12935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.519256][ T35] bridge_slave_1: left allmulticast mode [ 342.524940][ T35] bridge_slave_1: left promiscuous mode [ 342.530935][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.542537][ T35] bridge_slave_0: left allmulticast mode [ 342.549527][ T35] bridge_slave_0: left promiscuous mode [ 342.555324][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.285195][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.299928][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.314556][ T35] bond0 (unregistering): Released all slaves [ 343.542572][T12935] hsr_slave_0: entered promiscuous mode [ 343.550558][T12935] hsr_slave_1: entered promiscuous mode [ 343.560103][T12935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.573176][T12935] Cannot create hsr debugfs directory [ 343.634441][T13016] bond0: option xmit_hash_policy: invalid value (71) [ 343.921255][ T35] hsr_slave_0: left promiscuous mode [ 343.927518][ T35] hsr_slave_1: left promiscuous mode [ 343.933323][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.941659][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.950365][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.961212][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.983393][ T35] veth1_macvtap: left promiscuous mode [ 343.989068][ T5851] Bluetooth: hci1: command tx timeout [ 343.989409][ T35] veth0_macvtap: left promiscuous mode [ 344.000328][ T35] veth1_vlan: left promiscuous mode [ 344.005629][ T35] veth0_vlan: left promiscuous mode [ 344.227778][ T5851] Bluetooth: hci0: command tx timeout [ 344.517765][ T35] team0 (unregistering): Port device team_slave_1 removed [ 344.575011][ T35] team0 (unregistering): Port device team_slave_0 removed [ 345.020023][T13026] syzkaller1: entered promiscuous mode [ 345.025571][T13026] syzkaller1: entered allmulticast mode [ 345.098794][T13028] lo speed is unknown, defaulting to 1000 [ 345.105001][T12910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.260534][T12910] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.326475][T13037] netlink: 'syz.3.1800': attribute type 11 has an invalid length. [ 345.351528][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.358708][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.451677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.458891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.526415][T13040] __nla_validate_parse: 7 callbacks suppressed [ 345.526434][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 345.597746][ T35] IPVS: stop unused estimator thread 0... [ 345.598052][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 345.623727][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 345.693680][T13042] gretap2: entered promiscuous mode [ 345.740476][T13048] batadv_slave_1: left promiscuous mode [ 345.746623][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 345.798829][T13044] netlink: 'syz.1.1802': attribute type 10 has an invalid length. [ 345.985364][T12910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.068643][T13055] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1804'. [ 346.087899][ T5851] Bluetooth: hci1: command tx timeout [ 346.100682][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1805'. [ 346.131625][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1805'. [ 346.160838][T12935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.189314][T12910] veth0_vlan: entered promiscuous mode [ 346.207037][T12935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.224401][T12910] veth1_vlan: entered promiscuous mode [ 346.261820][T12935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.288420][T12935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.317687][ T5851] Bluetooth: hci0: command tx timeout [ 346.319960][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1808'. [ 346.368050][T12910] veth0_macvtap: entered promiscuous mode [ 346.390047][T12910] veth1_macvtap: entered promiscuous mode [ 346.445851][T12910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.482131][T12910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.514653][T12910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.536060][T12910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.549556][T12910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.558672][T12910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.578889][T12935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.651950][T12935] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.685706][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.692911][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.724269][T13079] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 346.760328][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.767517][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.797584][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 346.827379][T13081] bridge0: left promiscuous mode [ 346.846626][T13081] bridge0: entered allmulticast mode [ 346.873519][T13088] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 346.959931][T13096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1814'. [ 347.001355][ T4932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.053838][ T4932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.137928][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.145846][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.278498][T13109] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 347.648498][T12935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.670359][T13121] lo speed is unknown, defaulting to 1000 [ 348.070865][T12935] veth0_vlan: entered promiscuous mode [ 348.147653][ T5851] Bluetooth: hci1: command tx timeout [ 348.278214][T12935] veth1_vlan: entered promiscuous mode [ 348.479358][T12935] veth0_macvtap: entered promiscuous mode [ 348.499233][T12935] veth1_macvtap: entered promiscuous mode [ 348.558910][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.576613][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.596661][T12935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.619932][T12935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.639888][T12935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.655548][T12935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.684188][T12935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.696392][T12935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.705121][T12935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.723092][T12935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.851107][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.902966][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.912836][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.941114][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.965986][T13101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.974254][T13101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.030776][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.121814][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.221608][ T3522] bridge_slave_1: left allmulticast mode [ 349.227585][ T3522] bridge_slave_1: left promiscuous mode [ 349.233290][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.243945][ T3522] bridge_slave_0: left allmulticast mode [ 349.249810][ T3522] bridge_slave_0: left promiscuous mode [ 349.255473][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.612043][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.623534][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.633754][ T3522] bond0 (unregistering): Released all slaves [ 349.903116][ T3522] hsr_slave_0: left promiscuous mode [ 349.909841][ T3522] hsr_slave_1: left promiscuous mode [ 349.915670][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.925630][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.933880][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.941502][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.964068][ T3522] veth1_macvtap: left promiscuous mode [ 349.970083][ T3522] veth0_macvtap: left promiscuous mode [ 349.975829][ T3522] veth1_vlan: left promiscuous mode [ 349.981281][ T3522] veth0_vlan: left promiscuous mode [ 350.303513][T13144] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 350.583209][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.594173][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.624070][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.655421][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.680767][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.691100][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.853475][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 350.903870][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 351.344006][T13137] __nla_validate_parse: 5 callbacks suppressed [ 351.344024][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 351.392206][T13145] lo speed is unknown, defaulting to 1000 [ 351.534981][T13145] chnl_net:caif_netlink_parms(): no params data found [ 351.617042][T13145] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.624249][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.631509][T13145] bridge_slave_0: entered allmulticast mode [ 351.638739][T13145] bridge_slave_0: entered promiscuous mode [ 351.645934][T13145] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.653277][T13145] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.661198][T13145] bridge_slave_1: entered allmulticast mode [ 351.668541][T13145] bridge_slave_1: entered promiscuous mode [ 351.700394][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.734092][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.744994][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.773153][T13145] team0: Port device team_slave_0 added [ 351.780435][T13145] team0: Port device team_slave_1 added [ 351.800988][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.808440][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.836927][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.848854][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.855863][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.881846][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.913607][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.946383][T13145] hsr_slave_0: entered promiscuous mode [ 351.952802][T13145] hsr_slave_1: entered promiscuous mode [ 351.959651][T13145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.967768][T13145] Cannot create hsr debugfs directory [ 351.993237][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.098964][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.230299][T13163] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 352.249582][T13159] lo speed is unknown, defaulting to 1000 [ 352.304947][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 352.314676][ T5147] Bluetooth: hci4: command 0x0401 tx timeout [ 352.326322][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 352.530979][ T3522] bridge_slave_1: left allmulticast mode [ 352.540985][ T3522] bridge_slave_1: left promiscuous mode [ 352.556473][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.616963][ T3522] bridge_slave_0: left allmulticast mode [ 352.622647][ T3522] bridge_slave_0: left promiscuous mode [ 352.644343][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.657791][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.667277][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.681289][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.696308][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.707093][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 352.717486][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.789186][ T5851] Bluetooth: hci0: command tx timeout [ 353.338059][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.350280][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.360440][ T3522] bond0 (unregistering): Released all slaves [ 353.562622][T13194] dummy0: entered promiscuous mode [ 353.570935][T13193] dummy0: left promiscuous mode [ 353.612547][T13170] lo speed is unknown, defaulting to 1000 [ 353.924020][ T3522] hsr_slave_0: left promiscuous mode [ 353.934470][ T3522] hsr_slave_1: left promiscuous mode [ 353.939924][T13199] netlink: 'syz.3.1836': attribute type 4 has an invalid length. [ 353.966886][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.974346][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.983638][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.010318][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 354.019425][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.073556][ T3522] veth1_macvtap: left promiscuous mode [ 354.085393][ T3522] veth0_macvtap: left promiscuous mode [ 354.091386][ T3522] veth1_vlan: left promiscuous mode [ 354.096856][ T3522] veth0_vlan: left promiscuous mode [ 354.524420][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 354.574318][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 354.791319][ T5851] Bluetooth: hci1: command tx timeout [ 354.866417][ T5851] Bluetooth: hci0: command tx timeout [ 355.206210][T13212] lo speed is unknown, defaulting to 1000 [ 355.235274][T13145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.279659][T13215] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1839'. [ 355.300645][T13145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.366833][T13145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.439784][T13145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.542709][T13170] chnl_net:caif_netlink_parms(): no params data found [ 355.722000][T13230] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 355.771916][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.780205][T13170] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.790016][T13170] bridge_slave_0: entered allmulticast mode [ 355.797472][T13170] bridge_slave_0: entered promiscuous mode [ 355.811723][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.821870][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.837247][T13170] bridge_slave_1: entered allmulticast mode [ 355.844294][T13170] bridge_slave_1: entered promiscuous mode [ 355.863726][T13235] FAULT_INJECTION: forcing a failure. [ 355.863726][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.906855][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.1.1842 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 355.906879][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.906888][T13235] Call Trace: [ 355.906894][T13235] [ 355.906901][T13235] dump_stack_lvl+0x241/0x360 [ 355.906927][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.906944][T13235] ? __pfx__printk+0x10/0x10 [ 355.906964][T13235] ? __pfx_lock_release+0x10/0x10 [ 355.906994][T13235] should_fail_ex+0x40a/0x550 [ 355.907021][T13235] _copy_from_user+0x2d/0xb0 [ 355.907043][T13235] copy_msghdr_from_user+0xae/0x680 [ 355.907070][T13235] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 355.907088][T13235] ? __fget_files+0x2a/0x410 [ 355.907113][T13235] ? __fget_files+0x2a/0x410 [ 355.907142][T13235] __sys_sendmmsg+0x32b/0x720 [ 355.907171][T13235] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.907198][T13235] ? __pfx_lock_release+0x10/0x10 [ 355.907218][T13235] ? kstrtouint_from_user+0x128/0x190 [ 355.907254][T13235] ? ksys_write+0x22a/0x2b0 [ 355.907278][T13235] ? __pfx_lock_release+0x10/0x10 [ 355.907306][T13235] ? sb_end_write+0xe9/0x1c0 [ 355.907328][T13235] ? vfs_write+0x7fa/0xd10 [ 355.907347][T13235] ? __mutex_unlock_slowpath+0x227/0x800 [ 355.907393][T13235] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.907418][T13235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.907441][T13235] ? do_syscall_64+0x100/0x230 [ 355.907464][T13235] __x64_sys_sendmmsg+0xa0/0xb0 [ 355.907483][T13235] do_syscall_64+0xf3/0x230 [ 355.907502][T13235] ? clear_bhb_loop+0x35/0x90 [ 355.907525][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.907544][T13235] RIP: 0033:0x7fa007d8d169 [ 355.907560][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.907574][T13235] RSP: 002b:00007fa008baa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.907593][T13235] RAX: ffffffffffffffda RBX: 00007fa007fa6080 RCX: 00007fa007d8d169 [ 355.907605][T13235] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000004 [ 355.907616][T13235] RBP: 00007fa008baa090 R08: 0000000000000000 R09: 0000000000000000 [ 355.907626][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.907636][T13235] R13: 0000000000000000 R14: 00007fa007fa6080 R15: 00007ffe2d833208 [ 355.907662][T13235] [ 356.191284][T13145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.208077][T13145] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.220176][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.227384][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.304558][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.311798][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.372567][T13170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.400020][T13170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.494651][T13248] netlink: 'syz.1.1844': attribute type 3 has an invalid length. [ 356.503464][T13248] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1844'. [ 356.589089][T13252] netlink: 'syz.3.1847': attribute type 21 has an invalid length. [ 356.648806][T13170] team0: Port device team_slave_0 added [ 356.757817][T13170] team0: Port device team_slave_1 added [ 356.843926][T13254] lo speed is unknown, defaulting to 1000 [ 356.867726][ T5851] Bluetooth: hci1: command tx timeout [ 356.946727][ T5851] Bluetooth: hci0: command tx timeout [ 356.974951][T13170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.982109][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.010615][T13170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.127596][T13170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.151301][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.236042][T13170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.279523][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1853'. [ 357.436190][T13170] hsr_slave_0: entered promiscuous mode [ 357.443601][T13170] hsr_slave_1: entered promiscuous mode [ 357.491704][T13170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.501886][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 357.526439][T13170] Cannot create hsr debugfs directory [ 357.769164][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.816979][T13295] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:0 [ 358.158812][T13298] syzkaller1: entered promiscuous mode [ 358.164356][T13298] syzkaller1: entered allmulticast mode [ 358.444282][T13145] veth0_vlan: entered promiscuous mode [ 358.507498][T13145] veth1_vlan: entered promiscuous mode [ 358.580354][T13331] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 358.672044][T13145] veth0_macvtap: entered promiscuous mode [ 358.696965][T13329] lo speed is unknown, defaulting to 1000 [ 358.746128][T13339] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 358.768902][T13145] veth1_macvtap: entered promiscuous mode [ 358.869066][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.880942][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.890890][T13145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.924580][T13145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.934097][T13145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.942215][T13349] SET target dimension over the limit! [ 358.942896][T13145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.951568][ T5851] Bluetooth: hci1: command tx timeout [ 358.964332][T13347] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1876'. [ 359.026367][ T5851] Bluetooth: hci0: command tx timeout [ 359.430437][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.430947][T13368] lo speed is unknown, defaulting to 1000 [ 359.450488][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.464990][T13170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.507481][T13170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.546928][T13170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.609128][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.625762][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.626984][T13170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.020410][T13170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.072929][T13393] FAULT_INJECTION: forcing a failure. [ 360.072929][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 360.086154][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.3.1889 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 360.086177][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.086186][T13393] Call Trace: [ 360.086192][T13393] [ 360.086198][T13393] dump_stack_lvl+0x241/0x360 [ 360.086227][T13393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.086243][T13393] ? __pfx__printk+0x10/0x10 [ 360.086260][T13393] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 360.086282][T13393] ? __pfx___might_resched+0x10/0x10 [ 360.086306][T13393] should_fail_ex+0x40a/0x550 [ 360.086331][T13393] should_failslab+0xac/0x100 [ 360.086352][T13393] kmem_cache_alloc_node_noprof+0x77/0x380 [ 360.086372][T13393] ? __alloc_skb+0x1c3/0x440 [ 360.086392][T13393] __alloc_skb+0x1c3/0x440 [ 360.086409][T13393] ? __pfx___alloc_skb+0x10/0x10 [ 360.086425][T13393] ? netlink_autobind+0xd6/0x2f0 [ 360.086446][T13393] ? netlink_autobind+0x2b0/0x2f0 [ 360.086469][T13393] netlink_sendmsg+0x634/0xcb0 [ 360.086499][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.086522][T13393] ? aa_sock_msg_perm+0x91/0x160 [ 360.086549][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.086568][T13393] __sock_sendmsg+0x221/0x270 [ 360.086590][T13393] ____sys_sendmsg+0x53a/0x860 [ 360.086613][T13393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.086627][T13393] ? __fget_files+0x2a/0x410 [ 360.086649][T13393] ? __fget_files+0x2a/0x410 [ 360.086674][T13393] __sys_sendmmsg+0x36a/0x720 [ 360.086696][T13393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.086721][T13393] ? __pfx_lock_release+0x10/0x10 [ 360.086741][T13393] ? kstrtouint_from_user+0x128/0x190 [ 360.086775][T13393] ? ksys_write+0x22a/0x2b0 [ 360.086790][T13393] ? __pfx_lock_release+0x10/0x10 [ 360.086815][T13393] ? sb_end_write+0xe9/0x1c0 [ 360.086832][T13393] ? vfs_write+0x7fa/0xd10 [ 360.086848][T13393] ? __mutex_unlock_slowpath+0x227/0x800 [ 360.086890][T13393] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.086912][T13393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.086932][T13393] ? do_syscall_64+0x100/0x230 [ 360.086953][T13393] __x64_sys_sendmmsg+0xa0/0xb0 [ 360.086971][T13393] do_syscall_64+0xf3/0x230 [ 360.086988][T13393] ? clear_bhb_loop+0x35/0x90 [ 360.087011][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.087030][T13393] RIP: 0033:0x7ff45c98d169 [ 360.087053][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.087066][T13393] RSP: 002b:00007ff45d70c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.087082][T13393] RAX: ffffffffffffffda RBX: 00007ff45cba5fa0 RCX: 00007ff45c98d169 [ 360.087093][T13393] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 360.087103][T13393] RBP: 00007ff45d70c090 R08: 0000000000000000 R09: 0000000000000000 [ 360.087113][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.087123][T13393] R13: 0000000000000000 R14: 00007ff45cba5fa0 R15: 00007ffc688845d8 [ 360.087150][T13393] [ 360.539013][T13170] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.551150][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.558329][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.573164][T13101] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.580328][T13101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.772559][T13170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.811651][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.853394][T13170] veth0_vlan: entered promiscuous mode [ 360.863941][T13170] veth1_vlan: entered promiscuous mode [ 360.892354][T13170] veth0_macvtap: entered promiscuous mode [ 360.900509][T13170] veth1_macvtap: entered promiscuous mode [ 360.915108][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.925845][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.943495][T13170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.955631][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.966598][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.977952][T13170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.004758][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.023589][T13170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.033041][ T5851] Bluetooth: hci1: command tx timeout [ 361.038799][T13170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.047791][T13170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.056643][T13170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.115410][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.129076][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.155959][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.188275][ T4932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.196152][ T4932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.228315][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.354725][ T35] bridge_slave_1: left allmulticast mode [ 361.360662][ T35] bridge_slave_1: left promiscuous mode [ 361.366830][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.375279][ T35] bridge_slave_0: left allmulticast mode [ 361.381431][ T35] bridge_slave_0: left promiscuous mode [ 361.388185][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.761776][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.774044][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.786085][ T35] bond0 (unregistering): Released all slaves [ 362.130993][ T35] hsr_slave_0: left promiscuous mode [ 362.180187][ T35] hsr_slave_1: left promiscuous mode [ 362.219117][T13412] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 362.314584][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.338739][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.365390][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.416984][T13417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.458811][T13417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.507272][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.526549][T13417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.762439][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.771880][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.780024][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.794293][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.801979][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.809567][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.860188][ T35] veth1_macvtap: left promiscuous mode [ 362.865906][ T35] veth0_macvtap: left promiscuous mode [ 362.880441][ T35] veth1_vlan: left promiscuous mode [ 362.885865][ T35] veth0_vlan: left promiscuous mode [ 363.347983][ T35] team0 (unregistering): Port device team_slave_1 removed [ 363.402882][ T35] team0 (unregistering): Port device team_slave_0 removed [ 363.849986][T13422] lo speed is unknown, defaulting to 1000 [ 364.098260][T13422] chnl_net:caif_netlink_parms(): no params data found [ 364.151283][T13422] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.158984][T13422] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.166199][T13422] bridge_slave_0: entered allmulticast mode [ 364.173329][T13422] bridge_slave_0: entered promiscuous mode [ 364.181237][T13422] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.188859][T13422] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.196098][T13422] bridge_slave_1: entered allmulticast mode [ 364.203421][T13422] bridge_slave_1: entered promiscuous mode [ 364.232964][T13422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.245763][T13422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.275827][T13422] team0: Port device team_slave_0 added [ 364.283310][T13422] team0: Port device team_slave_1 added [ 364.304542][T13422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.311844][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.338145][T13422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.351572][T13422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.359796][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.386130][T13422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.430185][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.465160][T13422] hsr_slave_0: entered promiscuous mode [ 364.471684][T13422] hsr_slave_1: entered promiscuous mode [ 364.481248][T13422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.489735][T13422] Cannot create hsr debugfs directory [ 364.699065][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 364.708842][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 364.866988][ T5147] Bluetooth: hci0: command tx timeout [ 364.874733][T13448] netlink: 'syz.1.1899': attribute type 6 has an invalid length. [ 364.887247][T13448] netlink: 'syz.1.1899': attribute type 7 has an invalid length. [ 364.899438][T13451] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 364.913731][T13448] netlink: 'syz.1.1899': attribute type 8 has an invalid length. [ 365.006401][T13448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1899'. [ 365.075442][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.087249][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.095874][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.100761][T13422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.112228][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.115080][T13422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.132365][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.140242][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.143098][T13422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.180241][T13422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.232151][T13456] lo speed is unknown, defaulting to 1000 [ 365.368419][T13422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.379304][T13460] lo speed is unknown, defaulting to 1000 [ 365.453651][T13422] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.502888][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.510066][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.533471][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.540750][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.707036][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.768572][T13456] chnl_net:caif_netlink_parms(): no params data found [ 365.903189][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.939988][T13482] geneve3: entered promiscuous mode [ 365.945568][T13482] geneve3: entered allmulticast mode [ 366.010483][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.152490][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.180293][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.187729][T13456] bridge_slave_0: entered allmulticast mode [ 366.195450][T13456] bridge_slave_0: entered promiscuous mode [ 366.239958][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.247477][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.255073][T13456] bridge_slave_1: entered allmulticast mode [ 366.264596][T13456] bridge_slave_1: entered promiscuous mode [ 366.331192][T13498] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 366.339497][T13498] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 366.350404][ T35] bridge_slave_1: left allmulticast mode [ 366.356087][ T35] bridge_slave_1: left promiscuous mode [ 366.386858][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.415648][ T35] bridge_slave_0: left allmulticast mode [ 366.430040][ T35] bridge_slave_0: left promiscuous mode [ 366.436949][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.479963][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 366.515879][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 366.574290][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1912'. [ 366.600480][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1910'. [ 366.922513][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.934176][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.945656][ T35] bond0 (unregistering): Released all slaves [ 366.956110][ T5147] Bluetooth: hci0: command tx timeout [ 366.976007][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.020765][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.186524][ T5147] Bluetooth: hci1: command tx timeout [ 367.265030][T13456] team0: Port device team_slave_0 added [ 367.286104][T13456] team0: Port device team_slave_1 added [ 367.313619][T13526] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 367.339421][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.349467][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.375949][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.490477][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.514439][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.542658][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.594537][T13534] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 367.602617][T13534] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 367.629742][T13534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 367.638906][ T35] hsr_slave_0: left promiscuous mode [ 367.639001][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 367.653592][ T35] hsr_slave_1: left promiscuous mode [ 367.653871][T13534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1916'. [ 367.668894][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.691359][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.699231][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.713394][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.740471][ T35] veth1_macvtap: left promiscuous mode [ 367.746000][ T35] veth0_macvtap: left promiscuous mode [ 367.751940][ T35] veth1_vlan: left promiscuous mode [ 367.758059][ T35] veth0_vlan: left promiscuous mode [ 368.437677][ T35] team0 (unregistering): Port device team_slave_1 removed [ 368.521852][ T35] team0 (unregistering): Port device team_slave_0 removed [ 369.026453][ T5147] Bluetooth: hci0: command tx timeout [ 369.218634][T13422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.266499][ T5147] Bluetooth: hci1: command tx timeout [ 371.109066][ T5147] Bluetooth: hci0: command tx timeout [ 371.170128][T13541] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 371.186719][T13541] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 371.347190][ T5147] Bluetooth: hci1: command tx timeout [ 371.353494][T13456] hsr_slave_0: entered promiscuous mode [ 371.367172][T13456] hsr_slave_1: entered promiscuous mode [ 371.373350][T13456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.392765][T13456] Cannot create hsr debugfs directory [ 371.514652][T13573] __nla_validate_parse: 2 callbacks suppressed [ 371.514670][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'. [ 371.641687][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 371.741962][T13579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 371.788969][T13579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 371.812027][T13422] veth0_vlan: entered promiscuous mode [ 371.835423][T13589] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1933'. [ 371.888283][T13591] sctp: [Deprecated]: syz.4.1934 (pid 13591) Use of int in max_burst socket option deprecated. [ 371.888283][T13591] Use struct sctp_assoc_value instead [ 371.922144][T13589] gretap0: left promiscuous mode [ 371.932428][T13422] veth1_vlan: entered promiscuous mode [ 372.130713][T13598] lo speed is unknown, defaulting to 1000 [ 372.217918][T13422] veth0_macvtap: entered promiscuous mode [ 372.229155][T13422] veth1_macvtap: entered promiscuous mode [ 372.241298][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 372.314241][T13604] netlink: 'syz.1.1936': attribute type 10 has an invalid length. [ 372.403507][T13422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.421319][T13598] netlink: 'syz.4.1937': attribute type 4 has an invalid length. [ 372.443661][T13422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.506088][T13422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.565385][T13422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.581938][T13422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.592116][T13422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.765703][T13617] netlink: 'syz.4.1943': attribute type 39 has an invalid length. [ 373.126193][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.166710][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.291539][T13456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.312912][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.335077][T13456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.343014][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.380766][T13456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.426602][ T5147] Bluetooth: hci1: command tx timeout [ 373.446538][T13456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.641909][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.743213][T13657] lo speed is unknown, defaulting to 1000 [ 373.777574][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.807523][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.814645][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.848886][T13657] netlink: 'syz.4.1951': attribute type 13 has an invalid length. [ 373.858040][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1951'. [ 373.994929][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.002119][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.426576][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'. [ 374.771904][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.810471][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.844414][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.909032][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.923738][T13456] veth0_vlan: entered promiscuous mode [ 374.942318][T13456] veth1_vlan: entered promiscuous mode [ 374.987055][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.014351][T13456] veth0_macvtap: entered promiscuous mode [ 375.025093][T13456] veth1_macvtap: entered promiscuous mode [ 375.057563][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.068405][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.079974][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.093601][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.105065][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.130489][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.161473][T13456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.174895][T13456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.183625][T13456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.193491][T13456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.223222][ T54] bridge_slave_1: left allmulticast mode [ 375.230616][ T54] bridge_slave_1: left promiscuous mode [ 375.236379][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.244619][ T54] bridge_slave_0: left allmulticast mode [ 375.250787][ T54] bridge_slave_0: left promiscuous mode [ 375.256568][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.582142][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.593349][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.603622][ T54] bond0 (unregistering): Released all slaves [ 375.699749][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.707822][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.761521][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.769641][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.916149][ T54] hsr_slave_0: left promiscuous mode [ 375.922552][ T54] hsr_slave_1: left promiscuous mode [ 375.928612][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.936039][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.945192][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.952983][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.977480][ T54] veth1_macvtap: left promiscuous mode [ 375.983005][ T54] veth0_macvtap: left promiscuous mode [ 375.989981][ T54] veth1_vlan: left promiscuous mode [ 375.995277][ T54] veth0_vlan: left promiscuous mode [ 376.462318][T13683] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 376.509901][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 376.597963][T13693] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 376.723588][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 376.751566][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.761880][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.771461][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.791800][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.807299][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 376.814712][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.825002][ T54] team0 (unregistering): Port device team_slave_1 removed [ 376.894777][ T54] team0 (unregistering): Port device team_slave_0 removed [ 377.474106][T13683] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 377.479477][T13694] gretap3: entered promiscuous mode [ 377.493570][T13694] gretap3: entered allmulticast mode [ 377.544208][T13702] macsec0: entered promiscuous mode [ 377.610152][T13698] lo speed is unknown, defaulting to 1000 [ 377.761887][T13698] chnl_net:caif_netlink_parms(): no params data found [ 377.813316][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.820691][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.831850][T13698] bridge_slave_0: entered allmulticast mode [ 377.838666][T13698] bridge_slave_0: entered promiscuous mode [ 377.845827][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.853046][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.860401][T13698] bridge_slave_1: entered allmulticast mode [ 377.867615][T13698] bridge_slave_1: entered promiscuous mode [ 377.896552][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.908954][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.962037][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.982619][T13698] team0: Port device team_slave_0 added [ 377.991970][T13698] team0: Port device team_slave_1 added [ 378.013617][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.020877][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.047316][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.063093][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.070755][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.096960][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.128744][T13698] hsr_slave_0: entered promiscuous mode [ 378.134900][T13698] hsr_slave_1: entered promiscuous mode [ 378.140892][T13698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.149027][T13698] Cannot create hsr debugfs directory [ 378.392056][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.464954][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.494054][T13698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.504696][T13698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 378.514388][T13698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 378.523944][T13698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 378.553815][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.634351][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.677486][ T54] bridge_slave_1: left allmulticast mode [ 378.683671][ T54] bridge_slave_1: left promiscuous mode [ 378.689468][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.701976][ T54] bridge_slave_0: left allmulticast mode [ 378.708661][ T54] bridge_slave_0: left promiscuous mode [ 378.714356][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.869329][ T5147] Bluetooth: hci0: command tx timeout [ 379.277376][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.300784][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.308615][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.309430][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.328615][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.336187][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.340675][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.354387][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.356778][ T54] bond0 (unregistering): Released all slaves [ 379.377945][T13732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.380451][T13723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1961'. [ 379.479482][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.643952][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.651417][T13101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.667739][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1964'. [ 379.677180][T13737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1964'. [ 379.686150][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1964'. [ 379.690542][T13736] lo speed is unknown, defaulting to 1000 [ 379.704997][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1964'. [ 379.710978][T13101] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.721104][T13101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.809002][ T54] hsr_slave_0: left promiscuous mode [ 379.815107][ T54] hsr_slave_1: left promiscuous mode [ 379.821101][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.828920][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.838604][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.846045][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.868701][ T54] veth1_macvtap: left promiscuous mode [ 379.874262][ T54] veth0_macvtap: left promiscuous mode [ 379.880011][ T54] veth1_vlan: left promiscuous mode [ 379.885279][ T54] veth0_vlan: left promiscuous mode [ 380.343879][ T54] team0 (unregistering): Port device team_slave_1 removed [ 380.394056][ T54] team0 (unregistering): Port device team_slave_0 removed [ 380.946744][ T5851] Bluetooth: hci0: command tx timeout [ 381.021682][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.082631][T13698] veth0_vlan: entered promiscuous mode [ 381.096925][T13698] veth1_vlan: entered promiscuous mode [ 381.125196][T13698] veth0_macvtap: entered promiscuous mode [ 381.141580][T13698] veth1_macvtap: entered promiscuous mode [ 381.169057][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.182541][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.194926][T13698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.203874][T13698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.212688][T13698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.221931][T13698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.281859][ T4932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.294689][ T4932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.314002][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.322359][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.805800][T13757] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 381.848932][T13757] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1970'. [ 381.943279][T13763] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1971'. [ 381.954161][T13763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1971'. [ 381.964634][T13763] nbd: device at index 4 is going down [ 381.974171][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 381.983350][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 381.996344][T13763] netlink: 'syz.4.1971': attribute type 13 has an invalid length. [ 382.128537][T13770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1974'. [ 382.230771][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 382.269377][T13773] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 382.300203][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.312742][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.321820][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.331041][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.338847][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 382.346185][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.403960][T13776] lo speed is unknown, defaulting to 1000 [ 382.729699][T13101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.800739][T13776] chnl_net:caif_netlink_parms(): no params data found [ 382.944558][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.956438][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.963697][T13776] bridge_slave_0: entered allmulticast mode [ 382.970786][T13776] bridge_slave_0: entered promiscuous mode [ 382.978932][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.986506][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.993854][T13776] bridge_slave_1: entered allmulticast mode [ 383.003508][T13776] bridge_slave_1: entered promiscuous mode [ 383.052054][T13776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.074750][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.122253][T13776] team0: Port device team_slave_0 added [ 383.139501][T13776] team0: Port device team_slave_1 added [ 383.209351][T13101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.239386][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.246717][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.273333][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.285863][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.293222][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.326341][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.391591][T13776] hsr_slave_0: entered promiscuous mode [ 383.401246][T13776] hsr_slave_1: entered promiscuous mode [ 383.408620][T13776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.417459][T13776] Cannot create hsr debugfs directory [ 383.772614][T13776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.781569][T13776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.809459][T13101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.829924][T13776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.840477][T13776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.858684][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.865794][T13776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.873190][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.880286][T13776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.912379][T13101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.932138][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.941292][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.999969][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.041694][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.048953][T13101] bridge_slave_1: left allmulticast mode [ 384.054616][T13101] bridge_slave_1: left promiscuous mode [ 384.060945][T13101] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.075497][T13101] bridge_slave_0: left allmulticast mode [ 384.082500][T13101] bridge_slave_0: left promiscuous mode [ 384.095043][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.396658][ T5147] Bluetooth: hci0: command tx timeout [ 384.678945][T13803] netlink: 'syz.4.1980': attribute type 2 has an invalid length. [ 384.947621][T13101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.960344][T13101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.980628][T13101] bond0 (unregistering): Released all slaves [ 385.064349][T13812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1985'. [ 385.092764][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.103108][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.112093][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.124521][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.132551][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.141676][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.160580][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 385.174278][T13818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1985'. [ 385.241000][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.248176][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.277364][T13814] lo speed is unknown, defaulting to 1000 [ 385.312395][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.319526][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.422140][T13101] hsr_slave_0: left promiscuous mode [ 385.430604][T13101] hsr_slave_1: left promiscuous mode [ 385.436417][T13101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.444021][T13101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.456975][T13101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.464412][T13101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.490907][T13101] veth1_macvtap: left promiscuous mode [ 385.496552][T13101] veth0_macvtap: left promiscuous mode [ 385.502106][T13101] veth1_vlan: left promiscuous mode [ 385.507828][T13101] veth0_vlan: left promiscuous mode [ 385.990265][T13101] team0 (unregistering): Port device team_slave_1 removed [ 386.040883][T13101] team0 (unregistering): Port device team_slave_0 removed [ 386.193293][T13832] netlink: 'syz.1.1989': attribute type 39 has an invalid length. [ 386.476838][ T5838] Bluetooth: hci0: command tx timeout [ 386.881019][T13814] chnl_net:caif_netlink_parms(): no params data found [ 387.157351][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.186581][ T5838] Bluetooth: hci1: command tx timeout [ 387.199570][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.224281][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1996'. [ 387.234286][T13814] bridge_slave_0: entered allmulticast mode [ 387.244524][T13814] bridge_slave_0: entered promiscuous mode [ 387.274594][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.282498][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.290316][T13814] bridge_slave_1: entered allmulticast mode [ 387.297427][T13814] bridge_slave_1: entered promiscuous mode [ 387.312369][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 387.359653][T13814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.391455][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.413866][T13814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.491866][T13814] team0: Port device team_slave_0 added [ 387.503432][T13776] veth0_vlan: entered promiscuous mode [ 387.521530][T13814] team0: Port device team_slave_1 added [ 387.563672][T13814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.572733][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.599899][T13814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.614506][T13814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.622470][T13875] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1999'. [ 387.631808][T13814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.660567][T13814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.706703][T13874] team0: Port device gtp0 added [ 387.729545][T13776] veth1_vlan: entered promiscuous mode [ 387.783109][T13814] hsr_slave_0: entered promiscuous mode [ 387.798764][T13879] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 387.808472][T13814] hsr_slave_1: entered promiscuous mode [ 387.821615][T13814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.835471][T13814] Cannot create hsr debugfs directory [ 387.880604][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2002'. [ 387.897213][T13776] veth0_macvtap: entered promiscuous mode [ 387.936597][T13776] veth1_macvtap: entered promiscuous mode [ 387.982042][T13776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.057040][T13776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.109645][T13776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.131488][T13776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.153929][T13776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.166196][T13776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.194883][T13893] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 388.502553][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.524090][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 388.527120][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.546442][ T5838] Bluetooth: hci0: command tx timeout [ 388.587649][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.595611][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.833460][T13922] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2009'. [ 388.989854][T13814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.004580][T13814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.023851][T13814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.054318][T13814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.230609][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.267374][ T5838] Bluetooth: hci1: command tx timeout [ 389.448682][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.528938][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.555262][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.576115][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.588737][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.595843][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.620686][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.641271][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.648389][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.802973][ T54] bridge_slave_1: left allmulticast mode [ 389.810797][ T54] bridge_slave_1: left promiscuous mode [ 389.816849][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.825180][ T54] bridge_slave_0: left allmulticast mode [ 389.831545][ T54] bridge_slave_0: left promiscuous mode [ 389.837384][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.191899][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.203397][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.213738][ T54] bond0 (unregistering): Released all slaves [ 390.224036][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.264661][T13814] veth0_vlan: entered promiscuous mode [ 390.279231][T13814] veth1_vlan: entered promiscuous mode [ 390.351942][T13814] veth0_macvtap: entered promiscuous mode [ 390.360178][T13814] veth1_macvtap: entered promiscuous mode [ 390.374593][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.387417][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.398469][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.416144][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.429821][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.441107][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.479354][T13814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.488641][T13814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.498103][T13814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.506852][T13814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.544344][ T54] hsr_slave_0: left promiscuous mode [ 390.551301][ T54] hsr_slave_1: left promiscuous mode [ 390.557641][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.565235][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.573573][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.581116][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.603790][ T54] veth1_macvtap: left promiscuous mode [ 390.609483][ T54] veth0_macvtap: left promiscuous mode [ 390.615003][ T54] veth1_vlan: left promiscuous mode [ 390.620386][ T54] veth0_vlan: left promiscuous mode [ 391.036930][ T54] team0 (unregistering): Port device team_slave_1 removed [ 391.080101][ T54] team0 (unregistering): Port device team_slave_0 removed [ 391.347625][ T5838] Bluetooth: hci1: command tx timeout [ 391.587706][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 391.632252][T13944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2013'. [ 391.766060][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 391.795146][T13938] syzkaller1: entered promiscuous mode [ 391.800873][T13938] syzkaller1: entered allmulticast mode [ 391.834913][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.846795][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.869575][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.895149][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.916440][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.927958][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.115237][T13950] lo speed is unknown, defaulting to 1000 [ 392.184152][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.213184][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.354205][T13101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.376431][T13101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.564776][T13978] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 392.586708][T13978] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2020'. [ 392.612468][T13982] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 392.642632][T13973] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 392.653041][T13973] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 392.664420][T13973] bond4: (slave vti0): making interface the new active one [ 392.674627][T13973] bond4: (slave vti0): Enslaving as an active interface with an up link [ 392.685847][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2021'. [ 392.734090][T13973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.814894][T13950] chnl_net:caif_netlink_parms(): no params data found [ 392.870891][T13950] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.878861][T13950] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.886077][T13950] bridge_slave_0: entered allmulticast mode [ 392.893683][T13950] bridge_slave_0: entered promiscuous mode [ 392.901597][T13950] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.908921][T13950] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.916104][T13950] bridge_slave_1: entered allmulticast mode [ 392.923928][T13950] bridge_slave_1: entered promiscuous mode [ 392.955546][T13950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.968147][T13950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.999160][T13950] team0: Port device team_slave_0 added [ 393.006813][T13950] team0: Port device team_slave_1 added [ 393.030973][T13950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.039644][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.065923][T13950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.078499][T13950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.085555][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.114242][T13950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.163180][T13950] hsr_slave_0: entered promiscuous mode [ 393.170060][T13950] hsr_slave_1: entered promiscuous mode [ 393.176043][T13950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.184537][T13950] Cannot create hsr debugfs directory [ 393.299987][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.324064][T13979] [ 393.326424][T13979] ============================================ [ 393.332554][T13979] WARNING: possible recursive locking detected [ 393.338687][T13979] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 393.345774][T13979] -------------------------------------------- [ 393.351898][T13979] syz.4.2021/13979 is trying to acquire lock: [ 393.357939][T13979] ffff88806d5501e0 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 393.367487][T13979] [ 393.367487][T13979] but task is already holding lock: [ 393.374828][T13979] ffff88807a8f91e0 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 393.384369][T13979] [ 393.384369][T13979] other info that might help us debug this: [ 393.392418][T13979] Possible unsafe locking scenario: [ 393.392418][T13979] [ 393.399856][T13979] CPU0 [ 393.403122][T13979] ---- [ 393.406382][T13979] lock(&qs->lock); [ 393.410262][T13979] lock(&qs->lock); [ 393.414141][T13979] [ 393.414141][T13979] *** DEADLOCK *** [ 393.414141][T13979] [ 393.422271][T13979] May be due to missing lock nesting notation [ 393.422271][T13979] [ 393.430572][T13979] 4 locks held by syz.4.2021/13979: [ 393.435751][T13979] #0: ffff888035f26ea0 (&child->perf_event_mutex){+.+.}-{4:4}, at: perf_event_exit_task+0x9b/0xaa0 [ 393.446567][T13979] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 393.455988][T13979] #2: ffff88807a8f91e0 (&qs->lock){-.-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660 [ 393.465985][T13979] #3: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 393.475359][T13979] [ 393.475359][T13979] stack backtrace: [ 393.481228][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.4.2021 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 393.481241][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.481247][T13979] Call Trace: [ 393.481253][T13979] [ 393.481260][T13979] dump_stack_lvl+0x241/0x360 [ 393.481272][T13979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.481283][T13979] ? __pfx__printk+0x10/0x10 [ 393.481292][T13979] ? lockdep_unlock+0x16a/0x300 [ 393.481308][T13979] print_deadlock_bug+0x483/0x620 [ 393.481320][T13979] validate_chain+0x15e2/0x5920 [ 393.481334][T13979] ? validate_chain+0x11e/0x5920 [ 393.481344][T13979] ? __pfx_validate_chain+0x10/0x10 [ 393.481354][T13979] ? __pfx_validate_chain+0x10/0x10 [ 393.481364][T13979] ? mark_lock+0x9a/0x360 [ 393.481373][T13979] ? __pfx_validate_chain+0x10/0x10 [ 393.481383][T13979] ? __lock_acquire+0x1397/0x2100 [ 393.481399][T13979] ? __pfx_validate_chain+0x10/0x10 [ 393.481409][T13979] ? __lock_acquire+0x1397/0x2100 [ 393.481424][T13979] ? validate_chain+0x11e/0x5920 [ 393.481439][T13979] ? mark_lock+0x9a/0x360 [ 393.481449][T13979] __lock_acquire+0x1397/0x2100 [ 393.481466][T13979] lock_acquire+0x1ed/0x550 [ 393.481480][T13979] ? queue_stack_map_push_elem+0x1b2/0x660 [ 393.481494][T13979] ? __pfx_validate_chain+0x10/0x10 [ 393.481505][T13979] ? __pfx_lock_acquire+0x10/0x10 [ 393.481519][T13979] ? mark_lock+0x9a/0x360 [ 393.481528][T13979] ? __lock_acquire+0x1397/0x2100 [ 393.481544][T13979] _raw_spin_lock_irqsave+0xd5/0x120 [ 393.481554][T13979] ? queue_stack_map_push_elem+0x1b2/0x660 [ 393.481567][T13979] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 393.481578][T13979] queue_stack_map_push_elem+0x1b2/0x660 [ 393.481594][T13979] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 393.481608][T13979] ? __pfx___cant_migrate+0x10/0x10 [ 393.481620][T13979] ? mark_lock+0x9a/0x360 [ 393.481630][T13979] ? bpf_trace_run2+0x1fc/0x540 [ 393.481643][T13979] bpf_prog_216c997a1f42e404+0x40/0x44 [ 393.481653][T13979] bpf_trace_run2+0x2ec/0x540 [ 393.481666][T13979] ? __pfx_bpf_trace_run2+0x10/0x10 [ 393.481680][T13979] ? __bpf_trace_contention_end+0x14f/0x230 [ 393.481691][T13979] __bpf_trace_contention_end+0x170/0x230 [ 393.481703][T13979] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 393.481716][T13979] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 393.481727][T13979] __traceiter_contention_end+0x7b/0xb0 [ 393.481737][T13979] trace_contention_end+0x118/0x140 [ 393.481749][T13979] __pv_queued_spin_lock_slowpath+0xb7e/0xdb0 [ 393.481764][T13979] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 393.481779][T13979] queued_spin_lock_slowpath+0x42/0x50 [ 393.481792][T13979] do_raw_spin_lock+0x272/0x370 [ 393.481806][T13979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 393.481818][T13979] ? __lock_acquire+0x1397/0x2100 [ 393.481833][T13979] _raw_spin_lock_irqsave+0xe1/0x120 [ 393.481843][T13979] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 393.481854][T13979] queue_stack_map_push_elem+0x1b2/0x660 [ 393.481870][T13979] ? __pfx_queue_stack_map_push_elem+0x10/0x10 [ 393.481883][T13979] ? __pfx___cant_migrate+0x10/0x10 [ 393.481895][T13979] ? __pfx_register_lock_class+0x10/0x10 [ 393.481910][T13979] ? bpf_trace_run2+0x1fc/0x540 [ 393.481922][T13979] bpf_prog_216c997a1f42e404+0x40/0x44 [ 393.481930][T13979] bpf_trace_run2+0x2ec/0x540 [ 393.481942][T13979] ? __pfx_bpf_trace_run2+0x10/0x10 [ 393.481956][T13979] ? __bpf_trace_contention_end+0x14f/0x230 [ 393.481967][T13979] __bpf_trace_contention_end+0x170/0x230 [ 393.481978][T13979] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 393.481989][T13979] ? __mutex_trylock_common+0x183/0x2e0 [ 393.482002][T13979] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 393.482012][T13979] __traceiter_contention_end+0x7b/0xb0 [ 393.482022][T13979] trace_contention_end+0xf9/0x120 [ 393.482033][T13979] __mutex_lock+0x38d/0x1010 [ 393.482045][T13979] ? mark_lock+0x9a/0x360 [ 393.482055][T13979] ? __lock_acquire+0x1397/0x2100 [ 393.482068][T13979] ? perf_event_exit_task+0x9b/0xaa0 [ 393.482081][T13979] ? __pfx___mutex_lock+0x10/0x10 [ 393.482096][T13979] perf_event_exit_task+0x9b/0xaa0 [ 393.482108][T13979] ? __pfx_perf_event_exit_task+0x10/0x10 [ 393.482119][T13979] ? do_raw_spin_lock+0x14f/0x370 [ 393.482131][T13979] ? task_work_run+0x2c7/0x310 [ 393.482142][T13979] ? __pfx_task_work_run+0x10/0x10 [ 393.482152][T13979] ? rcu_is_watching+0x15/0xb0 [ 393.482164][T13979] do_exit+0xa3a/0x28e0 [ 393.482179][T13979] ? __pfx_do_exit+0x10/0x10 [ 393.482194][T13979] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 393.482208][T13979] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.482222][T13979] ? cgroup_freezing+0x2a8/0x350 [ 393.482236][T13979] do_group_exit+0x207/0x2c0 [ 393.482250][T13979] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.482259][T13979] ? lockdep_hardirqs_on+0x99/0x150 [ 393.482270][T13979] get_signal+0x168c/0x1720 [ 393.482284][T13979] ? __pfx_get_signal+0x10/0x10 [ 393.482296][T13979] arch_do_signal_or_restart+0x96/0x860 [ 393.482310][T13979] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 393.482321][T13979] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 393.482352][T13979] ? syscall_exit_to_user_mode+0xa3/0x340 [ 393.482364][T13979] syscall_exit_to_user_mode+0xce/0x340 [ 393.482376][T13979] do_syscall_64+0x100/0x230 [ 393.482389][T13979] ? clear_bhb_loop+0x35/0x90 [ 393.482404][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.482417][T13979] RIP: 0033:0x7ff99e38d169 [ 393.482426][T13979] Code: Unable to access opcode bytes at 0x7ff99e38d13f. [ 393.482434][T13979] RSP: 002b:00007ff99f10c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.482444][T13979] RAX: fffffffffffffe00 RBX: 00007ff99e5a6088 RCX: 00007ff99e38d169 [ 393.482452][T13979] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff99e5a6088 [ 393.482458][T13979] RBP: 00007ff99e5a6080 R08: 0000000000000000 R09: 0000000000000000 [ 393.482464][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff99e5a608c [ 393.482470][T13979] R13: 0000000000000000 R14: 00007ffe9458db30 R15: 00007ffe9458dc18 [ 393.482480][T13979] [ 394.061042][ T5147] Bluetooth: hci0: command tx timeout [ 394.312157][T13950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.320470][T13950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.328763][T13950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.346772][T13950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.383032][T13950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.395858][T13950] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.405705][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.412799][T13101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.423696][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.430798][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.512642][T13950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.536026][T13950] veth0_vlan: entered promiscuous mode [ 394.544880][T13950] veth1_vlan: entered promiscuous mode [ 394.562872][T13950] veth0_macvtap: entered promiscuous mode [ 394.570729][T13950] veth1_macvtap: entered promiscuous mode [ 394.581838][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.592983][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.603680][T13950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.613930][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.624677][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.635243][T13950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.645933][T13950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.654693][T13950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.664662][T13950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.673381][T13950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.695696][T13950] ieee80211 phy101: Selected rate control algorithm 'minstrel_ht' [ 394.713660][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.715029][T13950] ieee80211 phy102: Selected rate control algorithm 'minstrel_ht' [ 394.726490][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.745034][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.753989][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.889098][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.969236][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.039916][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.119425][ T11] bridge_slave_1: left allmulticast mode [ 395.125072][ T11] bridge_slave_1: left promiscuous mode [ 395.130930][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.139092][ T11] bridge_slave_0: left allmulticast mode [ 395.144730][ T11] bridge_slave_0: left promiscuous mode [ 395.150749][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.260992][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.272615][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.281919][ T11] bond0 (unregistering): Released all slaves [ 395.452745][ T11] hsr_slave_0: left promiscuous mode [ 395.458404][ T11] hsr_slave_1: left promiscuous mode [ 395.463952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.471808][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.479678][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.487182][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.495713][ T11] veth1_macvtap: left promiscuous mode [ 395.501608][ T11] veth0_macvtap: left promiscuous mode [ 395.507212][ T11] veth1_vlan: left promiscuous mode [ 395.512427][ T11] veth0_vlan: left promiscuous mode [ 395.635214][ T11] team0 (unregistering): Port device team_slave_1 removed [ 395.663408][ T11] team0 (unregistering): Port device team_slave_0 removed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.969863][T14008] bond4: entered promiscuous mode [ 395.974947][T14008] bond4: entered allmulticast mode [ 396.046693][T14008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.594755][ T11] bond4 (unregistering): (slave vti0): Releasing backup interface [ 396.661525][ T11] dvmrp1 (unregistering): left allmulticast mode [ 397.179633][ T11] bond0 (unregistering): Released all slaves [ 397.282448][ T11] bond1 (unregistering): Released all slaves [ 397.381697][ T11] bond2 (unregistering): Released all slaves [ 397.390074][ T11] bond3 (unregistering): Released all slaves [ 397.401137][ T11] bond4 (unregistering): Released all slaves [ 397.463059][ T11] tipc: Left network mode [ 397.726783][ T11] hsr_slave_0: left promiscuous mode [ 397.732720][ T11] hsr_slave_1: left promiscuous mode [ 397.749158][ T11] pimreg (unregistering): left allmulticast mode [ 398.501464][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.550456][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.589950][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.639345][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.858175][ T11] bridge_slave_1: left allmulticast mode [ 398.863934][ T11] bridge_slave_1: left promiscuous mode [ 398.869906][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.878873][ T11] bridge_slave_0: left allmulticast mode [ 398.884513][ T11] bridge_slave_0: left promiscuous mode [ 398.890451][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.003310][ T11] erspan0 (unregistering): left promiscuous mode [ 399.021980][ T11] gretap0 (unregistering): left promiscuous mode [ 399.390098][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.399960][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.409377][ T11] bond0 (unregistering): Released all slaves [ 399.521452][ T11] bond0 (unregistering): Released all slaves [ 399.530270][ T11] bond1 (unregistering): Released all slaves [ 399.628175][ T11] bond2 (unregistering): Released all slaves [ 399.723455][ T11] bond3 (unregistering): (slave veth3): Releasing active interface [ 399.731839][ T11] bond3 (unregistering): Released all slaves [ 399.740899][ T11] bond4 (unregistering): Released all slaves [ 399.822156][ T11] IPVS: stopping backup sync thread 8954 ... [ 400.068741][ T11] hsr_slave_0: left promiscuous mode [ 400.074448][ T11] hsr_slave_1: left promiscuous mode [ 400.080342][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.087833][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.095410][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.102889][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.112694][ T11] veth1_macvtap: left promiscuous mode [ 400.118245][ T11] veth0_macvtap: left promiscuous mode [ 400.123756][ T11] veth1_vlan: left promiscuous mode [ 400.129661][ T11] veth0_vlan: left promiscuous mode [ 400.216788][ T11] team0 (unregistering): Port device team_slave_1 removed [ 400.229606][ T11] team0 (unregistering): Port device team_slave_0 removed [ 401.059183][ T11] IPVS: stop unused estimator thread 0...