last executing test programs: 1m17.221871673s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 1m1.447865685s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 50.851442243s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 38.257967022s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 28.675830917s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 12.236620036s ago: executing program 2 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x40, 0xa6, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110080e9127cdd2eb5aec46aca7c7b27b74febc7fddb688d098adf275c0724bdb6a4c4e923815bf3931f27ef76d9f2ff8a77eab337e6de2f91e0029f707a927c43da9ea4a899a44923f6568cfbd506a0129ab473f2f8519bb032e5efd00e0a9452404cfea44f2858e21939f270ef106929e40b32", @ANYRES32=0x0, @ANYBLOB="2010000010000000140035006d616376746170300000000000000000"], 0x34}}, 0x0) 2.533978833s ago: executing program 3 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x38}}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x3, 0xc, &(0x7f0000001240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125415bf4c0", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.464317976s ago: executing program 0 (id=2663): socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec6", 0x6}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) splice(r1, 0x0, r3, 0x0, 0x10500, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0xffdd) socket$kcm(0x2, 0x5, 0x2) r5 = gettid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000040)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 2.404499399s ago: executing program 1 (id=2664): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=0xe, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000300)={0x200, 0xa0cd, 0x2f27, 0xa, 0x1, 0x97}, 0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa03019078032400004500000000010000fe010007ac1414aa64010102867dffffffff000be256b28c59881681fb520109020007651442eb000e7434954373561de584b703c80012e706d20bd224b8ac273a275315ab2deb0007cfa11cab1a06108475be6704e6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c8460000070fc8f46976e79ea788f03d9c3205000000"], 0x0) 2.19565966s ago: executing program 4 (id=2665): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009880)=@newlink={0x34, 0x10, 0x401, 0x4000000, 0x25dfdbfb, {0x0, 0x0, 0x2, 0x0, 0x40a18}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xfeab, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d605596e3d582a1c9322827787f4befc77fb80946a5bfccb7f13ed319ab96cbe2ff25f4a5efa691026d5ebd147fcd4a69476e1f2decbb48b2d7fe", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_ECN={0xffffffffffffffdf}]}}]}, 0x4c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$tipc(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301a400000000009500000000009c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r11, 0xfe, 0x0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, r8, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xbbb}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 2.009562332s ago: executing program 3 (id=2666): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000002) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x6}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x20, r6, 0x301, 0x70bd25, 0x25dfdbef, {{}, {@void, @void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0xc4) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0), 0x10) r7 = socket(0x10, 0x3, 0x0) recvfrom$llc(r7, 0x0, 0x0, 0x40010002, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000080)=0x401, 0x4) write(r7, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x3, 0x8, 0x3}) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000340), 0x4) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="0002002bbd7000fcdbdf250080b0a60000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x90) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_MULTICAST_SPEC={0x0, 0x3, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r13}, 0x10) close(r12) 1.740481766s ago: executing program 4 (id=2667): r0 = syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10000000000000000000060000091400030000000000000000000000000000000001140006006261746164765f736c6176655f3000000f040700756e636f6e66696e6564000014000300fe800000000000000000000008000000"], 0x60}, 0x2, 0x34005}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="adaa000000000000791018000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000d2", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdfa50100000008000200020000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x68}}, 0x28000010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="10002bbd7000fcdbdf2530000000050034000d00000005003300040000000a0001007770616e33000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000840}, 0x80) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) 1.643042205s ago: executing program 4 (id=2668): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000001c0)=0x201, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005e8ed05dd3237b5696625a960d3ece78210fa3b91d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) recvmsg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1}, 0x0) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44010) socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1.496183484s ago: executing program 3 (id=2669): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.44451062s ago: executing program 1 (id=2670): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x8}, 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@expire={0x1e8, 0x18, 0x300, 0x70bd29, 0x25dfdbff, {{{@in6=@private1, @in6=@empty, 0x4e23, 0x22, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x2e, r2, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0xa, 0x6, 0x80, 0xb924, 0x2, 0x5d03, 0x81}, {0x1, 0x2, 0x6, 0x2}, {0x80000001, 0x1, 0x3}, 0x70bd25, 0x3505, 0x2, 0x1c017c891ce4ce4c, 0x3, 0x26}, 0x6}, [@algo_auth={0xce, 0x1, {{'wp384-generic\x00'}, 0x430, "39d4545198bdb02c127f6cbe5e6abd15d4cbcec7cad9ba0862767cb941e075695a3992fc772e1f6c4e056ef8879f9d104826863b9faebc9059f413ca14489b440578b94a44d2854c2d4bda8b61d502d75bcb5803f814d0e97bba7dceff750e272ee29a05017b9856b9908d58d970e0a660a0f4140be1b8070caeeb211eb1d67fb4320365f5cf"}}, @offload={0xc, 0x1c, {r2, 0x2}}, @coaddr={0x14, 0xe, @in6=@private1}]}, 0x1e8}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@local, @in=@multicast1, 0x4e22, 0x65e, 0x4e20, 0x0, 0xa, 0x80, 0x100, 0x2b, 0x0, r7}, {0x100000000010, 0x0, 0x7, 0x5, 0xdec, 0x9, 0xe6ab, 0x4}, {0x100, 0x25, 0x3, 0x5}, 0x6, 0x6e6bb3, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x2, 0x1, 0x7c03, 0x7, 0xf}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 1.395825969s ago: executing program 0 (id=2671): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) 1.391363926s ago: executing program 3 (id=2672): unshare(0x24060400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$vsock_stream(r0, 0x0, 0x0) 1.300702748s ago: executing program 4 (id=2673): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) sendmsg$nl_generic(r0, 0x0, 0x4040040) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @loopback}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) 1.196667345s ago: executing program 0 (id=2674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) mmap(&(0x7f00004f2000/0x1000)=nil, 0x1000, 0x2, 0x34813, r1, 0x1011e000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x0, 0x9, 0x4, r5}, &(0x7f0000000080)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000)="a160fa0fadb7ec6300a9df87df9b4c7e0ed121e353835f53f599f02114b31fa295bc0e07b3e462ef6191d24c6a54fc26256172e05d1858c8d995dc94d36d88ce97bc6f817ddfbb8664bc998dfe4b033b9fea391f3ff222a21215eab410f5cf649873d8b66c967709128383e43c1ebd15a1a0568237cbf4579ff50009fd59347cfca27eeb5521811eec1f0dd5ad333ee4d323feb3e25b0ed8426e547169ad2ba97a4d27149ea8cff5c7ab73c2d0a7dff640d46569df3ee1400106a7652ef5e0d0323fb063", &(0x7f00000001c0)=""/123, &(0x7f0000000240)="c8d020e5bac396f0e54531872a9239ec3c31a7d3228eab806787d6d9a2861fdda054c6", &(0x7f0000000280)="b74d1629c25c08c6df8f86a581632c2c8187d0d1f44280f5f6c228e2dfdf5696d5f51e5688f7594cb753f7593a2cc1c6ba489c", 0x22d0, r6}, 0x38) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80018120}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r7, 0x32e, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 1.189473308s ago: executing program 4 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.179426928s ago: executing program 1 (id=2676): r0 = socket(0x23, 0x4, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x80, 0x1, 0x2, 0x0, {{0x1c, 0x4, 0x1, 0x6, 0x70, 0x64, 0x0, 0x64, 0x2f, 0x0, @private=0xa010102, @private=0xa010102, {[@lsrr={0x83, 0x13, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x7, [{@remote, 0x80000001}, {@multicast2, 0x2}, {@remote, 0x809b}]}, @rr={0x7, 0x7, 0x6a, [@dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp={0x44, 0x24, 0xec, 0x0, 0x0, [0x2, 0x3, 0xf92, 0xe, 0x41ae, 0x7fffffff, 0x8, 0x3]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newchain={0x3c, 0x64, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff2}, {0xe, 0xb}, {0xffe9, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xfff1}}]}}]}, 0x3c}}, 0x4000031) sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="ac04c4028e806e5e2a00263138126ee1c317989511bfc21fb48aef34109d8bcfc5c5029cc2e761248d34407f627e7db6031e914fbfcb24466f61f7c41cd1ff0ecb3ed624c94672e7feaad1ab44fcf465f03ca928111dec601c1f5ae49f090d731ffafa7086eef2b059ebd119f9dc9666ef6ccdaf743919795ef994a474fa1ecbcf795cc1f2f348acdadcdd63e3be0de693d46350c2d818a46e9a2cab6284a685f2", 0xa1}, {&(0x7f00000002c0)="02040111019059c0468c1f35506ecf18336b9056aa9adce8fc53399c582acc0c9bd5f930a662f0ab674565fc46ace7fea2d02c2f35731ea4e961a9ea6e122d7623ffd99686c0593ea5b82e37d93abd0e8eb3f3982d3cc1855e227c904964538d72df26dcc45592b28b90f2a2f3f7391771b0b8dc1b8571e3b0806a33435ce1d43c489060c6b0caf988c135b3f0293ce5454c1dec366f1a5f7553c8f1a5875d7f8b193c9cd505fb15ecf15d8d122f4cf21f51d232b488b11ea4c45694fac0eaef91c52b08e2c3382da4a370a327538d90c02852bcdec26b9d7c", 0xd9}, {&(0x7f00000003c0)="2c948907c899443d4053253f78695b051f85c57c458e34660539288a1a2f3b9d2f920698604a3e7ddcaeed3bb2db11797c81e494d6f9d2984a99a59b27f117359836420d969199cfc675e5a1a66c5e2dfb3d3e0a40f6673ad58ba6af5769eecc5f0d1567e651feef98a56db6aa90cc75a61c4ecf6e5b6e8e0e14efa87c48c97044fbea8fc94ae91617ca9340b9b73abfd8d8f724489236", 0x97}, {&(0x7f0000000480)="4e98dfca1f17370e3f0cde2d3f886dd357b674ffeb691e0ebcf5e307c3cb5e744636ed7d4a43cff08aed5d31aa6a842e75ca048e26ccc23a0edbaf8ad6b1cac29e69cf30920991", 0x47}], 0x4, &(0x7f0000000540)="8db0fd33dbbae93113a519ac9355fcae53e4df93d2f749cb3073366829ef5078224cdff11f41cd1bf908a3b6bde449d3eddfb39e3717421177782744f5a98ec3b7753310d6e56c870e952cd9d9ba18b54cab5a9d36928c44c04f317377f16a82c9a92b831cb39e77bd5806a166e6b747b00b", 0x72, 0x400c011}, 0x41040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x16, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @generic={0xd, 0x1, 0x4, 0x9, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x8, 0xec, &(0x7f0000000740)=""/236, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x2, 0x8, 0x5c3336f2}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000900)=[{0x3, 0x3, 0xb, 0x2}, {0x4, 0x1, 0xd, 0xa}, {0x1, 0x4, 0x1, 0x5}, {0x2, 0x3, 0xe, 0x9}, {0x4, 0x5, 0x7, 0x4}, {0x0, 0x1, 0x10, 0xb}, {0x4, 0x3, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000600)='xprtrdma_fixup\x00', r2, 0x0, 0xf}, 0x18) recvfrom$unix(r0, &(0x7f0000000a80)=""/148, 0x94, 0x40000142, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000c00)=0xfff, 0x4) r3 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c40)={0x42, 0x1, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@getqdisc={0x3c, 0x26, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff8, 0xfff1}, {0xd, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008808}, 0x44014) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1141d053f03e5483}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x8004) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f00), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x24200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040844}, 0x40000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001000)={0x0, 0xa81e}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001080)={r7, 0x1}, &(0x7f00000010c0)=0x8) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001140), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd59}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x28080810) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f0000001280)={0x0, 0x30, [0x23f50dae, 0x6, 0x8, 0x5], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000012c0)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000002400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001380)={0x1010, 0x464, 0x607, 0x70bd2b, 0x25dfdbfe, "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", ["", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c4) r11 = accept$alg(r0, 0x0, 0x0) sendfile(r11, r3, &(0x7f0000002440)=0x6, 0x7fff) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000002500)={'macsec0\x00', &(0x7f0000002480)=@ethtool_eeprom={0xc, 0x9, 0x3fe000, 0x49, "0fbd0cd9cf09329e9143b4b71185c2ac4b91c33c9e499566eff95365602e6bb59d6bf48493e70783d26052146619b383e88274105b95f23c0f2c122ae3b80551f97fdc6e63e9358e57"}}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000002540)={'nicvf0\x00', 0x8000}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000002700)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xa4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 1.179144066s ago: executing program 3 (id=2677): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000000000d00018110000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000", @ANYBLOB="195cd254adb885783b072be061cd5e80c522ad2108a8d354db433e8ec137115427995d9ce912f4b50b4904007df2b0178b69c5e3edcc259e6b1f5855e147757801c1f17a5c0fbb44dd379cd03e32e90730f7842be50fd7a79942986cc3e271f19a54247c544bd39eed8306d15d8733a2ec64253481975c93cb1d68c5fd6a6fa2a99fd9f931706961de69bf890d28cc56a1c59dfe5c7d21bcdae1aaee2efe7450bffbfcaea3561fd3c4cd06a7f93ef09e5ca07ac957ad9dc84f36a58c451fb8f1f8cc150c7b480815e4ebd9c78fa7c826b3b06c3e6370304c6e7fd25523749ec8f98d8e5ed16359d77aac12530eb3aec437bb6eca615807e3f6", @ANYRES8=0x0, @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRESDEC, @ANYRESOCT=r4], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 980.326721ms ago: executing program 0 (id=2678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf25030000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40852) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 912.267284ms ago: executing program 1 (id=2679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000680)={0x0, 0x4, 0x8c, 0xe}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) 902.518285ms ago: executing program 3 (id=2680): unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x8) splice(r6, 0x0, r3, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r9}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd23}, 0x14}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, r0}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) r13 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000000)=[{r13, 0x2003}, {r13, 0xf401}, {r2}], 0x3, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x8001, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000007c0)=r14, 0x4) 794.334696ms ago: executing program 4 (id=2681): unshare(0x64000600) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x0, 0x1f0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private2, @empty, [0xffff00, 0xffffffff, 0xffffffff, 0xff0000ff], [0xff000000, 0xff000000, 0xff000000, 0xff], 'bridge_slave_0\x00', 'veth0\x00', {0xff}, {0xff}, 0x87, 0x34, 0x4, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x5}, {0xfc, 0x192}, {0x9, 0x1800000000000}, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x9, 0x9, 0x0, 0x0, "4f70399ba10a8afd40fbcf80cdb8c825ec16b394fc49a0f41072e0f54f8b7575863e7207718f29dd3fe2d308e4934d4eeaeebaad3f62c07e0cd0ea91c49eb1c4"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000300000008000200020000003400048005"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5, @void, @value, @void, @value}, 0x48) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl(r6, 0x8936, &(0x7f0000000000)) 778.21454ms ago: executing program 0 (id=2682): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x10003}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}}}, 0x24}}, 0x40044) 421.055183ms ago: executing program 1 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000150a03000000000000000000050000090900020073797a30000000009ad71d839b5a924b3c603d833b26f75d5d76f356e770785c5cfcd8e220ae0062499cfe571b60d907e113e7f33a3173c1f2fabdea7f37c56cd5e7d39191fc34b06d0bde52ab1433bff5cf16e7b3d07030a0521c8aa017dd2962fc5b63745b967ab8acb420e08c565075624f4f638afbdac4d3f6d3e53c484509aeea82bedf622fb13576190c88e6b4c8f42b0e0ca360dd6dba86d9c5"], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xe}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379723000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a0800450000280066000000069078ac1414bbac1414bb00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404e51c0000000085917bbabf956417ffa239f6b05bc93f588c034615ebb395ad256b3922d9925fc4076b0b"], 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r3, 0x1) 456.702µs ago: executing program 0 (id=2684): r0 = socket(0x0, 0x5, 0x10000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8c", 0x22}], 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x2010, r1, 0x2d4ce000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) close(r0) 0s ago: executing program 1 (id=2685): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) sendmsg$nl_generic(r0, 0x0, 0x4040040) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @loopback}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) kernel console output (not intermixed with test programs): ] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.045906][T12601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.058176][T12601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.067358][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1996'. [ 326.091740][T12601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.125944][T12601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.125948][ T5851] Bluetooth: hci0: command tx timeout [ 326.125974][T12601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.184297][T12601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.205717][T12601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.256511][T12601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.274337][T12601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.283082][T12601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.308328][T12601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.585722][ T8071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.628998][ T8071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.644932][T12783] netlink: 'syz.4.2000': attribute type 16 has an invalid length. [ 326.658526][T12785] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2002'. [ 326.664224][T12783] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2000'. [ 326.743136][ T6086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.795419][ T6086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.938347][T12801] tun0: tun_chr_ioctl cmd 1074025677 [ 326.943835][T12801] tun0: linktype set to 821 [ 327.255727][T12814] sctp: [Deprecated]: syz.3.2009 (pid 12814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.255727][T12814] Use struct sctp_sack_info instead [ 327.306701][T12814] tun0: tun_chr_ioctl cmd 1074025675 [ 327.312158][T12814] tun0: persist disabled [ 327.395983][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 327.530185][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2012'. [ 327.542235][T12820] x_tables: unsorted entry at hook 1 [ 327.659603][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2013'. [ 327.755600][T12825] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 327.798636][T12827] tc_dump_action: action bad kind [ 328.741393][T12835] wg1 speed is unknown, defaulting to 1000 [ 328.776033][T12835] lo speed is unknown, defaulting to 1000 [ 328.861136][T12844] wg1 speed is unknown, defaulting to 1000 [ 328.915053][T12844] lo speed is unknown, defaulting to 1000 [ 328.992502][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 329.032336][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 329.055073][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 329.302561][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.312918][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.321045][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.331814][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.340196][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.353399][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.399148][T12851] wg1 speed is unknown, defaulting to 1000 [ 329.408736][T12851] lo speed is unknown, defaulting to 1000 [ 329.624899][T12835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2016'. [ 329.658238][T12851] chnl_net:caif_netlink_parms(): no params data found [ 329.821482][T12866] openvswitch: netlink: Message has 20 unknown bytes. [ 329.927394][T12860] dccp_invalid_packet: P.Data Offset(10) too large [ 330.168001][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.184392][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.191696][T12851] bridge_slave_0: entered allmulticast mode [ 330.205746][T12851] bridge_slave_0: entered promiscuous mode [ 330.225361][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.248407][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.272981][T12851] bridge_slave_1: entered allmulticast mode [ 330.306334][T12851] bridge_slave_1: entered promiscuous mode [ 330.450850][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.478020][T12887] batadv1: entered promiscuous mode [ 330.512315][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.667560][T12851] team0: Port device team_slave_0 added [ 330.700844][T12851] team0: Port device team_slave_1 added [ 330.732135][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.748851][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.788007][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.810780][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.834239][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.880838][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.916870][T12901] wg1 speed is unknown, defaulting to 1000 [ 330.978447][T12901] lo speed is unknown, defaulting to 1000 [ 330.995420][T12851] hsr_slave_0: entered promiscuous mode [ 331.005023][T12851] hsr_slave_1: entered promiscuous mode [ 331.011880][T12851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.034068][T12851] Cannot create hsr debugfs directory [ 331.404868][ T5851] Bluetooth: hci0: command tx timeout [ 331.519349][T12851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.565204][T12919] __nla_validate_parse: 3 callbacks suppressed [ 331.565227][T12919] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2038'. [ 331.595280][T12919] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2038'. [ 331.828193][T12929] netlink: 'syz.0.2042': attribute type 9 has an invalid length. [ 331.844784][T12929] netlink: 'syz.0.2042': attribute type 6 has an invalid length. [ 331.867293][T12851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.931222][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 331.940475][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 331.954915][T12931] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 331.962766][T12931] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2041'. [ 332.017868][T12851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.045137][T12931] nbd: socks must be embedded in a SOCK_ITEM attr [ 332.063146][T12931] block nbd0: shutting down sockets [ 332.091896][T12938] Bluetooth: MGMT ver 1.23 [ 332.249973][T12851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.600078][T12954] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 332.780425][T12954] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.788320][T12851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.799503][T12851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.819191][T12851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.840495][T12851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.975543][T12851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.035414][T12851] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.042785][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'. [ 333.074259][T12960] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 333.146503][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.153648][ T8083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.193696][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.200903][ T8083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.484305][ T5851] Bluetooth: hci0: command tx timeout [ 333.546158][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'. [ 333.668537][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 333.769939][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.917978][T12851] veth0_vlan: entered promiscuous mode [ 333.948950][T12851] veth1_vlan: entered promiscuous mode [ 333.973888][T13001] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2054'. [ 334.035501][T12851] veth0_macvtap: entered promiscuous mode [ 334.059794][T12851] veth1_macvtap: entered promiscuous mode [ 334.104193][T13008] tipc: Enabled bearer , priority 0 [ 334.333046][T13008] syzkaller0: entered promiscuous mode [ 334.344663][T13008] syzkaller0: entered allmulticast mode [ 334.352725][T13008] tipc: Resetting bearer [ 334.361390][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.382576][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.411035][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.431643][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.447487][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.461655][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.478556][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.793851][T12999] tipc: Resetting bearer [ 335.305457][T13029] syz.0.2065: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 335.333454][T13029] CPU: 1 UID: 0 PID: 13029 Comm: syz.0.2065 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 335.333488][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.333520][T13029] Call Trace: [ 335.333529][T13029] [ 335.333539][T13029] dump_stack_lvl+0x241/0x360 [ 335.333572][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.333597][T13029] ? __pfx__printk+0x10/0x10 [ 335.333623][T13029] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 335.333652][T13029] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 335.333683][T13029] warn_alloc+0x278/0x410 [ 335.333710][T13029] ? __pfx_warn_alloc+0x10/0x10 [ 335.333740][T13029] ? xskq_create+0xb6/0x170 [ 335.333762][T13029] ? __get_vm_area_node+0x1c8/0x2d0 [ 335.333795][T13029] ? __get_vm_area_node+0x25c/0x2d0 [ 335.333834][T13029] __vmalloc_node_range_noprof+0x62f/0x1380 [ 335.333887][T13029] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.333915][T13029] ? __kasan_kmalloc+0x98/0xb0 [ 335.333946][T13029] vmalloc_user_noprof+0x74/0x80 [ 335.333967][T13029] ? xskq_create+0xb6/0x170 [ 335.333993][T13029] xskq_create+0xb6/0x170 [ 335.334017][T13029] xsk_init_queue+0xa1/0x100 [ 335.334042][T13029] xsk_setsockopt+0x560/0x810 [ 335.334067][T13029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.334089][T13029] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.334123][T13029] ? __pfx_lock_acquire+0x10/0x10 [ 335.334154][T13029] ? aa_sock_opt_perm+0x79/0x120 [ 335.334191][T13029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 335.334212][T13029] do_sock_setsockopt+0x3af/0x720 [ 335.334242][T13029] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 335.334271][T13029] ? __fget_files+0x395/0x410 [ 335.334300][T13029] ? __fget_files+0x2a/0x410 [ 335.334338][T13029] __x64_sys_setsockopt+0x1ee/0x280 [ 335.334371][T13029] do_syscall_64+0xf3/0x230 [ 335.334402][T13029] ? clear_bhb_loop+0x35/0x90 [ 335.334435][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.334474][T13029] RIP: 0033:0x7f48bf58d169 [ 335.334493][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.334516][T13029] RSP: 002b:00007f48c0370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 335.334539][T13029] RAX: ffffffffffffffda RBX: 00007f48bf7a5fa0 RCX: 00007f48bf58d169 [ 335.334554][T13029] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 335.334567][T13029] RBP: 00007f48bf60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 335.334579][T13029] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 335.334592][T13029] R13: 0000000000000000 R14: 00007f48bf7a5fa0 R15: 00007ffeac557778 [ 335.334624][T13029] [ 335.610722][ T5851] Bluetooth: hci0: command tx timeout [ 335.624297][T13029] Mem-Info: [ 335.627469][T13029] active_anon:3989 inactive_anon:0 isolated_anon:0 [ 335.627469][T13029] active_file:1867 inactive_file:38407 isolated_file:0 [ 335.627469][T13029] unevictable:768 dirty:145 writeback:0 [ 335.627469][T13029] slab_reclaimable:11946 slab_unreclaimable:121767 [ 335.627469][T13029] mapped:28773 shmem:1435 pagetables:735 [ 335.627469][T13029] sec_pagetables:0 bounce:0 [ 335.627469][T13029] kernel_misc_reclaimable:0 [ 335.627469][T13029] free:1310589 free_pcp:918 free_cma:0 [ 335.682252][T13029] Node 0 active_anon:15956kB inactive_anon:0kB active_file:7468kB inactive_file:153552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115192kB dirty:576kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12844kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 335.717935][T13029] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 335.756845][T13029] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.784798][T13029] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 335.790641][T13029] Node 0 DMA32 free:1322244kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:15920kB inactive_anon:0kB active_file:7468kB inactive_file:153224kB unevictable:1536kB writepending:572kB present:3129332kB managed:2549680kB mlocked:0kB bounce:0kB free_pcp:3492kB local_pcp:2260kB free_cma:0kB [ 335.821220][T13029] lowmem_reserve[]: 0 0 0 0 0 [ 335.834204][T13029] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.861398][T13029] lowmem_reserve[]: 0 0 0 0 0 [ 335.866254][T13029] Node 1 Normal free:3904648kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.905597][T13029] lowmem_reserve[]: 0 0 0 0 0 [ 335.910415][T13029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.923382][T13029] Node 0 DMA32: 111*4kB (UM) 245*8kB (UME) 135*16kB (UME) 216*32kB (UME) 151*64kB (UME) 44*128kB (UM) 27*256kB (UME) 16*512kB (UM) 8*1024kB (UM) 2*2048kB (UM) 310*4096kB (UME) = 1323924kB [ 335.942486][T13029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.954550][T13029] Node 1 Normal: 214*4kB (UME) 81*8kB (UME) 38*16kB (UME) 215*32kB (UME) 89*64kB (UME) 31*128kB (UME) 18*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3904736kB [ 335.973745][T13029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.983662][T13029] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.994377][T13029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.003976][T13029] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.013435][T13029] 41709 total pagecache pages [ 336.018419][T13029] 0 pages in swap cache [ 336.022616][T13029] Free swap = 124996kB [ 336.027094][T13029] Total swap = 124996kB [ 336.031269][T13029] 2097051 pages RAM [ 336.050600][T13029] 0 pages HighMem/MovableOnly [ 336.055511][T13029] 427909 pages reserved [ 336.059696][T13029] 0 pages cma reserved [ 336.518233][T13048] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 337.654510][ T5851] Bluetooth: hci0: command tx timeout [ 337.708978][T12999] tipc: Disabling bearer [ 337.726551][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.752681][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.784121][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.794747][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.804874][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.820509][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.846545][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.856577][T13038] batman_adv: batadv0: Adding interface: dummy0 [ 337.862866][T13038] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.907847][T13038] batman_adv: batadv0: Interface activated: dummy0 [ 337.934225][T13039] batadv0: mtu less than device minimum [ 337.943255][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.951148][T13057] FAULT_INJECTION: forcing a failure. [ 337.951148][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.956183][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.970740][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.1.2069 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 337.970774][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.970788][T13057] Call Trace: [ 337.970796][T13057] [ 337.970805][T13057] dump_stack_lvl+0x241/0x360 [ 337.970841][T13057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.970865][T13057] ? __pfx__printk+0x10/0x10 [ 337.970888][T13057] ? __pfx_lock_release+0x10/0x10 [ 337.970931][T13057] should_fail_ex+0x40a/0x550 [ 337.970970][T13057] _copy_from_user+0x2d/0xb0 [ 337.971002][T13057] copy_msghdr_from_user+0xae/0x680 [ 337.971037][T13057] ? __lock_acquire+0x1397/0x2100 [ 337.971074][T13057] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 337.971106][T13057] ? __fget_files+0x2a/0x410 [ 337.971141][T13057] ? __fget_files+0x2a/0x410 [ 337.971181][T13057] do_recvmmsg+0x3bd/0xab0 [ 337.971220][T13057] ? __pfx_do_recvmmsg+0x10/0x10 [ 337.971269][T13057] ? ksys_write+0x22a/0x2b0 [ 337.971293][T13057] ? __pfx_lock_release+0x10/0x10 [ 337.971333][T13057] ? sb_end_write+0xe9/0x1c0 [ 337.971364][T13057] ? vfs_write+0x7fa/0xd10 [ 337.971388][T13057] ? __mutex_unlock_slowpath+0x227/0x800 [ 337.971431][T13057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 337.971469][T13057] ? __fget_files+0x2a/0x410 [ 337.971516][T13057] __x64_sys_recvmmsg+0x199/0x250 [ 337.971547][T13057] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 337.971577][T13057] ? do_syscall_64+0x100/0x230 [ 337.971612][T13057] ? do_syscall_64+0xb6/0x230 [ 337.971647][T13057] do_syscall_64+0xf3/0x230 [ 337.971696][T13057] ? clear_bhb_loop+0x35/0x90 [ 337.971732][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.971762][T13057] RIP: 0033:0x7fb1d8d8d169 [ 337.971782][T13057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.971800][T13057] RSP: 002b:00007fb1d9bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 337.971826][T13057] RAX: ffffffffffffffda RBX: 00007fb1d8fa5fa0 RCX: 00007fb1d8d8d169 [ 337.971842][T13057] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 337.971857][T13057] RBP: 00007fb1d9bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 337.971871][T13057] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 337.971885][T13057] R13: 0000000000000000 R14: 00007fb1d8fa5fa0 R15: 00007ffd1dc35748 [ 337.971916][T13057] [ 338.052218][T13059] ipt_REJECT: TCP_RESET invalid for non-tcp [ 338.056353][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.231178][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.243108][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.254981][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.266720][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.278462][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.290331][T13039] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.380295][T12851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.394838][T12851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.403587][T12851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.470664][T12851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.729105][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2074'. [ 338.777035][T13079] siw: device registration error -23 [ 338.824675][T13072] team0 (unregistering): left allmulticast mode [ 338.834089][T13072] team0 (unregistering): left promiscuous mode [ 338.917886][T13081] tap0: tun_chr_ioctl cmd 1074025677 [ 338.925970][T13081] tap0: linktype set to 0 [ 338.991913][ T8071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.013338][ T8071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.060808][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.095261][ T6086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.104220][ T6086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.132989][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.142943][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.191118][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.216884][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.254576][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.274474][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.294389][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.296759][T13094] netlink: 'syz.4.2078': attribute type 21 has an invalid length. [ 339.309281][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.350865][T13094] netlink: 'syz.4.2078': attribute type 6 has an invalid length. [ 339.636218][T13108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 339.829076][T13113] wireguard0: entered promiscuous mode [ 339.864786][T13113] wireguard0: entered allmulticast mode [ 340.893114][T13135] FAULT_INJECTION: forcing a failure. [ 340.893114][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.937721][T13138] netlink: 'syz.3.2091': attribute type 2 has an invalid length. [ 340.946183][T13135] CPU: 0 UID: 0 PID: 13135 Comm: syz.1.2090 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 340.946210][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.946233][T13135] Call Trace: [ 340.946241][T13135] [ 340.946249][T13135] dump_stack_lvl+0x241/0x360 [ 340.946281][T13135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.946304][T13135] ? __pfx__printk+0x10/0x10 [ 340.946327][T13135] ? __pfx_lock_release+0x10/0x10 [ 340.946367][T13135] should_fail_ex+0x40a/0x550 [ 340.946403][T13135] _copy_from_user+0x2d/0xb0 [ 340.946432][T13135] copy_msghdr_from_user+0xae/0x680 [ 340.946463][T13135] ? __pfx___might_resched+0x10/0x10 [ 340.946494][T13135] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 340.946530][T13135] ? do_recvmmsg+0x44e/0xab0 [ 340.946556][T13135] ? __might_fault+0xaa/0x120 [ 340.946582][T13135] do_recvmmsg+0x3bd/0xab0 [ 340.946630][T13135] ? __pfx_do_recvmmsg+0x10/0x10 [ 340.946674][T13135] ? ksys_write+0x22a/0x2b0 [ 340.946695][T13135] ? __pfx_lock_release+0x10/0x10 [ 340.946729][T13135] ? sb_end_write+0xe9/0x1c0 [ 340.946757][T13135] ? vfs_write+0x7fa/0xd10 [ 340.946779][T13135] ? __mutex_unlock_slowpath+0x227/0x800 [ 340.946817][T13135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.946844][T13135] ? __fget_files+0x2a/0x410 [ 340.946886][T13135] __x64_sys_recvmmsg+0x199/0x250 [ 340.946913][T13135] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 340.946940][T13135] ? do_syscall_64+0x100/0x230 [ 340.946970][T13135] ? do_syscall_64+0xb6/0x230 [ 340.947000][T13135] do_syscall_64+0xf3/0x230 [ 340.947028][T13135] ? clear_bhb_loop+0x35/0x90 [ 340.947057][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.947083][T13135] RIP: 0033:0x7fb1d8d8d169 [ 340.947099][T13135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.947116][T13135] RSP: 002b:00007fb1d9bf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 340.947136][T13135] RAX: ffffffffffffffda RBX: 00007fb1d8fa5fa0 RCX: 00007fb1d8d8d169 [ 340.947149][T13135] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 340.947162][T13135] RBP: 00007fb1d9bf2090 R08: 0000000000000000 R09: 0000000000000000 [ 340.947174][T13135] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 340.947185][T13135] R13: 0000000000000000 R14: 00007fb1d8fa5fa0 R15: 00007ffd1dc35748 [ 340.947218][T13135] [ 341.228774][T13138] ip6gre0: entered promiscuous mode [ 341.234196][T13138] ip6gre0: entered allmulticast mode [ 341.316394][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.327152][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.335168][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.343021][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.357035][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.364784][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.478658][T13149] wg1 speed is unknown, defaulting to 1000 [ 341.486518][T13149] lo speed is unknown, defaulting to 1000 [ 341.741518][T13149] chnl_net:caif_netlink_parms(): no params data found [ 341.999995][T13184] netlink: 'syz.4.2104': attribute type 21 has an invalid length. [ 342.119944][T13149] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.133248][T13149] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.145658][T13149] bridge_slave_0: entered allmulticast mode [ 342.152966][T13149] bridge_slave_0: entered promiscuous mode [ 342.170151][T13149] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.182571][T13149] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.199070][T13149] bridge_slave_1: entered allmulticast mode [ 342.207535][T13149] bridge_slave_1: entered promiscuous mode [ 342.255355][T13149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.287829][T13149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.361794][T13149] team0: Port device team_slave_0 added [ 342.387115][T13149] team0: Port device team_slave_1 added [ 342.965885][T13197] FAULT_INJECTION: forcing a failure. [ 342.965885][T13197] name fail_futex, interval 1, probability 0, space 0, times 1 [ 342.989455][T13197] CPU: 1 UID: 0 PID: 13197 Comm: syz.0.2105 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 342.989488][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.989501][T13197] Call Trace: [ 342.989508][T13197] [ 342.989517][T13197] dump_stack_lvl+0x241/0x360 [ 342.989549][T13197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.989572][T13197] ? __pfx__printk+0x10/0x10 [ 342.989596][T13197] ? __pfx_register_lock_class+0x10/0x10 [ 342.989637][T13197] should_fail_ex+0x40a/0x550 [ 342.989683][T13197] get_futex_key+0x1d7/0xf40 [ 342.989717][T13197] ? __pfx_get_futex_key+0x10/0x10 [ 342.989744][T13197] ? __lock_acquire+0x1397/0x2100 [ 342.989785][T13197] futex_wake+0x12a/0x5c0 [ 342.989824][T13197] ? __pfx_futex_wake+0x10/0x10 [ 342.989872][T13197] do_futex+0x392/0x560 [ 342.989904][T13197] ? __pfx_do_futex+0x10/0x10 [ 342.989929][T13197] ? __mutex_unlock_slowpath+0x227/0x800 [ 342.989962][T13197] ? __might_fault+0xaa/0x120 [ 342.989987][T13197] mm_release+0x193/0x430 [ 342.990025][T13197] ? exit_robust_list+0x2cf/0x2f0 [ 342.990051][T13197] ? __pfx_mm_release+0x10/0x10 [ 342.990091][T13197] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.990116][T13197] ? lockdep_hardirqs_on+0x99/0x150 [ 342.990156][T13197] exit_mm+0xb0/0x310 [ 342.990189][T13197] ? __pfx_exit_mm+0x10/0x10 [ 342.990220][T13197] ? taskstats_exit+0x326/0xa60 [ 342.990260][T13197] do_exit+0x9ad/0x2940 [ 342.990300][T13197] ? __pfx_do_exit+0x10/0x10 [ 342.990332][T13197] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.990374][T13197] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.990409][T13197] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.990438][T13197] ? _raw_spin_lock_irq+0xdf/0x120 [ 342.990468][T13197] do_group_exit+0x207/0x2c0 [ 342.990496][T13197] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.990520][T13197] ? lockdep_hardirqs_on+0x99/0x150 [ 342.990550][T13197] get_signal+0x168c/0x1720 [ 342.990588][T13197] ? __pfx_get_signal+0x10/0x10 [ 342.990620][T13197] arch_do_signal_or_restart+0x96/0x860 [ 342.990650][T13197] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 342.990683][T13197] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.990726][T13197] ? syscall_exit_to_user_mode+0xa3/0x340 [ 342.990758][T13197] syscall_exit_to_user_mode+0xce/0x340 [ 342.990790][T13197] do_syscall_64+0x100/0x230 [ 342.990820][T13197] ? clear_bhb_loop+0x35/0x90 [ 342.990852][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.990880][T13197] RIP: 0033:0x7f48bf58d169 [ 342.990897][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.990914][T13197] RSP: 002b:00007f48c0370038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 342.990935][T13197] RAX: fffffffffffffe00 RBX: 00007f48bf7a5fa0 RCX: 00007f48bf58d169 [ 342.990950][T13197] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 342.990964][T13197] RBP: 00007f48c0370090 R08: 0000000000000000 R09: 0000000000000000 [ 342.990976][T13197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 342.990988][T13197] R13: 0000000000000000 R14: 00007f48bf7a5fa0 R15: 00007ffeac557778 [ 342.991017][T13197] [ 343.327331][T13205] batman_adv: batadv0: Interface deactivated: dummy0 [ 343.493651][ T5844] Bluetooth: hci0: command tx timeout [ 344.170984][T13205] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.194094][T13205] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.202490][T13205] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.217012][T13205] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.332205][T13205] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.341201][T13205] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.349636][T13205] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.358081][T13205] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.401702][T13149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.408999][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.435135][T13149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.449240][T13149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.456377][T13149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.482401][T13149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.523755][T13212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.532520][T13212] batman_adv: batadv0: Interface activated: dummy0 [ 344.542732][T13212] net_ratelimit: 11 callbacks suppressed [ 344.542744][T13212] batadv0: mtu less than device minimum [ 344.560191][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.571991][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.583607][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.596116][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.608598][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.621099][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.632848][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.645041][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.657608][T13212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.800858][T13149] hsr_slave_0: entered promiscuous mode [ 344.819529][T13149] hsr_slave_1: entered promiscuous mode [ 344.832890][T13149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.849035][T13149] Cannot create hsr debugfs directory [ 344.915561][T13227] __nla_validate_parse: 71 callbacks suppressed [ 344.915581][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 344.948402][T13230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2114'. [ 345.262907][T13149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.337536][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2116'. [ 345.475834][T13149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.564816][ T5844] Bluetooth: hci0: command tx timeout [ 345.648126][T13149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.058948][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 346.177578][T13149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.214319][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2125'. [ 346.777945][T13149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.818998][T13149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.884347][T13149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.927052][T13149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.104942][T13299] dummy0: entered promiscuous mode [ 347.170600][T13298] dummy0: left promiscuous mode [ 347.202739][T13304] wg1 speed is unknown, defaulting to 1000 [ 347.244573][T13306] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 347.278831][T13304] lo speed is unknown, defaulting to 1000 [ 347.328644][T13306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.477669][T13311] x_tables: duplicate underflow at hook 4 [ 347.478965][T13313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.492544][T13313] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 347.505599][T13313] bond6: (slave vcan0): Error -95 calling set_mac_address [ 347.567678][T13309] wg1 speed is unknown, defaulting to 1000 [ 347.575191][T13309] lo speed is unknown, defaulting to 1000 [ 347.644496][ T5844] Bluetooth: hci0: command tx timeout [ 347.741871][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.838813][T13149] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.857342][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.864589][ T8070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.925242][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.932398][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.365751][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2145'. [ 348.396649][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2145'. [ 348.414241][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2145'. [ 348.508734][T13343] netlink: 'syz.0.2145': attribute type 1 has an invalid length. [ 348.527208][T13346] wg1 speed is unknown, defaulting to 1000 [ 348.534751][T13343] NCSI netlink: No device for ifindex 0 [ 348.555061][T13346] lo speed is unknown, defaulting to 1000 [ 348.578006][T13149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.841847][T13149] veth0_vlan: entered promiscuous mode [ 348.915638][T13149] veth1_vlan: entered promiscuous mode [ 348.980158][T13373] xt_hashlimit: size too large, truncated to 1048576 [ 349.046637][T13149] veth0_macvtap: entered promiscuous mode [ 349.063818][T13149] veth1_macvtap: entered promiscuous mode [ 349.126192][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.145623][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.176847][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.203752][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.232210][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.268853][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.296737][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.327711][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.370708][T13149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.417325][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.455856][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.486588][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.517905][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.540784][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.561565][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.579735][T13149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.624087][T13149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.662892][T13149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.715228][T13346] netlink: 'syz.3.2147': attribute type 13 has an invalid length. [ 349.726509][ T5844] Bluetooth: hci0: command tx timeout [ 349.852303][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'. [ 350.317940][T13149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.355301][T13149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.365389][T13149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.374369][T13149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.494817][T13400] tap0: tun_chr_ioctl cmd 1074812118 [ 350.625888][ T8075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.634873][ T8075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.721060][ T8070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.729203][ T8070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.766332][T13410] macsec0: entered promiscuous mode [ 350.773335][T13410] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 350.780744][T13410] macsec0: entered allmulticast mode [ 350.786773][T13410] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 350.802325][T13412] netlink: 'syz.0.2164': attribute type 39 has an invalid length. [ 350.813326][T13414] wg1 speed is unknown, defaulting to 1000 [ 350.831734][T13414] lo speed is unknown, defaulting to 1000 [ 350.947222][T13420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2166'. [ 351.025057][T13420] net_ratelimit: 11 callbacks suppressed [ 351.025078][T13420] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 351.068644][T13420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.276270][T13431] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 351.312835][T13431] 8021q: adding VLAN 0 to HW filter on device bond7 [ 351.396756][T13431] bond7: (slave veth7): Enslaving as an active interface with a down link [ 351.433954][T13414] wg1 speed is unknown, defaulting to 1000 [ 351.453273][T13433] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.530938][T13414] lo speed is unknown, defaulting to 1000 [ 351.679913][T13435] wg1 speed is unknown, defaulting to 1000 [ 351.769482][T13435] lo speed is unknown, defaulting to 1000 [ 352.127167][T13440] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2170'. [ 352.214242][T13440] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.225190][T13440] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.240147][T13440] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.248487][T13440] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.115710][T13454] wg1 speed is unknown, defaulting to 1000 [ 353.122777][T13454] lo speed is unknown, defaulting to 1000 [ 353.365976][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2176'. [ 353.449247][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.576055][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.638483][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.677357][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.686058][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.694656][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.826000][ T5844] Bluetooth: hci0: command tx timeout [ 355.955881][T13453] wg1 speed is unknown, defaulting to 1000 [ 356.027597][T13453] lo speed is unknown, defaulting to 1000 [ 356.053856][T13476] wg1 speed is unknown, defaulting to 1000 [ 356.107146][T13476] lo speed is unknown, defaulting to 1000 [ 356.482038][T13476] chnl_net:caif_netlink_parms(): no params data found [ 356.686388][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.693540][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.724734][T13476] bridge_slave_0: entered allmulticast mode [ 356.732035][T13476] bridge_slave_0: entered promiscuous mode [ 356.750924][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.774881][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.782346][T13476] bridge_slave_1: entered allmulticast mode [ 356.802758][T13476] bridge_slave_1: entered promiscuous mode [ 356.885233][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2187'. [ 356.982640][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 357.884678][ T5844] Bluetooth: hci0: command tx timeout [ 358.085252][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2193'. [ 359.259459][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.280338][T13522] ip6gre0: left promiscuous mode [ 359.285654][T13522] ip6gre0: left allmulticast mode [ 359.293606][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.302351][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.313143][T13522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.367652][T13533] tipc: Invalid UDP bearer configuration [ 359.367688][T13533] tipc: Enabling of bearer rejected, failed to enable media [ 359.466470][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.491613][ T5835] lo speed is unknown, defaulting to 1000 [ 359.605296][T13476] team0: Port device team_slave_0 added [ 359.695621][T13476] team0: Port device team_slave_1 added [ 359.701757][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2199'. [ 359.798902][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.814176][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.860222][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.898963][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.924937][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.964714][ T5844] Bluetooth: hci0: command tx timeout [ 359.973143][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.040583][T13566] wg1 speed is unknown, defaulting to 1000 [ 360.053201][T13566] lo speed is unknown, defaulting to 1000 [ 360.054400][T13563] pim6reg1: entered promiscuous mode [ 360.064849][T13563] pim6reg1: entered allmulticast mode [ 360.098322][T13567] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2205'. [ 360.141384][T13569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2206'. [ 360.227884][T13476] hsr_slave_0: entered promiscuous mode [ 360.240888][T13476] hsr_slave_1: entered promiscuous mode [ 360.255305][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.294244][T13574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2207'. [ 360.303676][T13476] Cannot create hsr debugfs directory [ 360.326858][T13574] Bluetooth: MGMT ver 1.23 [ 360.682495][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 360.744724][T13589] netlink: 'syz.3.2211': attribute type 21 has an invalid length. [ 360.783103][T13476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.786480][T13589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2211'. [ 360.800779][T13591] sctp: [Deprecated]: syz.1.2212 (pid 13591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.800779][T13591] Use struct sctp_sack_info instead [ 360.836493][T13589] netlink: 'syz.3.2211': attribute type 5 has an invalid length. [ 360.850523][T13589] netlink: 'syz.3.2211': attribute type 6 has an invalid length. [ 360.861304][T13589] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2211'. [ 360.921650][T13476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.066288][T13476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.196656][T13476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.556274][T13476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.569312][T13624] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 361.590575][T13476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.628464][T13476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.637012][T13624] nbd: socks must be embedded in a SOCK_ITEM attr [ 361.649004][T13624] block nbd0: shutting down sockets [ 361.678502][T13476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.945855][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.999708][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.042539][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.049809][ T8070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.062975][ T5851] Bluetooth: hci0: command tx timeout [ 362.111967][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.119284][ T8070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.520305][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.560406][T13662] tipc: Enabled bearer , priority 0 [ 362.581507][T13662] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 362.610227][T13662] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 362.643847][T13662] tipc: Resetting bearer [ 362.811839][T13476] veth0_vlan: entered promiscuous mode [ 362.830122][T13476] veth1_vlan: entered promiscuous mode [ 362.900843][T13476] veth0_macvtap: entered promiscuous mode [ 362.928543][T13476] veth1_macvtap: entered promiscuous mode [ 362.946597][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.957280][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.967740][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.978592][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.016094][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.047809][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.068089][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.094310][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.116991][T13675] __nla_validate_parse: 8 callbacks suppressed [ 363.117008][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'. [ 363.133530][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.154350][T13675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2239'. [ 363.163447][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.185456][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.207181][T13675] gtp0: entered promiscuous mode [ 363.212177][T13675] gtp0: entered allmulticast mode [ 363.246386][T13670] wg1 speed is unknown, defaulting to 1000 [ 363.249432][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.317479][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.344094][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.364970][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.385957][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.406738][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.427084][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.471711][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.493574][T13476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.518771][T13476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.533331][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.543058][T13670] lo speed is unknown, defaulting to 1000 [ 363.758518][ T8071] tipc: Resetting bearer [ 363.823008][T13476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.853482][T13476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.884879][T13476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.908823][T13476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.124592][ T5851] Bluetooth: hci0: command 0x0405 tx timeout [ 364.215779][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.223671][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.368770][T13705] syzkaller0: entered promiscuous mode [ 364.383475][T13705] syzkaller0: entered allmulticast mode [ 364.400214][T13709] netlink: 'syz.3.2248': attribute type 27 has an invalid length. [ 364.421594][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.431112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.466301][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2246'. [ 364.631514][T13709] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 364.648860][T13709] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 364.657435][T13709] macsec0: left promiscuous mode [ 364.662759][T13709] macsec0: left allmulticast mode [ 364.675468][T13709] gtp0: left promiscuous mode [ 364.680288][T13709] gtp0: left allmulticast mode [ 364.688025][T13215] lo speed is unknown, defaulting to 1000 [ 364.813512][T13714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.821975][T13714] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.831769][T13714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.982218][T13723] netlink: 'syz.0.2251': attribute type 3 has an invalid length. [ 366.994615][T13215] lo speed is unknown, defaulting to 1000 [ 367.201871][T13730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2252'. [ 367.477378][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 367.559676][T13745] syzkaller0: entered promiscuous mode [ 367.567294][T13745] syzkaller0: entered allmulticast mode [ 369.509806][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.528403][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.545090][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.553957][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.567441][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.576552][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.746318][T13770] macsec0: entered promiscuous mode [ 370.831911][T13789] wg1 speed is unknown, defaulting to 1000 [ 370.856569][T13789] lo speed is unknown, defaulting to 1000 [ 371.231685][T13789] chnl_net:caif_netlink_parms(): no params data found [ 371.480774][T13821] netlink: 'syz.3.2273': attribute type 2 has an invalid length. [ 371.489308][T13821] netlink: 'syz.3.2273': attribute type 4 has an invalid length. [ 371.497173][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 371.534180][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.541294][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 371.584697][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.594752][T13789] bridge_slave_0: entered allmulticast mode [ 371.602941][T13789] bridge_slave_0: entered promiscuous mode [ 371.621885][T13819] hsr_slave_0: left promiscuous mode [ 371.625798][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'. [ 371.640276][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 371.650020][ T5844] Bluetooth: hci0: command tx timeout [ 371.717337][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.735485][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.742571][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'. [ 371.770445][T13789] bridge_slave_1: entered allmulticast mode [ 371.793114][T13789] bridge_slave_1: entered promiscuous mode [ 371.856025][T13836] netlink: 'syz.4.2276': attribute type 11 has an invalid length. [ 371.938753][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 371.942464][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.996062][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.244252][T13789] team0: Port device team_slave_0 added [ 372.273592][T13789] team0: Port device team_slave_1 added [ 372.408750][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 372.445702][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.473297][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.534366][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.563764][T13854] netlink: 'syz.0.2280': attribute type 280 has an invalid length. [ 372.573041][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.601010][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.693144][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.030661][T13863] xt_hashlimit: size too large, truncated to 1048576 [ 373.039253][T13789] hsr_slave_0: entered promiscuous mode [ 373.068766][T13789] hsr_slave_1: entered promiscuous mode [ 373.081772][T13868] xt_hashlimit: size too large, truncated to 1048576 [ 373.085326][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.124248][T13789] Cannot create hsr debugfs directory [ 373.702268][T13789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.724994][ T5844] Bluetooth: hci0: command tx timeout [ 373.756977][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 373.809173][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'. [ 373.825678][T13894] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2292'. [ 373.835021][T13894] nbd: socks must be embedded in a SOCK_ITEM attr [ 373.898338][T13789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.974344][T13898] wg1 speed is unknown, defaulting to 1000 [ 374.078872][T13789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.138488][T13907] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 374.147318][T13898] lo speed is unknown, defaulting to 1000 [ 374.153403][T13907] tipc: Enabled bearer , priority 10 [ 374.170705][T13909] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 374.260446][T13789] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.304683][T13909] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.313063][T13909] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.321464][T13909] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.329789][T13909] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.596387][T13789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.627401][T13789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.657154][T13789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.740402][T13789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 374.858026][T13934] SET target dimension over the limit! [ 375.032106][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.037733][T13939] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.073827][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.140967][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.148166][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.226161][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.233367][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.623214][T13958] netlink: 'syz.4.2313': attribute type 11 has an invalid length. [ 375.722507][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.805963][ T5844] Bluetooth: hci0: command tx timeout [ 375.816831][T13789] veth0_vlan: entered promiscuous mode [ 375.846319][T13789] veth1_vlan: entered promiscuous mode [ 375.894628][T13974] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 375.936724][T13789] veth0_macvtap: entered promiscuous mode [ 375.960586][T13789] veth1_macvtap: entered promiscuous mode [ 376.002599][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.014330][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.026071][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.036821][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.054167][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.076712][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.094157][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.114061][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.123921][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.144405][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.154620][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.165353][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.176905][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.195957][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.200383][T13976] netlink: 'syz.4.2319': attribute type 4 has an invalid length. [ 376.207135][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.226134][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.238663][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.248791][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.274183][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.294147][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.314092][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.323969][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.336515][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.347119][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.357765][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.370231][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.487883][T13789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.497086][T13789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.506223][T13789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.515122][T13789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.775561][T13990] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 376.799000][ T8078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.814646][ T8078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.825885][T13990] netlink: 'syz.1.2324': attribute type 2 has an invalid length. [ 376.829833][T13993] Cannot find map_set index 65532 as target [ 376.937607][ T8078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.947774][ T8078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.024791][T13998] __nla_validate_parse: 16 callbacks suppressed [ 377.024811][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2327'. [ 377.068375][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2327'. [ 377.089721][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 377.647741][T14011] wg1 speed is unknown, defaulting to 1000 [ 377.695998][T14011] lo speed is unknown, defaulting to 1000 [ 377.856645][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2334'. [ 378.098913][T14022] netlink: 'syz.4.2336': attribute type 11 has an invalid length. [ 378.124299][T14022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2336'. [ 378.287626][T14020] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2332'. [ 379.603912][T14033] netlink: 'syz.3.2340': attribute type 75 has an invalid length. [ 379.686218][T14040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 379.698332][T14041] netlink: 'syz.4.2341': attribute type 21 has an invalid length. [ 379.745921][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 379.796264][T14043] netlink: 'syz.3.2342': attribute type 10 has an invalid length. [ 379.833489][T14043] dummy0: entered allmulticast mode [ 379.874847][T14043] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 380.002536][T14054] SET target dimension over the limit! [ 380.140006][T14061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2345'. [ 380.160248][T14061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2345'. [ 380.205745][T14058] wg1 speed is unknown, defaulting to 1000 [ 380.294591][T14058] lo speed is unknown, defaulting to 1000 [ 380.365202][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.381141][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.405839][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.420113][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.430470][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 380.439335][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.612171][T14069] wg1 speed is unknown, defaulting to 1000 [ 380.638849][T14069] lo speed is unknown, defaulting to 1000 [ 380.842397][T14082] openvswitch: netlink: Duplicate key (type 32). [ 380.890044][T14080] wg1 speed is unknown, defaulting to 1000 [ 381.135176][T14094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2352'. [ 381.287926][T14086] batman_adv: batadv0: Interface deactivated: dummy0 [ 381.344855][T14086] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 381.364472][T14080] lo speed is unknown, defaulting to 1000 [ 381.370686][T14091] netlink: 'syz.3.2351': attribute type 6 has an invalid length. [ 381.551689][T14095] batman_adv: batadv0: Interface deactivated: dummy0 [ 381.719514][T14069] chnl_net:caif_netlink_parms(): no params data found [ 382.175955][T14069] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.183153][T14069] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.208969][T14069] bridge_slave_0: entered allmulticast mode [ 382.216736][T14069] bridge_slave_0: entered promiscuous mode [ 382.236068][T14069] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.243221][T14069] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.254815][T14069] bridge_slave_1: entered allmulticast mode [ 382.262096][T14069] bridge_slave_1: entered promiscuous mode [ 382.343303][T14124] __nla_validate_parse: 2 callbacks suppressed [ 382.343323][T14124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'. [ 382.417313][T14069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.429782][T14069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.543311][ T5844] Bluetooth: hci0: command tx timeout [ 382.632357][T14069] team0: Port device team_slave_0 added [ 382.672040][T14128] wg1 speed is unknown, defaulting to 1000 [ 382.693385][T14069] team0: Port device team_slave_1 added [ 382.757122][T14128] lo speed is unknown, defaulting to 1000 [ 382.778595][T14069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.794560][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.904112][T14069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.959240][T14069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.984216][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.054433][T14069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.211708][T14069] hsr_slave_0: entered promiscuous mode [ 383.218409][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'. [ 383.227507][T14069] hsr_slave_1: entered promiscuous mode [ 383.228363][T14069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.242132][T14069] Cannot create hsr debugfs directory [ 383.440976][T14155] netlink: 'syz.4.2364': attribute type 6 has an invalid length. [ 383.578614][T14160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2366'. [ 383.655784][T14069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.686852][T14160] batadv_slave_1: entered promiscuous mode [ 383.798007][T14069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.833016][T14169] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2368'. [ 383.839967][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 383.882107][T14171] vlan0: entered allmulticast mode [ 383.948561][T14069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.063206][T14069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.138315][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 384.307086][T14069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.359455][T14181] wg1 speed is unknown, defaulting to 1000 [ 384.366407][T14069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.414698][T14069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.432144][T14181] lo speed is unknown, defaulting to 1000 [ 384.440356][T14069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.590122][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 384.605010][ T5844] Bluetooth: hci0: command tx timeout [ 384.751729][T14192] vlan0: entered promiscuous mode [ 384.885439][T14196] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2377'. [ 384.986445][T14069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.166958][T14069] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.209303][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.216539][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.295492][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.302613][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.637617][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'. [ 385.676026][T14228] netlink: 'syz.0.2384': attribute type 12 has an invalid length. [ 385.683902][T14228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2384'. [ 385.953939][T14069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.686122][ T5844] Bluetooth: hci0: command tx timeout [ 388.551613][T14261] __nla_validate_parse: 1 callbacks suppressed [ 388.551635][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2394'. [ 388.692761][T14069] veth0_vlan: entered promiscuous mode [ 388.749595][T14069] veth1_vlan: entered promiscuous mode [ 388.764431][ T5844] Bluetooth: hci0: command tx timeout [ 388.871708][T14069] veth0_macvtap: entered promiscuous mode [ 388.918422][T14069] veth1_macvtap: entered promiscuous mode [ 388.942450][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.953699][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.963956][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.975137][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.989999][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 388.999550][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.025659][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.051435][T14280] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2401'. [ 389.064336][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.076827][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 389.086221][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.099966][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.113191][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.113216][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 389.123409][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.123432][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.156020][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.169457][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.199452][T14069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.247671][T14286] Bluetooth: MGMT ver 1.23 [ 389.274686][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.285677][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.308516][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.334114][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.359404][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.381490][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.405425][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.427698][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.451713][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.469928][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.480138][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.516427][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.551547][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.574351][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.605648][T14069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.657383][T14069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.683506][T14069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.715540][T14069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.734199][T14069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.776252][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 390.089511][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.115785][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 390.164175][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.164585][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 390.201922][T14309] bridge0: port 1(ipvlan2) entered blocking state [ 390.222976][T14309] bridge0: port 1(ipvlan2) entered disabled state [ 390.238449][T14309] ipvlan2: entered allmulticast mode [ 390.244573][T14309] bridge0: entered allmulticast mode [ 390.315891][T14309] ipvlan2: left allmulticast mode [ 390.345062][T14309] bridge0: left allmulticast mode [ 390.400045][ T8078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.425507][T14319] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2412'. [ 390.426337][T14320] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2412'. [ 390.444958][ T8078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.517556][T14321] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 392.179016][T14349] wg2: entered allmulticast mode [ 392.624305][T14375] ip6t_rpfilter: unknown options [ 392.645374][T14376] bond0: (slave dummy0): Releasing backup interface [ 392.667195][T14376] dummy0: left allmulticast mode [ 392.689300][T14376] bond7: (slave veth7): Releasing active interface [ 392.710334][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.722821][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.733552][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.743936][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.755632][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.763034][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.863918][T14378] wg1 speed is unknown, defaulting to 1000 [ 392.886064][T14378] lo speed is unknown, defaulting to 1000 [ 392.931095][T14383] netem: unknown loss type 0 [ 392.961770][T14383] netem: change failed [ 392.975107][T14384] netem: unknown loss type 0 [ 392.979924][T14384] netem: change failed [ 393.071827][T14390] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 393.193746][T14396] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 393.274192][T14396] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.295003][T14396] block nbd0: shutting down sockets [ 393.316230][T14399] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 393.339730][T14378] chnl_net:caif_netlink_parms(): no params data found [ 393.417632][T14407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.472748][T14405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.572526][T14413] xt_TCPMSS: Only works on TCP SYN packets [ 393.581874][T14413] __nla_validate_parse: 6 callbacks suppressed [ 393.581890][T14413] netlink: 6080 bytes leftover after parsing attributes in process `syz.4.2438'. [ 393.598848][T14413] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2438'. [ 393.663765][T14399] bond0 (unregistering): Released all slaves [ 393.943738][T14433] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 393.981063][T14437] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2441'. [ 393.990552][T14437] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2441'. [ 394.002067][T14439] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 394.073092][T14378] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.087736][T14378] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.096515][T14378] bridge_slave_0: entered allmulticast mode [ 394.103485][T14378] bridge_slave_0: entered promiscuous mode [ 394.124795][T14378] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.132093][T14378] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.149807][T14378] bridge_slave_1: entered allmulticast mode [ 394.157237][T14378] bridge_slave_1: entered promiscuous mode [ 394.216070][T14378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.254392][T14378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.349540][T14378] team0: Port device team_slave_0 added [ 394.379192][T14378] team0: Port device team_slave_1 added [ 394.440966][T14378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.462902][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.498682][T14378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.521325][T14456] wireguard0: entered promiscuous mode [ 394.527660][T14456] wireguard0: entered allmulticast mode [ 394.580408][T14378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.587728][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.620289][T14378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.734870][T14378] hsr_slave_0: entered promiscuous mode [ 394.749371][T14378] hsr_slave_1: entered promiscuous mode [ 394.766157][T14378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.784436][T14378] Cannot create hsr debugfs directory [ 394.844793][ T5851] Bluetooth: hci0: command tx timeout [ 395.105139][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2453'. [ 395.396282][T14378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.418094][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.444283][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.458679][T14485] openvswitch: netlink: Actions may not be safe on all matching packets [ 395.468527][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 395.480915][T14477] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2455'. [ 395.492473][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.501861][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.550789][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.576918][T14378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.578199][T14477] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2455'. [ 395.607556][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.614891][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.623000][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.631242][T14477] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2455'. [ 395.640644][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.648127][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.669198][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.696927][T14477] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2455'. [ 395.714296][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.722599][T14378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.743645][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.751605][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.759994][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.766706][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.778863][T14477] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 395.789343][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.824552][T14477] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 395.854620][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.861536][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.874636][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.876335][T14378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.881163][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.925342][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.945522][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.952013][T14477] NCSI netlink: No device for ifindex 2214592512 [ 395.966924][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.014453][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.029023][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.038870][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.114332][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.144265][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.167831][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.198687][T14477] NCSI netlink: No device for ifindex 2214592512 [ 396.228384][T14378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.310287][T14378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.377884][T14378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.420915][T14378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 396.658851][T14378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.727572][T14378] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.767248][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.774479][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.835822][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.843005][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.924965][ T5844] Bluetooth: hci0: command tx timeout [ 396.985890][T14542] wg1 speed is unknown, defaulting to 1000 [ 397.051211][T14542] lo speed is unknown, defaulting to 1000 [ 397.235891][T14550] xt_CT: No such helper "pptp" [ 397.568038][T14526] veth7: entered promiscuous mode [ 397.576555][T14542] x_tables: duplicate entry at hook 2 [ 397.645937][T14378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.658593][T14569] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 397.695290][T14569] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 397.761494][T14569] tipc: Resetting bearer [ 397.906978][T14378] veth0_vlan: entered promiscuous mode [ 397.918927][T14378] veth1_vlan: entered promiscuous mode [ 397.990861][T14378] veth0_macvtap: entered promiscuous mode [ 398.037965][T14378] veth1_macvtap: entered promiscuous mode [ 398.114598][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.164215][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.184298][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.204267][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.224244][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.246342][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.256658][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.267522][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.277745][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.289364][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.300104][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.310999][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.321093][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.331841][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.342304][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.355608][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.386564][T14378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.431865][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.484201][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.514217][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.534179][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.574569][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.604599][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.624147][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.649109][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.674288][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.685592][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.696109][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.707312][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.726694][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.738462][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.748624][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.762412][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.783796][T14378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.802031][T14619] __nla_validate_parse: 26 callbacks suppressed [ 398.802049][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 398.831013][T14378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.854301][T14378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.881707][T14378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.920794][T14378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.004870][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 399.391155][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 399.410222][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.459370][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.527647][T14644] syzkaller1: entered promiscuous mode [ 399.559088][T14644] syzkaller1: entered allmulticast mode [ 399.746547][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.764365][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.223563][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2505'. [ 400.281856][T14685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 401.954622][T14702] validate_nla: 33 callbacks suppressed [ 401.954643][T14702] netlink: 'syz.0.2511': attribute type 39 has an invalid length. [ 402.049508][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 402.058820][T14705] bond0: left promiscuous mode [ 402.063634][T14705] bond_slave_0: left promiscuous mode [ 402.074233][T14705] bond_slave_1: left promiscuous mode [ 402.180400][T14708] wg1 speed is unknown, defaulting to 1000 [ 402.206327][T14708] lo speed is unknown, defaulting to 1000 [ 402.356204][T14717] wg1 speed is unknown, defaulting to 1000 [ 402.412118][T14717] lo speed is unknown, defaulting to 1000 [ 402.604750][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 402.614707][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 402.641016][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 402.652789][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 402.662033][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 402.674791][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.718129][T14726] wg1 speed is unknown, defaulting to 1000 [ 402.731598][T14726] lo speed is unknown, defaulting to 1000 [ 403.149446][T14726] chnl_net:caif_netlink_parms(): no params data found [ 403.445193][T14736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2523'. [ 403.511267][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2527'. [ 403.520302][T14751] wg1 speed is unknown, defaulting to 1000 [ 403.521515][T14751] lo speed is unknown, defaulting to 1000 [ 403.567868][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.578456][T14726] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.591729][T14726] bridge_slave_0: entered allmulticast mode [ 403.610332][T14726] bridge_slave_0: entered promiscuous mode [ 403.664734][T14761] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 403.684237][T14761] netlink: 'syz.0.2526': attribute type 3 has an invalid length. [ 403.726057][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.738460][T14726] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.746626][T14761] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2526'. [ 403.785199][T14726] bridge_slave_1: entered allmulticast mode [ 403.824360][T14761] NCSI netlink: No device for ifindex 2214592512 [ 403.831003][T14726] bridge_slave_1: entered promiscuous mode [ 404.109985][T14726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.122567][T14774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2532'. [ 404.133828][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 404.146810][T14777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2532'. [ 404.186115][T14726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.319784][T14780] wg1 speed is unknown, defaulting to 1000 [ 404.326825][T14780] lo speed is unknown, defaulting to 1000 [ 404.339105][T14726] team0: Port device team_slave_0 added [ 404.386150][T14726] team0: Port device team_slave_1 added [ 404.519541][T14726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.543497][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.574893][T14726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.587701][T14726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.597621][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.642810][T14726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.765315][ T5844] Bluetooth: hci0: command tx timeout [ 404.944591][T14726] hsr_slave_0: entered promiscuous mode [ 404.965608][T14726] hsr_slave_1: entered promiscuous mode [ 404.970192][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2537'. [ 404.987055][T14726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.034319][T14726] Cannot create hsr debugfs directory [ 405.045727][T14792] gretap0: entered promiscuous mode [ 405.081368][T14792] gretap0: left promiscuous mode [ 405.135338][T14794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2538'. [ 405.175212][T14794] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2538'. [ 405.242911][T14794] netlink: 'syz.1.2538': attribute type 10 has an invalid length. [ 405.257020][T14794] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2538'. [ 405.367397][T14799] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2540'. [ 405.389697][T14799] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2540'. [ 405.538944][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 405.548794][T14726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.595762][T14804] bond0: entered promiscuous mode [ 405.604402][T14804] bond_slave_0: entered promiscuous mode [ 405.610399][T14804] bond_slave_1: entered promiscuous mode [ 405.638672][T14804] batadv0: entered promiscuous mode [ 405.655969][T14804] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 405.682955][T14804] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 405.709697][T14804] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.734783][T14804] bond0: left promiscuous mode [ 405.745381][T14804] bond_slave_0: left promiscuous mode [ 405.757766][T14804] bond_slave_1: left promiscuous mode [ 405.770839][T14804] batadv0: left promiscuous mode [ 405.851840][T14726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.970962][T14726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.006264][T14812] netlink: 'syz.1.2543': attribute type 1 has an invalid length. [ 406.051499][T14818] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 406.114244][T14812] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.163516][T14813] bond7: (slave gretap2): making interface the new active one [ 406.172524][T14813] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 406.266734][T14726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.320892][T14820] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 406.588805][T14726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.749161][T14726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.785652][T14726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.829681][T14726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.847247][ T5844] Bluetooth: hci0: command tx timeout [ 407.140804][T14726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.213107][T14726] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.248174][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.255319][ T8082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.308521][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.315730][ T8075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.814642][T14726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.949311][T14726] veth0_vlan: entered promiscuous mode [ 407.961794][T14726] veth1_vlan: entered promiscuous mode [ 408.003279][T14849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.109975][T14849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.182812][T14726] veth0_macvtap: entered promiscuous mode [ 408.219814][T14849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.275716][T14726] veth1_macvtap: entered promiscuous mode [ 408.357460][T14849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.503084][T14855] syzkaller0: entered promiscuous mode [ 408.509402][T14855] syzkaller0: entered allmulticast mode [ 408.520180][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.538172][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.559750][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.598581][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.614985][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.634150][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.654183][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.674434][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.714212][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.754134][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.784313][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.809720][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.845149][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.876074][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.914150][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.938717][ T5844] Bluetooth: hci0: command tx timeout [ 408.946142][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.976513][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.994199][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.009053][T14726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.802184][T14869] xt_l2tp: invalid flags combination: 4 [ 411.010138][ T5844] Bluetooth: hci0: command tx timeout [ 412.959452][T14849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.985278][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.019644][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.031024][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.054212][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.078846][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.125967][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.146368][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.174194][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.196270][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.220913][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.230961][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.241658][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.255068][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.265974][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.276034][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.309229][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.329561][T14726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.351653][T14726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.373222][T14726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.438004][T14849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.460671][T14849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.493764][T14726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.534974][T14726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.543733][T14726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.553788][T14885] __nla_validate_parse: 1 callbacks suppressed [ 413.553806][T14885] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2568'. [ 413.584135][T14726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.634401][T14849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.664958][T14885] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2568'. [ 413.801503][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 413.816547][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 413.835636][T14895] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 413.874453][T14895] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2570'. [ 413.918699][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2571'. [ 413.954551][T14895] nbd: socks must be embedded in a SOCK_ITEM attr [ 413.965007][T14895] block nbd0: shutting down sockets [ 414.121882][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 414.152961][ T6086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.163301][ T6086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.255114][T14908] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2574'. [ 414.286031][ T6092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.298652][ T6092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.506262][T14915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2577'. [ 415.011007][T14931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2579'. [ 415.286928][T14941] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 415.325012][T14941] nbd: socks must be embedded in a SOCK_ITEM attr [ 415.331520][T14941] block nbd0: shutting down sockets [ 415.554649][T14953] tipc: Enabling of bearer rejected, already enabled [ 415.598774][T14951] Timeout policy `syz0' can only be used by L3 protocol number 2561 [ 415.732160][T14964] macsec0: entered promiscuous mode [ 416.364542][ T5851] Bluetooth: hci0: command 0x0405 tx timeout [ 416.544710][T15020] wireguard0: entered promiscuous mode [ 416.550285][T15020] wireguard0: entered allmulticast mode [ 419.080189][T15057] wg1 speed is unknown, defaulting to 1000 [ 419.087699][T15057] lo speed is unknown, defaulting to 1000 [ 419.187818][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.197447][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.228879][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.249586][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.257928][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 419.266190][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.291187][T15069] __nla_validate_parse: 10 callbacks suppressed [ 419.291204][T15069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2617'. [ 419.371199][T15069] batadv2: entered allmulticast mode [ 419.415623][T15067] wg1 speed is unknown, defaulting to 1000 [ 419.422572][T15067] lo speed is unknown, defaulting to 1000 [ 419.504520][T15064] wg1 speed is unknown, defaulting to 1000 [ 419.560847][T15064] lo speed is unknown, defaulting to 1000 [ 420.002940][T15064] chnl_net:caif_netlink_parms(): no params data found [ 420.013742][T15088] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 420.161989][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 420.336117][T15064] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.383566][T15064] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.414642][T15064] bridge_slave_0: entered allmulticast mode [ 420.421849][T15064] bridge_slave_0: entered promiscuous mode [ 420.452650][T15064] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.473836][T15064] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.491524][T15064] bridge_slave_1: entered allmulticast mode [ 420.505529][T15064] bridge_slave_1: entered promiscuous mode [ 420.603622][T15109] wg1 speed is unknown, defaulting to 1000 [ 420.640952][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.679091][T15109] lo speed is unknown, defaulting to 1000 [ 420.688978][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.801240][T15119] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2630'. [ 420.858365][T15064] team0: Port device team_slave_0 added [ 420.903562][T15064] team0: Port device team_slave_1 added [ 421.078249][T15128] macvlan2: entered promiscuous mode [ 421.104049][T15128] bridge0: entered promiscuous mode [ 421.123343][T15128] bridge0: port 1(macvlan2) entered blocking state [ 421.134374][T15128] bridge0: port 1(macvlan2) entered disabled state [ 421.143907][T15128] macvlan2: entered allmulticast mode [ 421.150151][T15128] bridge0: entered allmulticast mode [ 421.157226][T15128] macvlan2: left allmulticast mode [ 421.167029][T15128] bridge0: left allmulticast mode [ 421.185193][T15128] bridge0: left promiscuous mode [ 421.232380][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.240780][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.267908][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.281466][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.291487][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.320418][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.324980][ T5851] Bluetooth: hci0: command tx timeout [ 421.823879][T15064] hsr_slave_0: entered promiscuous mode [ 421.831245][T15064] hsr_slave_1: entered promiscuous mode [ 421.838521][T15064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.850728][T15064] Cannot create hsr debugfs directory [ 421.962536][T15147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2638'. [ 421.985765][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2638'. [ 422.045405][T15147] batman_adv: batadv0: Removing interface: dummy0 [ 422.320963][T15064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.464870][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 423.407758][ T5851] Bluetooth: hci0: command tx timeout [ 425.258277][T15064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.476984][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2649'. [ 425.494054][ T5851] Bluetooth: hci0: command tx timeout [ 425.530883][T15064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.546306][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2649'. [ 425.719469][T15064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.770617][T15196] netlink: 'syz.1.2654': attribute type 6 has an invalid length. [ 425.795771][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 425.959937][T15196] wg1 speed is unknown, defaulting to 1000 [ 425.992521][T15194] wg1 speed is unknown, defaulting to 1000 [ 426.001138][T15196] lo speed is unknown, defaulting to 1000 [ 426.043673][T15194] lo speed is unknown, defaulting to 1000 [ 426.119284][T15064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.124625][T15211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2658'. [ 426.146844][T15211] netlink: 'syz.4.2658': attribute type 7 has an invalid length. [ 426.151715][T15064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.174061][T15211] netlink: 'syz.4.2658': attribute type 8 has an invalid length. [ 426.218243][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 426.228647][T15064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.297576][T15211] erspan0: entered promiscuous mode [ 426.316918][T15211] gretap0: entered promiscuous mode [ 426.344328][T15211] erspan0: left promiscuous mode [ 426.361612][T15211] gretap0: left promiscuous mode [ 426.394488][T15064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.666352][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 426.691027][T15225] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 426.729535][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 426.847073][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.928707][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.953733][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.960952][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.035755][T14993] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.042996][T14993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.128541][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 427.301403][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 427.568144][ T5851] Bluetooth: hci0: command tx timeout [ 427.667870][T15064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.860351][T15064] veth0_vlan: entered promiscuous mode [ 427.890461][T15064] veth1_vlan: entered promiscuous mode [ 427.993081][T15064] veth0_macvtap: entered promiscuous mode [ 428.018206][T15064] veth1_macvtap: entered promiscuous mode [ 428.049322][T15276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.104711][T15278] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2675'. [ 428.141839][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.204363][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.234285][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.250353][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.261510][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.273636][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.284978][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.295950][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.325077][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.364443][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.384341][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.400701][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.418802][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.430160][T15295] x_tables: duplicate underflow at hook 2 [ 428.441103][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.464215][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.475737][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.486499][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.498618][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.521862][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.532877][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.547035][T15064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.607824][T15295] ax25_connect(): syz.4.2681 uses autobind, please contact jreuter@yaina.de [ 428.620838][T15290] wg1 speed is unknown, defaulting to 1000 [ 428.630151][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.662237][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.693360][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.717648][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.735894][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.747121][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.757227][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.771868][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.782023][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.792669][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.802987][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.814109][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.825021][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.835685][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.846222][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.856910][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.882185][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.904217][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.914426][T15064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.926071][T15064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.938334][T15064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.947137][T15292] wg1 speed is unknown, defaulting to 1000 [ 428.947166][T15290] lo speed is unknown, defaulting to 1000 [ 428.981008][T15292] lo speed is unknown, defaulting to 1000 [ 429.076919][T15064] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.106814][T15291] ------------[ cut here ]------------ [ 429.112886][T15291] refcount_t: decrement hit 0; leaking memory. [ 429.121913][T15064] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.132024][T15064] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.140840][T15064] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.194549][T15291] WARNING: CPU: 1 PID: 15291 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 429.204245][T15291] Modules linked in: [ 429.208185][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.4.2681 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 429.219113][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.229276][T15291] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 429.235575][T15291] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 fa 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 d7 7b 31 0b 01 90 48 c7 c7 [ 429.266231][T15291] RSP: 0018:ffffc90005c77b68 EFLAGS: 00010246 [ 429.275456][T15291] RAX: d6c6327473ac3200 RBX: ffff888020ad864c RCX: ffff888081231e00 [ 429.283482][T15291] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 429.293023][T15291] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 429.301469][T15291] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888020ad8608 [ 429.310220][T15291] R13: 0000000000000000 R14: ffff888020ad864c R15: dffffc0000000000 [ 429.319204][T15291] FS: 000055556b93a500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 429.328458][T15291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.335186][T15291] CR2: 000000110c30572e CR3: 000000002f1ca000 CR4: 00000000003526f0 [ 429.343195][T15291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 429.351293][T15291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 429.359366][T15291] Call Trace: [ 429.362674][T15291] [ 429.365716][T15291] ? __warn+0x165/0x4d0 [ 429.369901][T15291] ? refcount_warn_saturate+0xfa/0x1d0 [ 429.376829][T15291] ? report_bug+0x2b3/0x500 [ 429.381373][T15291] ? refcount_warn_saturate+0xfa/0x1d0 [ 429.388202][T15291] ? handle_bug+0x60/0x90 [ 429.392572][T15291] ? exc_invalid_op+0x1a/0x50 [ 429.397386][T15291] ? asm_exc_invalid_op+0x1a/0x20 [ 429.402481][T15291] ? __warn_printk+0x292/0x360 [ 429.407511][T15291] ? refcount_warn_saturate+0xfa/0x1d0 [ 429.413021][T15291] ? refcount_warn_saturate+0xf9/0x1d0 [ 429.418656][T15291] ref_tracker_free+0x6af/0x7e0 [ 429.423555][T15291] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.429088][T15291] ? ax25_destroy_socket+0x551/0x5c0 [ 429.434504][T15291] ax25_release+0x368/0x960 [ 429.439048][T15291] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.444626][T15291] sock_close+0xbc/0x240 [ 429.448906][T15291] ? __pfx_sock_close+0x10/0x10 [ 429.453822][T15291] __fput+0x3e9/0x9f0 [ 429.457971][T15291] task_work_run+0x24f/0x310 [ 429.462605][T15291] ? _raw_spin_unlock+0x28/0x50 [ 429.467630][T15291] ? __pfx_task_work_run+0x10/0x10 [ 429.472776][T15291] ? syscall_exit_to_user_mode+0xa3/0x340 [ 429.480028][T15291] syscall_exit_to_user_mode+0x13f/0x340 [ 429.487222][T15291] do_syscall_64+0x100/0x230 [ 429.491881][T15291] ? clear_bhb_loop+0x35/0x90 [ 429.496732][T15291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.502676][T15291] RIP: 0033:0x7fbd0098d169 [ 429.507280][T15291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.527020][T15291] RSP: 002b:00007ffc748812b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.535563][T15291] RAX: 0000000000000000 RBX: 00007fbd00ba7ba0 RCX: 00007fbd0098d169 [ 429.543574][T15291] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.551701][T15291] RBP: 00007fbd00ba7ba0 R08: 00000000000115f0 R09: 00000012748815af [ 429.559784][T15291] R10: 00000000005e589c R11: 0000000000000246 R12: 0000000000068c6c [ 429.568032][T15291] R13: 00007fbd00ba6080 R14: ffffffffffffffff R15: 00007ffc748813d0 [ 429.576168][T15291] [ 429.580678][T15291] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 429.587995][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.4.2681 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 429.598759][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.608840][T15291] Call Trace: [ 429.612124][T15291] [ 429.615060][T15291] dump_stack_lvl+0x241/0x360 [ 429.619783][T15291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.625000][T15291] ? __pfx__printk+0x10/0x10 [ 429.629593][T15291] ? _printk+0xd5/0x120 [ 429.633757][T15291] ? __init_begin+0x41000/0x41000 [ 429.638810][T15291] ? vscnprintf+0x5d/0x90 [ 429.643154][T15291] panic+0x349/0x880 [ 429.647057][T15291] ? __warn+0x174/0x4d0 [ 429.651221][T15291] ? __pfx_panic+0x10/0x10 [ 429.655660][T15291] __warn+0x344/0x4d0 [ 429.659649][T15291] ? refcount_warn_saturate+0xfa/0x1d0 [ 429.665136][T15291] report_bug+0x2b3/0x500 [ 429.669479][T15291] ? refcount_warn_saturate+0xfa/0x1d0 [ 429.674953][T15291] handle_bug+0x60/0x90 [ 429.679115][T15291] exc_invalid_op+0x1a/0x50 [ 429.683631][T15291] asm_exc_invalid_op+0x1a/0x20 [ 429.688501][T15291] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 429.694578][T15291] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 fa 7b 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 d7 7b 31 0b 01 90 48 c7 c7 [ 429.714190][T15291] RSP: 0018:ffffc90005c77b68 EFLAGS: 00010246 [ 429.720269][T15291] RAX: d6c6327473ac3200 RBX: ffff888020ad864c RCX: ffff888081231e00 [ 429.728280][T15291] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 429.736256][T15291] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 429.744237][T15291] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888020ad8608 [ 429.752211][T15291] R13: 0000000000000000 R14: ffff888020ad864c R15: dffffc0000000000 [ 429.760197][T15291] ? __warn_printk+0x292/0x360 [ 429.764967][T15291] ? refcount_warn_saturate+0xf9/0x1d0 [ 429.770436][T15291] ref_tracker_free+0x6af/0x7e0 [ 429.775295][T15291] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.780694][T15291] ? ax25_destroy_socket+0x551/0x5c0 [ 429.786000][T15291] ax25_release+0x368/0x960 [ 429.790509][T15291] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.795900][T15291] sock_close+0xbc/0x240 [ 429.800155][T15291] ? __pfx_sock_close+0x10/0x10 [ 429.805015][T15291] __fput+0x3e9/0x9f0 [ 429.809012][T15291] task_work_run+0x24f/0x310 [ 429.813606][T15291] ? _raw_spin_unlock+0x28/0x50 [ 429.818469][T15291] ? __pfx_task_work_run+0x10/0x10 [ 429.823589][T15291] ? syscall_exit_to_user_mode+0xa3/0x340 [ 429.829331][T15291] syscall_exit_to_user_mode+0x13f/0x340 [ 429.834982][T15291] do_syscall_64+0x100/0x230 [ 429.839595][T15291] ? clear_bhb_loop+0x35/0x90 [ 429.844288][T15291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.850296][T15291] RIP: 0033:0x7fbd0098d169 [ 429.854761][T15291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.874378][T15291] RSP: 002b:00007ffc748812b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 429.882804][T15291] RAX: 0000000000000000 RBX: 00007fbd00ba7ba0 RCX: 00007fbd0098d169 [ 429.890786][T15291] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 429.898772][T15291] RBP: 00007fbd00ba7ba0 R08: 00000000000115f0 R09: 00000012748815af [ 429.906754][T15291] R10: 00000000005e589c R11: 0000000000000246 R12: 0000000000068c6c [ 429.914731][T15291] R13: 00007fbd00ba6080 R14: ffffffffffffffff R15: 00007ffc748813d0 [ 429.922718][T15291] [ 429.926043][T15291] Kernel Offset: disabled [ 429.930425][T15291] Rebooting in 86400 seconds..