last executing test programs: 1m20.236241242s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 1m12.171186841s ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1m10.662914463s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 56.894067145s ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 55.692210425s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 42.044557572s ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 40.693946532s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 27.858838039s ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 26.970102806s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 13.825597827s ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 12.593941578s ago: executing program 1 (id=359): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x7, 0x400006a}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) 1.425803121s ago: executing program 0 (id=1096): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB='#h\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, r3, 0x805, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x3, 0xf, 0x400, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x8000, 0x2, 0x4}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1.380624429s ago: executing program 4 (id=1097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffff8, 0xf, 0xfffffffffffffffe, 0x1, 0x2af4, 0x7, 0x8, 0x9}, &(0x7f0000000080)={0x6, 0x1, 0x1ff, 0x101, 0x2, 0x0, 0x3, 0x1}, &(0x7f00000000c0)={0x6, 0x800, 0x8000000000000000, 0x1000, 0x1, 0xd, 0xffffffff, 0x4}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x24) sendmsg$key(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x2, 0x10, 0x5, 0x7, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.245727411s ago: executing program 0 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.209569303s ago: executing program 4 (id=1100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6f4d}]}]}, 0x28}}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000002800128008000100736974001c00028008000c000000008006000d000800000008000300e0000001"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x7, 0x12) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x4014) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0008000e6dd76abf77acca03bbc7ea70798fb9a1b6ff6346a71b8487acecdf85c2aa1454363f41691806e618ce7633b4a769af50c222a7766cca849d6a6ec0cbdfbaee000000000000", @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=0x0, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef1b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003", @ANYBLOB, @ANYRESOCT=r8, @ANYRES16=r7, @ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x8002810}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000440), 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x44000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="f7706572665f6576656e74202d72646d61202b63707561636374205cb99367e610799359589fba301a9860f19b2b7a8afcdbcdac6fa97e031930165c4e30a3757f7099f4b2738745cb5381935ded4b565868b55c2a7a0b4a3c67c2ac48eca2d18ff0131ee04c6c6f87ab5aeb7844753d662adf064ba98676cddf2143667f2fb17a1dc91d7ef90f803d137dc5d59f7caa8503f379501b57c1f7265747ba16cfa5a09f57d4dba311fc4baa66"], 0x1b) 728.177578ms ago: executing program 0 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000380)="10008100c23b88a89ea5aea1", 0xc, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\v\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b0000000400fc00"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000904087b9c98c9300000000000085000000890000009500000000001e80b6d2349b8cce7bb53dcfbed0cc70e69b2ded7a7d3251bacca44f4f4dab67ca3d022cd56df544d37e40ff1d2a6237e6776a6d5ed1480de900"/104], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005ff662f6cf66a6bfb057c8fb687590a82f167bb5d0fd94ef2f1f0b7acd7d2ba0863ac33795ba028d31f1bd20db636aa9abf6cd87957a5958b8bf6cfdd7f1a4997175d64047a7f538d399a587632804bcd0e61a7dfe0150cf58788dd17fc63d80e1f2eb8995", @ANYRES16=r10, @ANYBLOB="0900000000000000000007000000140001800500020001000000080006001d000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 726.824049ms ago: executing program 3 (id=1103): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f00000005c0)) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) unshare(0x20000400) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) syz_emit_ethernet(0x82, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8"], 0x0) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xffffffea}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x2e, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (async) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) getpeername$inet6(r7, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_proto_private(r8, 0x89eb, &(0x7f00000007c0)="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") (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) 724.240066ms ago: executing program 4 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000100011e938180ef542c80e2500000000", @ANYRES32=0x0, @ANYBLOB="0401000000000000140012800e0001007663616e000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 723.394573ms ago: executing program 0 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x3a, "4be91e3618c1f9ecd4e44a8dce5e0ad8fa5fd2dc123da98a458016731c8d3a075850969b60d3227f012a20407d04c3859e0098afb06023a367d8"}}) 650.021428ms ago: executing program 3 (id=1106): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0xe4, 0x29, 0x100, 0x200, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x2, 0xfff1}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x6, 0x7f6}}, @TCA_HFSC_FSC={0x10, 0x2, {0x800, 0x10, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x3, 0xfffffffb}}, @TCA_HFSC_USC={0x10, 0x3, {0x81, 0x5, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb7}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffffff00}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}]}, 0xe4}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3bc}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}, 0xfffffffd}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 567.049696ms ago: executing program 3 (id=1107): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)="f81c7dbe1efbf5ee98fc313c4d228e22617ccb992e9e1181ff9d227e7f80e6362f78884fe14e92b081b995eb93b20d7dbf9eba350a671a855d633d5a8578c8", 0x3f}, {&(0x7f0000000100)="e2636aafdff269df1a757fe0ada51601ed155e924f83d1ea0f3bbac0f93e1b565b24c53e4639903cc2d8dd4b168ce30c17b64e0d9ebe088fdad694486de9743319e7247930ec8b7b323417752dc46fb8b745aa285eda68b9223007ef1dff2eec9b71b484067147c8dcc2165072af7705a6a5b2d6390d48ad800739fbb5a6a788a8e9c23c91be7a13418f2260f79454fbcfb7b1f58a722a7c6fc520e06e91e3bd962722c3614a7d", 0xa7}, {&(0x7f0000000200)="979f7f9e4a03c67fc8c72b43fde1e401ddc8c4c77a653ccc908f10d4091a0e33be65a05a6cf78c419e4678b0138ada82b5e3d02ebb1470ea714a898c6c2a820be5c6d1cdf3230fbb16167bd8b599532e0ee2dc0028cb53478a874e8e1dae7f1a6e32c8abb63fe243ff02fa2c07630ddc6eebdcbdad6f725b14f5bcf4d4e2361c1c46f0c7b414cf3ac5043e359b8d3f7db250c65ab375b96e934f6eedbe7b3d4989f1ebf6eb95fd8b81e73a0117727a7085bb73bc0d13dc2a89aa9551015f6b14289686a9730c48dfe33331fc317d3e29255127e69f4b1852812d4670bb2fb4acd69c9c80", 0xe4}, {&(0x7f0000000300)="e1ca1653e5166d3f3742fdc385f76870aff2b044fd5b3bc511c07676a9cbb0bada13dfab9558ca8d55df41789c7444e2af605385339b16ea03f36af20ef9fa86c9c9eb5a3f00154aa9da5702f68faa710ad0b92cd7c6cd4df2c935ab4e5f118f8cac44bc11e5bd1dc92a8cfb825656b61cd5cff8307cbfd33c6fc5a19a9c4df570ef35eff6030cf2dfe57a72c1c834fe003ff4f19229389f5afefd0d3d3a7908a1f92577bc92f660b59d037d20403c63b08857b5c0ee3178d22fc0ce85f86daac4d5add5cc51fbd5c2c15115899dcef9683b60d9a4e132e8f95133618abefa293bbcd92e663b109b25d422d4a2ffce300d1d2a6c", 0xf4}, {&(0x7f0000000400)="561b753cdd0af2b70166601feb4fff960549f4448510b3a44c185afb02df6049a157ac70c2323dafae1bd8508aacb67e6bcd00de76a49567216e5e1950f25d348da4a652f1efa11be995859961cde11b1e24ffa8119997a2e448065baad55241a46d0ad2ec57f15f6223005b2b565335936ed338c68e0cf539b2500e8f3988f0a1b568a92a46861dd57ee30013f51161c0b105348d1b00d81a86ff000af9111240b04485d4deb954759d46b7a4041d03bb553ecf2cc952ab6479eb83b2e4e61401467b6ed1704350f87ac703306b59425f87b50cc0f6514bb4354b233cf27bd01644f58afdccc98012f86a368ce007ee0e56e5", 0xf3}, {&(0x7f0000000500)="f9315cce0249722db86cc5ea", 0xc}, {&(0x7f0000000540)="08f6125b5f074f7870086c3b96907fac2594b6cf0da9ca3ddf8f3ae03a70a6b030cdff95fd1a52daba27131f2dcf461ad938c66ea18c0c219294638787eab0dd4704a2901682709c5eb3f5cd38903bba6e6bc2cc091cfd95c8f4c09c289cfe8b83af5f5940c1429278e66bcd57e3bf610e54d345588792194754e549e1923ec6d04c92fba3e704154681f7e1469f8b68cc36d26834af0cfc65b31cf842871686a1e472593f0a0e5cbb1b08477b64892a5e4556738f6bd26af6858be91e8bdbe13710bea89597a104dd2bd277f027c6", 0xcf}], 0x7, &(0x7f00000006c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x41}, 0x40890) syz_emit_ethernet(0xc2, &(0x7f0000000800)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x37c1, 0xa0, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "8efe2a70fa428b9b5fa5a000a1e15069d83e9f186b2dd939de4c3ad40b5a74a9ebc96f569511f4d5dd9da74767b7382987b9e1eb642f0e514e75c6b8d3efd3d72a483c21cf8bae1c09b203debc3845addc404aa3deaa6139a10ae4ea24572dff95926e7de7a45ef10e05fde748325ced77fa60352f66e2ee011b91baecd3e8d1e8ba75fe52cf333615cb2a20645c2d92da29facf"}}}}}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r5, 0xfffffffffffffffc, r4, 0x0, 0x20, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r10, 0xc24, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x710}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x132}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x400}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) accept4(r0, &(0x7f0000000740), &(0x7f00000007c0)=0x80, 0x80000) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r11, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r9]) 490.244948ms ago: executing program 4 (id=1108): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0xfffffffffffffffd, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r3, 0x2, 0x7, 0x7}) (async) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) (async) bind$xdp(r5, &(0x7f0000000040)={0x2c, 0x0, r2, 0x31, r6}, 0x10) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000002c0)) write$ppp(r4, &(0x7f00000003c0)='\x00!', 0x100000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="080001006505000000a68314e7aa5da1c3", @ANYRES32=r3], 0x90}}, 0x0) 437.655412ms ago: executing program 0 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x476d697727e1f829}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x13}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0xc0c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r8, 0x400454cd, 0x10e) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 274.492486ms ago: executing program 4 (id=1110): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000009000000060000000000000e00000000000000000000000000005f2e00"], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000004300)=""/49, 0x31}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0x20, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="050000000000fedbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0c0023800600160013000000"], 0x28}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x17c}}, 0x4008000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000280)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) openat$cgroup_ro(r7, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @local}, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x4e24, @multicast2}], 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRESDEC=r9, @ANYRESDEC=r5, @ANYRESOCT=r0, @ANYRES64, @ANYRES8=r1, @ANYRES16=r9], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000540)=0x10001, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 223.964118ms ago: executing program 3 (id=1111): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x9) (async) syz_emit_ethernet(0x10d6, &(0x7f0000002d00)={@broadcast, @link_local, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x5, 0x1}}, {@mpls_mc={0x8848, {[{0x25d}], @ipv4=@tcp={{0x23, 0x4, 0x3, 0x23, 0x10bc, 0x66, 0x0, 0x8, 0x6, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x0, [{@multicast2, 0x10}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp={0x44, 0x1c, 0x6a, 0x0, 0x1, [0x7fffffff, 0xfffffffd, 0x18000, 0x7ff, 0xffffffff, 0x4]}, @ssrr={0x89, 0xb, 0x25, [@private=0xa010100, @multicast2]}, @rr={0x7, 0x7, 0xf4, [@multicast1]}, @lsrr={0x83, 0x2b, 0xa3, [@initdev={0xac, 0x1e, 0x5, 0x0}, @private=0xa010100, @broadcast, @empty, @remote, @remote, @broadcast, @remote, @remote, @multicast2]}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x80, 0x26b1, 0x0, 0xa, {[@generic={0x1, 0xb, "282c0fa135ba223d2e"}, @exp_fastopen={0xfe, 0xe, 0xf989, "85f019f6954891ebf35e"}, @nop, @nop]}}, {"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"}}}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@bridge_delvlan={0x18, 0x71, 0x800, 0x70bd29, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000032000000001400058008000240000000000800014000006006140000001100010000000000000000000000000a000000000000000000"], 0xa0}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) getsockname(r4, 0x0, &(0x7f0000001340)) (async) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES8, @ANYRES32=r3, @ANYRES32, @ANYRES16, @ANYBLOB="6c7d8994f422a4ba0a913e634d0726581483d38cf735a5b5adcc57b605a85db9b9dfc5bec45d5067252e93b450291926f012aaeb8c152c665eac571ad2fbdeade310c599fbc29cf7471b483b474cae54774ea92b222d9469a80c500298b6f23cb3451559b28281115c67ba51431f234e8e1a03c9eda4ea53e0", @ANYRES16=0x0, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRESHEX=r2, @ANYRESHEX=r3], 0x0, 0x80000, 0x0, 0x0, 0x40efc, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 137.119173ms ago: executing program 0 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fd0000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f0000f600"/86], 0x5c}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fd0000001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f0000f600"/86], 0x5c}, 0x1, 0x620b}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r8], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4d8f9ce}}, [0x9, 0x6, 0xc5, 0x5, 0xc37, 0xd89, 0x0, 0x9, 0x3, 0x7, 0xc, 0x2, 0x2cd, 0x9, 0x2026]}, &(0x7f0000000080)=0x100) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180070366772653000000000000000000014000380080002000000000004000500040004000000000000000045132f4962524a6884c35bce48b626e513e91cb1eeabfd50c95dbbcf441838766ac903ed624982a9f3a073c52a291be6bca30de7e20f708e5c4108bdeb6551f15da8ce0b8ff18607a14f2c8f92b5883fb38a9b94faac2f04c75af8806983316d2aa1c1789cdcf050e35939d8317292429eeb4d069c37e6a81658312130e775d1e76ff1535a001b60e5e889293954df83774919"], 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180070366772653000000000000000000014000380080002000000000004000500040004000000000000000045132f4962524a6884c35bce48b626e513e91cb1eeabfd50c95dbbcf441838766ac903ed624982a9f3a073c52a291be6bca30de7e20f708e5c4108bdeb6551f15da8ce0b8ff18607a14f2c8f92b5883fb38a9b94faac2f04c75af8806983316d2aa1c1789cdcf050e35939d8317292429eeb4d069c37e6a81658312130e775d1e76ff1535a001b60e5e889293954df83774919"], 0x40}}, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x2, 0x9}) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x2, 0x9}) 136.238243ms ago: executing program 3 (id=1113): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x32, @empty, 0x4e23, 0x3, 'wrr\x00', 0x0, 0x6, 0x44}, 0x2c) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x2, 0x4, 0x418, 0xffffffff, 0xd0, 0x250, 0x250, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x50cc}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0x7, 0x6, 0x4, @local, @remote, @local, [0xff000000, 0xffff00, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xffffffff, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 0x22}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010103}, @mcast1, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xffffff00], 'veth1_to_bond\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x8, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 51.95703ms ago: executing program 3 (id=1114): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$kcm(0x29, 0x5, 0x0) (async) 26.537978ms ago: executing program 2 (id=309): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0xc0000}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x620, 0x0, 0x11, 0x148, 0x0, 0x10, 0x588, 0x2a8, 0x2a8, 0x588, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x6, 0x4, 0x1, 0x4], 0x6}, {0x0, [0x4, 0x0, 0x1, 0x3, 0x1, 0x1], 0x2, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x680) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 0s ago: executing program 4 (id=1115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] veth0_vlan: left promiscuous mode [ 138.843544][ T5836] Bluetooth: hci1: command 0x0401 tx timeout [ 139.013514][ T5836] Bluetooth: hci2: command tx timeout [ 139.119338][ T8484] netlink: 'syz.3.543': attribute type 4 has an invalid length. [ 139.243891][ T5836] Bluetooth: hci0: command tx timeout [ 139.550240][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 139.586940][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 139.946054][ T8333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.959301][ T8333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.486671][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 140.553276][ T8514] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 140.593129][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.715233][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 140.746624][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 140.796328][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.862256][ T8524] macsec0: entered promiscuous mode [ 140.967221][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.974419][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.006660][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.013864][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.083489][ T5836] Bluetooth: hci2: command tx timeout [ 141.125620][ T8550] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 141.323642][ T5836] Bluetooth: hci0: command tx timeout [ 141.467238][ T8356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.504433][ T8356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.531717][ T8356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.579948][ T8356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.723242][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.899934][ T8333] veth0_vlan: entered promiscuous mode [ 141.937499][ T8333] veth1_vlan: entered promiscuous mode [ 141.958604][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.969624][ T8596] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 142.009765][ T8356] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.051339][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.058520][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.125487][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.132728][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.184596][ T8333] veth0_macvtap: entered promiscuous mode [ 142.222362][ T8603] netlink: 'syz.0.569': attribute type 11 has an invalid length. [ 142.231581][ T8333] veth1_macvtap: entered promiscuous mode [ 142.309931][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.322185][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.335839][ T8607] __nla_validate_parse: 1 callbacks suppressed [ 142.335872][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.570'. [ 142.364145][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.393513][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.406630][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.430404][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.442744][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.570'. [ 142.448313][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.456543][ T8606] nbd: device at index 64 is going down [ 142.508222][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.516223][ T8619] netlink: 192 bytes leftover after parsing attributes in process `syz.0.572'. [ 142.527031][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.539240][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.550113][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.573959][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.589918][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.601479][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.706971][ T8333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.752477][ T8333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.761846][ T8333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.771322][ T8333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.100857][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.129585][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.165203][ T5836] Bluetooth: hci2: command tx timeout [ 143.184892][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.260661][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.272780][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.360397][ T8356] veth0_vlan: entered promiscuous mode [ 143.389070][ T8356] veth1_vlan: entered promiscuous mode [ 143.456182][ T8356] veth0_macvtap: entered promiscuous mode [ 143.501789][ T8356] veth1_macvtap: entered promiscuous mode [ 143.551658][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.613410][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.642375][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.662002][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.693628][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.706984][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.726283][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.740452][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.781972][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.801583][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 143.839561][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.875440][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.892168][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.915071][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.925334][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.936109][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.948874][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.962424][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.992772][ T8686] nbd: must specify a size in bytes for the device [ 144.009298][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.049461][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.084547][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.092193][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.586'. [ 144.102251][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.112516][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.151127][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 144.197591][ T8356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.253765][ T8356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.283661][ T8356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.296281][ T8356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.428306][ T6107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.559231][ T6107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.649045][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.672107][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.706614][ T6083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.716213][ T6083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.029501][ T6107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.204457][ T6107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.304416][ T8733] syz.3.590 (8733) used greatest stack depth: 16208 bytes left [ 145.549307][ T6107] bridge_slave_1: left allmulticast mode [ 145.559551][ T6107] bridge_slave_1: left promiscuous mode [ 145.582157][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.641188][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.651830][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.659836][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.667772][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.675574][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.685391][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.719583][ T6107] bridge_slave_0: left allmulticast mode [ 145.764650][ T6107] bridge_slave_0: left promiscuous mode [ 145.770408][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.797355][ T8757] netlink: 'syz.3.596': attribute type 15 has an invalid length. [ 145.910330][ T8757] netlink: 'syz.3.596': attribute type 15 has an invalid length. [ 146.371780][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.382354][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.392657][ T6107] bond0 (unregistering): Released all slaves [ 146.407457][ T8770] netlink: 'syz.4.597': attribute type 21 has an invalid length. [ 146.417794][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.597'. [ 146.540602][ T8749] lo speed is unknown, defaulting to 1000 [ 146.784547][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 147.226380][ T6107] hsr_slave_0: left promiscuous mode [ 147.273204][ T6107] hsr_slave_1: left promiscuous mode [ 147.279932][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.301662][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.325677][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.343452][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.399460][ T6107] veth1_macvtap: left promiscuous mode [ 147.416875][ T6107] veth0_macvtap: left promiscuous mode [ 147.429554][ T6107] veth1_vlan: left promiscuous mode [ 147.441159][ T6107] veth0_vlan: left promiscuous mode [ 147.457409][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.471152][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.481672][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.498632][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.506666][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.514393][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.726436][ T5834] Bluetooth: hci0: command tx timeout [ 147.906320][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 147.945203][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 148.388553][ T8821] lo speed is unknown, defaulting to 1000 [ 148.527379][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 148.920974][ T8852] netlink: 'syz.3.610': attribute type 28 has an invalid length. [ 148.965332][ T8852] netlink: 'syz.3.610': attribute type 3 has an invalid length. [ 148.983274][ T8852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.610'. [ 149.065040][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.090228][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.104555][ T8749] bridge_slave_0: entered allmulticast mode [ 149.124836][ T8749] bridge_slave_0: entered promiscuous mode [ 149.136455][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 149.160508][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.187950][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.212580][ T8749] bridge_slave_1: entered allmulticast mode [ 149.230841][ T8749] bridge_slave_1: entered promiscuous mode [ 149.563426][ T5834] Bluetooth: hci2: command tx timeout [ 149.685808][ T6107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.791861][ T8902] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 149.803450][ T5834] Bluetooth: hci0: command tx timeout [ 149.889260][ T8902] bond2: entered promiscuous mode [ 149.901922][ T8902] bond2: entered allmulticast mode [ 149.908349][ T8902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.930434][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.958949][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.994635][ T6107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.115989][ T8749] team0: Port device team_slave_0 added [ 150.177671][ T6107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.197259][ T8749] team0: Port device team_slave_1 added [ 150.344971][ T6107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.435343][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.442332][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.475687][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.499805][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.527795][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.617109][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.727641][ T8749] hsr_slave_0: entered promiscuous mode [ 150.740618][ T8749] hsr_slave_1: entered promiscuous mode [ 150.780858][ T8944] tipc: Enabling of bearer rejected, failed to enable media [ 151.027315][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 151.079282][ T8967] netlink: 160 bytes leftover after parsing attributes in process `syz.3.630'. [ 151.093549][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 151.279587][ T6107] bridge_slave_1: left allmulticast mode [ 151.286071][ T6107] bridge_slave_1: left promiscuous mode [ 151.291859][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.360591][ T6107] bridge_slave_0: left allmulticast mode [ 151.382855][ T6107] bridge_slave_0: left promiscuous mode [ 151.392918][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.643445][ T5834] Bluetooth: hci2: command tx timeout [ 151.764878][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.776136][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.786274][ T6107] bond0 (unregistering): Released all slaves [ 151.883607][ T5834] Bluetooth: hci0: command tx timeout [ 151.970856][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 152.003573][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.010969][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.020059][ T8821] bridge_slave_0: entered allmulticast mode [ 152.027462][ T8821] bridge_slave_0: entered promiscuous mode [ 152.151977][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.160313][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.169726][ T8821] bridge_slave_1: entered allmulticast mode [ 152.177574][ T8821] bridge_slave_1: entered promiscuous mode [ 152.186975][ T8989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 152.548809][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.667629][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.751882][ T6107] hsr_slave_0: left promiscuous mode [ 152.783652][ T6107] hsr_slave_1: left promiscuous mode [ 152.789549][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.798783][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.810943][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.825604][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.853271][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 152.869779][ T6107] veth1_macvtap: left promiscuous mode [ 152.869942][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 152.883490][ T6107] veth0_macvtap: left promiscuous mode [ 152.895364][ T6107] veth1_vlan: left promiscuous mode [ 152.900756][ T6107] veth0_vlan: left promiscuous mode [ 152.925604][ T9023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 153.431893][ T6107] team0 (unregistering): Port device team_slave_1 removed [ 153.471156][ T6107] team0 (unregistering): Port device team_slave_0 removed [ 153.728895][ T5834] Bluetooth: hci2: command tx timeout [ 153.963830][ T5834] Bluetooth: hci0: command tx timeout [ 154.103071][ T9027] team0 (unregistering): Port device team_slave_0 removed [ 154.128485][ T9027] team0 (unregistering): Port device team_slave_1 removed [ 154.178845][ T8821] team0: Port device team_slave_0 added [ 154.213877][ T8821] team0: Port device team_slave_1 added [ 154.323615][ T9048] Illegal XDP return value 4294967274 on prog (id 156) dev N/A, expect packet loss! [ 154.362029][ T9053] netlink: 666 bytes leftover after parsing attributes in process `syz.4.647'. [ 154.408137][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.433267][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.488531][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.511229][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.518420][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.544774][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.603851][ T9060] team_slave_1 (unregistering): left promiscuous mode [ 154.611269][ T9060] team_slave_1 (unregistering): left allmulticast mode [ 154.641641][ T9060] team0: Port device team_slave_1 removed [ 154.777716][ T8821] hsr_slave_0: entered promiscuous mode [ 154.799722][ T8821] hsr_slave_1: entered promiscuous mode [ 154.826299][ T8821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.863512][ T8821] Cannot create hsr debugfs directory [ 154.991259][ T8749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.042378][ T8749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.121295][ T8749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.159253][ T8749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.184064][ T9096] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 155.460702][ T9106] macvlan1: entered promiscuous mode [ 155.479247][ T9106] macvlan1: left promiscuous mode [ 155.653389][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.699837][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 155.718730][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 155.739239][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 155.790342][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 155.803497][ T5834] Bluetooth: hci2: command tx timeout [ 155.811863][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.866692][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 155.896677][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.903852][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.911468][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 155.935550][ T9124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.666'. [ 155.955861][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.962994][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.110275][ T9137] bridge0: port 3(team0) entered disabled state [ 156.162181][ T9144] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 156.309715][ T9137] team0 (unregistering): left allmulticast mode [ 156.316159][ T9137] team_slave_0: left allmulticast mode [ 156.321630][ T9137] team0 (unregistering): left promiscuous mode [ 156.329547][ T9137] team_slave_0: left promiscuous mode [ 156.336711][ T9137] bridge0: port 3(team0) entered disabled state [ 156.354780][ T9137] team0 (unregistering): Port device team_slave_0 removed [ 156.519657][ T8821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.567785][ T8821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.625851][ T8821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.640493][ T8821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.898400][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.967714][ T9172] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 156.997563][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.043499][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'. [ 157.052825][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 157.119463][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.228123][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.235316][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.291702][ T8749] veth0_vlan: entered promiscuous mode [ 157.325926][ T9192] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 157.395172][ T8749] veth1_vlan: entered promiscuous mode [ 157.415018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.422185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.578825][ T8749] veth0_macvtap: entered promiscuous mode [ 157.606024][ T8749] veth1_macvtap: entered promiscuous mode [ 157.655312][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.696878][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.743541][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.764293][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.777658][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.821881][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.873345][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.892342][ T8749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.923224][ T8749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.974620][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.986800][ T8749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.033390][ T8749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.042144][ T8749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.063681][ T8749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.151853][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.203680][ T5834] Bluetooth: hci2: command tx timeout [ 158.361835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.403738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.450106][ T8821] veth0_vlan: entered promiscuous mode [ 158.529940][ T9247] nft_compat: unsupported protocol 0 [ 158.537767][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.557692][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.567308][ T8821] veth1_vlan: entered promiscuous mode [ 158.676965][ T8821] veth0_macvtap: entered promiscuous mode [ 158.718174][ T8821] veth1_macvtap: entered promiscuous mode [ 158.834638][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.871612][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.893577][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.915737][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.942402][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.964798][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.988813][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.105100][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.148129][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.172047][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.198270][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.223363][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.234254][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.246031][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.301339][ T8821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.310142][ T8821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.320048][ T8821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.329207][ T8821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.661739][ T9308] __nla_validate_parse: 8 callbacks suppressed [ 159.661758][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 159.692026][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.915688][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.958172][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.983248][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.019531][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.065573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.078356][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.212801][ T6084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.360943][ T6084] bridge_slave_1: left allmulticast mode [ 160.367316][ T6084] bridge_slave_1: left promiscuous mode [ 160.373109][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.382661][ T6084] bridge_slave_0: left allmulticast mode [ 160.389887][ T6084] bridge_slave_0: left promiscuous mode [ 160.396888][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.081309][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.104435][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.113668][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.123534][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.132012][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.141101][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.169503][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.181985][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.193108][ T6084] bond0 (unregistering): Released all slaves [ 161.231180][ T9354] lo speed is unknown, defaulting to 1000 [ 161.529562][ T9373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.706'. [ 161.561096][ T9373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.882961][ T9390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.710'. [ 161.924959][ T9393] FAULT_INJECTION: forcing a failure. [ 161.924959][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.935182][ T9390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.710'. [ 161.974970][ T9393] CPU: 0 UID: 0 PID: 9393 Comm: syz.4.709 Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 161.974997][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.975012][ T9393] Call Trace: [ 161.975018][ T9393] [ 161.975025][ T9393] dump_stack_lvl+0x241/0x360 [ 161.975059][ T9393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.975076][ T9393] ? __pfx__printk+0x10/0x10 [ 161.975095][ T9393] ? __pfx_lock_release+0x10/0x10 [ 161.975124][ T9393] should_fail_ex+0x40a/0x550 [ 161.975150][ T9393] _copy_from_user+0x2d/0xb0 [ 161.975170][ T9393] copy_msghdr_from_user+0xae/0x680 [ 161.975195][ T9393] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.975211][ T9393] ? __fget_files+0x2a/0x410 [ 161.975233][ T9393] ? __fget_files+0x2a/0x410 [ 161.975262][ T9393] __sys_sendmsg+0x209/0x350 [ 161.975287][ T9393] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.975321][ T9393] ? do_sys_openat2+0x17a/0x1d0 [ 161.975366][ T9393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.975389][ T9393] ? do_syscall_64+0x100/0x230 [ 161.975411][ T9393] ? do_syscall_64+0xb6/0x230 [ 161.975437][ T9393] do_syscall_64+0xf3/0x230 [ 161.975455][ T9393] ? clear_bhb_loop+0x35/0x90 [ 161.975480][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.975500][ T9393] RIP: 0033:0x7f4adf38cde9 [ 161.975523][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.975537][ T9393] RSP: 002b:00007f4ae0107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.975555][ T9393] RAX: ffffffffffffffda RBX: 00007f4adf5a6080 RCX: 00007f4adf38cde9 [ 161.975567][ T9393] RDX: 0000000020004090 RSI: 0000400000000280 RDI: 0000000000000004 [ 161.975577][ T9393] RBP: 00007f4ae0107090 R08: 0000000000000000 R09: 0000000000000000 [ 161.975587][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.975597][ T9393] R13: 0000000000000001 R14: 00007f4adf5a6080 R15: 00007ffd2e69d7c8 [ 161.975623][ T9393] [ 162.323975][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.336393][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.353621][ T6084] hsr_slave_0: left promiscuous mode [ 162.360606][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.377836][ T6084] hsr_slave_1: left promiscuous mode [ 162.378152][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.385571][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.398641][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.406299][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.421277][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.445217][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.452681][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.547533][ T6084] veth1_macvtap: left promiscuous mode [ 162.553129][ T6084] veth0_macvtap: left promiscuous mode [ 162.579390][ T6084] veth1_vlan: left promiscuous mode [ 162.585237][ T6084] veth0_vlan: left promiscuous mode [ 163.067617][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 163.111705][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 163.246805][ T5836] Bluetooth: hci0: command tx timeout [ 163.531518][ T9354] chnl_net:caif_netlink_parms(): no params data found [ 163.668779][ T9394] lo speed is unknown, defaulting to 1000 [ 163.870549][ T9354] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.915208][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.941131][ T9354] bridge_slave_0: entered allmulticast mode [ 163.967768][ T9354] bridge_slave_0: entered promiscuous mode [ 164.067140][ T9354] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.107933][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.133567][ T9354] bridge_slave_1: entered allmulticast mode [ 164.140966][ T9354] bridge_slave_1: entered promiscuous mode [ 164.177841][ T9447] tipc: Started in network mode [ 164.182753][ T9447] tipc: Node identity 828c12a91ca9, cluster identity 4711 [ 164.204403][ T9447] tipc: Enabled bearer , priority 10 [ 164.232933][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 164.245063][ T9354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.379354][ T9354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.445484][ T5836] Bluetooth: hci2: command tx timeout [ 164.619501][ T6084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.744726][ T9354] team0: Port device team_slave_0 added [ 164.794701][ T6084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.843105][ T9354] team0: Port device team_slave_1 added [ 164.898236][ T6084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.919150][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.929920][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.959809][ T9354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.972679][ T9354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.979762][ T9354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.014911][ T9354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.136025][ T6084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.299704][ T9498] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 165.306615][ T9503] netlink: 39 bytes leftover after parsing attributes in process `syz.0.739'. [ 165.313427][ T9498] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.324149][ T5834] Bluetooth: hci0: command tx timeout [ 165.331505][ T9498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.339190][ T9498] IPv6: NLM_F_CREATE should be set when creating new route [ 165.345107][ T5883] tipc: Node number set to 2653229737 [ 165.346511][ T9498] IPv6: NLM_F_CREATE should be set when creating new route [ 165.359177][ T9498] IPv6: NLM_F_CREATE should be set when creating new route [ 165.398678][ T9354] hsr_slave_0: entered promiscuous mode [ 165.425798][ T9354] hsr_slave_1: entered promiscuous mode [ 165.622813][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 165.679076][ T9517] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 165.737951][ T6084] bridge_slave_1: left allmulticast mode [ 165.769887][ T6084] bridge_slave_1: left promiscuous mode [ 165.793667][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.831276][ T6084] bridge_slave_0: left allmulticast mode [ 165.853785][ T6084] bridge_slave_0: left promiscuous mode [ 165.874705][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.449445][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.475638][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.491198][ T6084] bond0 (unregistering): Released all slaves [ 166.525809][ T5834] Bluetooth: hci2: command tx timeout [ 166.851430][ T9570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.022084][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.040458][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.051364][ T9394] bridge_slave_0: entered allmulticast mode [ 167.059623][ T9394] bridge_slave_0: entered promiscuous mode [ 167.082437][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.100542][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.108472][ T9394] bridge_slave_1: entered allmulticast mode [ 167.117247][ T9394] bridge_slave_1: entered promiscuous mode [ 167.274819][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.404012][ T5834] Bluetooth: hci0: command tx timeout [ 167.416596][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.427272][ T9590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.759'. [ 167.515802][ T6084] hsr_slave_0: left promiscuous mode [ 167.522495][ T9594] FAULT_INJECTION: forcing a failure. [ 167.522495][ T9594] name failslab, interval 1, probability 0, space 0, times 1 [ 167.537558][ T9594] CPU: 1 UID: 0 PID: 9594 Comm: syz.4.760 Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 167.537583][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 167.537593][ T9594] Call Trace: [ 167.537598][ T9594] [ 167.537605][ T9594] dump_stack_lvl+0x241/0x360 [ 167.537631][ T9594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.537649][ T9594] ? __pfx__printk+0x10/0x10 [ 167.537679][ T9594] should_fail_ex+0x40a/0x550 [ 167.537705][ T9594] should_failslab+0xac/0x100 [ 167.537727][ T9594] ? skb_clone+0x20c/0x390 [ 167.537747][ T9594] kmem_cache_alloc_noprof+0x70/0x380 [ 167.537773][ T9594] skb_clone+0x20c/0x390 [ 167.537799][ T9594] __netlink_deliver_tap+0x3c4/0x7f0 [ 167.537832][ T9594] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.537853][ T9594] netlink_deliver_tap+0x19d/0x1b0 [ 167.537877][ T9594] netlink_unicast+0x7c4/0x990 [ 167.537906][ T9594] ? __pfx_netlink_unicast+0x10/0x10 [ 167.537925][ T9594] ? __virt_addr_valid+0x45f/0x530 [ 167.537949][ T9594] ? __phys_addr_symbol+0x2f/0x70 [ 167.537970][ T9594] ? __check_object_size+0x47a/0x730 [ 167.537995][ T9594] netlink_sendmsg+0x8de/0xcb0 [ 167.538030][ T9594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.538056][ T9594] ? aa_sock_msg_perm+0x91/0x160 [ 167.538083][ T9594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.538104][ T9594] __sock_sendmsg+0x221/0x270 [ 167.538125][ T9594] ____sys_sendmsg+0x53a/0x860 [ 167.538152][ T9594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.538172][ T9594] ? __fget_files+0x2a/0x410 [ 167.538195][ T9594] ? __fget_files+0x2a/0x410 [ 167.538225][ T9594] __sys_sendmsg+0x269/0x350 [ 167.538251][ T9594] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.538286][ T9594] ? do_sys_openat2+0x17a/0x1d0 [ 167.538333][ T9594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.538358][ T9594] ? do_syscall_64+0x100/0x230 [ 167.538381][ T9594] ? do_syscall_64+0xb6/0x230 [ 167.538408][ T9594] do_syscall_64+0xf3/0x230 [ 167.538427][ T9594] ? clear_bhb_loop+0x35/0x90 [ 167.538450][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.538470][ T9594] RIP: 0033:0x7f4adf38cde9 [ 167.538484][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.538498][ T9594] RSP: 002b:00007f4ae0107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.538517][ T9594] RAX: ffffffffffffffda RBX: 00007f4adf5a6080 RCX: 00007f4adf38cde9 [ 167.538529][ T9594] RDX: 0000000020004090 RSI: 0000400000000280 RDI: 0000000000000004 [ 167.538540][ T9594] RBP: 00007f4ae0107090 R08: 0000000000000000 R09: 0000000000000000 [ 167.538550][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.538559][ T9594] R13: 0000000000000001 R14: 00007f4adf5a6080 R15: 00007ffd2e69d7c8 [ 167.538586][ T9594] [ 167.538663][ T6084] hsr_slave_1: left promiscuous mode [ 167.818988][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.826512][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.834520][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.841938][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.861624][ T6084] veth1_macvtap: left promiscuous mode [ 167.867206][ T6084] veth0_macvtap: left promiscuous mode [ 167.872922][ T6084] veth1_vlan: left promiscuous mode [ 167.878321][ T6084] veth0_vlan: left promiscuous mode [ 168.261377][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 168.303578][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 168.603621][ T5834] Bluetooth: hci2: command tx timeout [ 168.657319][ T6092] bond0: (slave bond_slave_0): interface is now down [ 168.664991][ T6092] bond0: (slave bond_slave_1): interface is now down [ 168.687870][ T6107] bond0: (slave bond_slave_0): interface is now down [ 168.697049][ T6107] bond0: (slave bond_slave_1): interface is now down [ 168.723252][ T9394] team0: Port device team_slave_0 added [ 168.724005][ T6107] bond0: (slave bond_slave_0): interface is now down [ 168.734595][ T9394] team0: Port device team_slave_1 added [ 168.742671][ T6107] bond0: (slave bond_slave_1): interface is now down [ 168.750446][ T9595] batadv_slave_0: entered promiscuous mode [ 168.757244][ T9595] batadv_slave_0: entered allmulticast mode [ 168.773548][ T6074] bond0: (slave bond_slave_0): interface is now down [ 168.793517][ T6074] bond0: (slave bond_slave_1): interface is now down [ 168.824775][ T6094] bond0: (slave bond_slave_0): interface is now down [ 168.848733][ T6094] bond0: (slave bond_slave_1): interface is now down [ 168.898789][ T6074] bond0: (slave bond_slave_0): interface is now down [ 168.924127][ T6074] bond0: (slave bond_slave_1): interface is now down [ 168.943453][ T6074] bond0: (slave bond_slave_0): interface is now down [ 168.959701][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.000160][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.007029][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.015360][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.022331][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.063754][ T9394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.073420][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.081051][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.103434][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.110694][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.145844][ T12] bond0: (slave bond_slave_0): interface is now down [ 169.162131][ T12] bond0: (slave bond_slave_1): interface is now down [ 169.172021][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 169.198124][ T9609] netlink: 5 bytes leftover after parsing attributes in process `syz.3.765'. [ 169.215225][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.227917][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.256172][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.263178][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.292650][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.299555][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.323598][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.330336][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.352271][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.378686][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.380713][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 169.387902][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.403992][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 169.433500][ T776] bond0: (slave bond_slave_0): interface is now down [ 169.440396][ T776] bond0: (slave bond_slave_1): interface is now down [ 169.456610][ T9623] netlink: 'syz.4.768': attribute type 1 has an invalid length. [ 169.481444][ T776] bond0: (slave bond_slave_0): interface is now down [ 169.498988][ T5834] Bluetooth: hci0: command tx timeout [ 169.503560][ T776] bond0: (slave bond_slave_1): interface is now down [ 169.546288][ T6107] bond0: (slave bond_slave_0): interface is now down [ 169.563849][ T6107] bond0: (slave bond_slave_1): interface is now down [ 169.583462][ T6094] bond0: (slave bond_slave_0): interface is now down [ 169.590215][ T6094] bond0: (slave bond_slave_1): interface is now down [ 169.621543][ T9394] hsr_slave_0: entered promiscuous mode [ 169.640608][ T9394] hsr_slave_1: entered promiscuous mode [ 169.654281][ T9394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.661937][ T9394] Cannot create hsr debugfs directory [ 169.667422][ T6094] bond0: (slave bond_slave_0): interface is now down [ 169.667443][ T6094] bond0: (slave bond_slave_1): interface is now down [ 169.688178][ T6094] bond0: (slave bond_slave_0): interface is now down [ 169.723511][ T6094] bond0: (slave bond_slave_1): interface is now down [ 169.752034][ T6107] bond0: (slave bond_slave_0): interface is now down [ 169.787798][ T6107] bond0: (slave bond_slave_1): interface is now down [ 169.834419][ T9354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.834439][ T6074] bond0: (slave bond_slave_0): interface is now down [ 169.879160][ T6074] bond0: (slave bond_slave_1): interface is now down [ 169.934895][ T6092] bond0: (slave bond_slave_0): interface is now down [ 169.941646][ T6092] bond0: (slave bond_slave_1): interface is now down [ 169.977044][ T9354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.994988][ T6094] bond0: (slave bond_slave_0): interface is now down [ 169.996966][ T9354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.025680][ T6094] bond0: (slave bond_slave_1): interface is now down [ 170.075093][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.081841][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.135127][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.141874][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.178866][ T9354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.194137][ T6092] bond0: (slave bond_slave_0): interface is now down [ 170.200890][ T6092] bond0: (slave bond_slave_1): interface is now down [ 170.243852][ T6092] bond0: (slave bond_slave_0): interface is now down [ 170.269120][ T6092] bond0: (slave bond_slave_1): interface is now down [ 170.303904][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.325404][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.348413][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.360307][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.384515][ T6084] bond0: (slave bond_slave_0): interface is now down [ 170.391774][ T6084] bond0: (slave bond_slave_1): interface is now down [ 170.427253][ T6084] bond0: (slave bond_slave_0): interface is now down [ 170.438613][ T6084] bond0: (slave bond_slave_1): interface is now down [ 170.463885][ T6107] bond0: (slave bond_slave_0): interface is now down [ 170.495466][ T6107] bond0: (slave bond_slave_1): interface is now down [ 170.537112][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.550672][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.575350][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.582093][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.635461][ T6084] bond0: (slave bond_slave_0): interface is now down [ 170.642196][ T6084] bond0: (slave bond_slave_1): interface is now down [ 170.684710][ T5834] Bluetooth: hci2: command tx timeout [ 170.689879][ T6084] bond0: (slave bond_slave_0): interface is now down [ 170.702087][ T6084] bond0: (slave bond_slave_1): interface is now down [ 170.736777][ T6084] bond0: (slave bond_slave_0): interface is now down [ 170.745500][ T9679] netlink: 76 bytes leftover after parsing attributes in process `syz.0.782'. [ 170.789274][ T6084] bond0: (slave bond_slave_1): interface is now down [ 170.802696][ T9681] netlink: 'syz.4.783': attribute type 4 has an invalid length. [ 170.805624][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 170.812552][ T9681] netlink: 152 bytes leftover after parsing attributes in process `syz.4.783'. [ 170.830376][ T6107] bond0: (slave bond_slave_0): interface is now down [ 170.834243][ T9686] netlink: 'syz.4.783': attribute type 4 has an invalid length. [ 170.851557][ T9686] netlink: 152 bytes leftover after parsing attributes in process `syz.4.783'. [ 170.860197][ T6107] bond0: (slave bond_slave_1): interface is now down [ 170.882206][ T9689] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 170.894578][ T6074] bond0: (slave bond_slave_0): interface is now down [ 170.915804][ T6074] bond0: (slave bond_slave_1): interface is now down [ 170.947310][ T6074] bond0: now running without any active interface! [ 171.046422][ T9354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.080297][ T9354] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.139391][ T9696] sctp: [Deprecated]: syz.0.786 (pid 9696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.139391][ T9696] Use struct sctp_sack_info instead [ 171.162718][ T9701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.785'. [ 171.267195][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.274406][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.328862][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.336082][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.711226][ T9394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.739561][ T9394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.780747][ T9394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.781313][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 171.839799][ T9394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.952374][ T9740] netlink: 808 bytes leftover after parsing attributes in process `syz.0.795'. [ 172.025126][ T9354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.202850][ T9354] veth0_vlan: entered promiscuous mode [ 172.260582][ T9354] veth1_vlan: entered promiscuous mode [ 172.317225][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.348590][ T9758] netlink: 'syz.4.799': attribute type 11 has an invalid length. [ 172.379144][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.440460][ T9354] veth0_macvtap: entered promiscuous mode [ 172.506276][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.513505][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.543244][ T9766] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.801'. [ 172.564392][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.571566][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.595339][ T9766] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.630780][ T9354] veth1_macvtap: entered promiscuous mode [ 172.679714][ T9777] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.803'. [ 172.716232][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.743772][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.765937][ T5836] Bluetooth: hci2: command tx timeout [ 172.783816][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.794724][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.806455][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.841697][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.861779][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.879284][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.891328][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.905596][ T9354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.962893][ T9354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.980957][ T9354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.990566][ T9354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.003892][ T9354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.106296][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'. [ 173.167531][ T9792] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.291293][ T6084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.343865][ T6084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.378517][ T6074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.419607][ T6074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.551644][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.693926][ T9394] veth0_vlan: entered promiscuous mode [ 173.729229][ T9394] veth1_vlan: entered promiscuous mode [ 173.794302][ T9394] veth0_macvtap: entered promiscuous mode [ 173.820213][ T9394] veth1_macvtap: entered promiscuous mode [ 174.041618][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.089993][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.109034][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.190219][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.218016][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.233641][ T9841] netlink: 'syz.4.816': attribute type 2 has an invalid length. [ 174.243777][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.262543][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.293229][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.331968][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.394057][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.413883][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.464028][ T9394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.488275][ T9394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.516363][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.586490][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.681143][ T9394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.697268][ T9394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.713973][ T9394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.722928][ T9394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.758658][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.848346][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.912080][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.927955][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.957703][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.967742][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.063800][ T6084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.262950][ T6084] bridge_slave_1: left allmulticast mode [ 175.270413][ T6084] bridge_slave_1: left promiscuous mode [ 175.284937][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.298313][ T6084] bridge_slave_0: left allmulticast mode [ 175.305650][ T6084] bridge_slave_0: left promiscuous mode [ 175.311389][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.796263][ T9885] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 175.893220][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.910007][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.922988][ T6084] bond0 (unregistering): Released all slaves [ 175.960137][ T9883] netlink: 'syz.0.823': attribute type 5 has an invalid length. [ 175.970513][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.987728][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.004235][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.017344][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.030254][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.042107][ T9885] bond4: entered promiscuous mode [ 176.047844][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.104775][ T9885] bond4: entered allmulticast mode [ 176.120282][ T9885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.231527][ T9886] lo speed is unknown, defaulting to 1000 [ 176.522677][ T6084] hsr_slave_0: left promiscuous mode [ 176.530370][ T6084] hsr_slave_1: left promiscuous mode [ 176.537572][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.546298][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.560371][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.568394][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.595215][ T6084] veth1_macvtap: left promiscuous mode [ 176.600787][ T6084] veth0_macvtap: left promiscuous mode [ 176.607826][ T6084] veth1_vlan: left promiscuous mode [ 176.613166][ T6084] veth0_vlan: left promiscuous mode [ 177.302177][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.312599][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.325536][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.346455][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.354979][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.365564][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.586532][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 177.648773][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 178.008753][ T9916] __nla_validate_parse: 2 callbacks suppressed [ 178.008771][ T9916] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.826'. [ 178.124452][ T5836] Bluetooth: hci0: command tx timeout [ 178.151220][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 178.218176][ T9937] lo speed is unknown, defaulting to 1000 [ 178.356041][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 178.577467][ T9970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 178.715839][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.744104][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.764317][ T9886] bridge_slave_0: entered allmulticast mode [ 178.769695][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.835'. [ 178.771285][ T9886] bridge_slave_0: entered promiscuous mode [ 178.795286][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.802402][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.809559][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.835'. [ 178.819657][ T9886] bridge_slave_1: entered allmulticast mode [ 178.827239][ T9886] bridge_slave_1: entered promiscuous mode [ 178.918231][ T9980] .: renamed from bond0 (while UP) [ 178.961134][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.061722][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.260110][ T9886] team0: Port device team_slave_0 added [ 179.266235][ T5912] IPVS: starting estimator thread 0... [ 179.309124][T10007] tipc: Started in network mode [ 179.314734][T10007] tipc: Node identity ac1414aa, cluster identity 4711 [ 179.324379][T10007] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.333925][T10007] tipc: Enabled bearer , priority 10 [ 179.343075][ T9886] team0: Port device team_slave_1 added [ 179.368374][T10008] IPVS: using max 20 ests per chain, 48000 per kthread [ 179.404983][ T5834] Bluetooth: hci2: command tx timeout [ 179.464015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.527856][ T6084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.592734][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 179.603857][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.622981][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 179.702430][ T6084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.743872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.812998][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.840167][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.867742][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.883973][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.884579][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.891091][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.926003][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.951924][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 180.023845][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.061438][T10045] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 180.118296][ T6084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.124628][T10050] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 180.164038][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.204909][ T5834] Bluetooth: hci0: command tx timeout [ 180.213026][ T6084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.240304][T10050] veth0_macvtap: left promiscuous mode [ 180.303844][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.435966][ T9886] hsr_slave_0: entered promiscuous mode [ 180.443953][ T5912] tipc: Node number set to 2886997162 [ 180.451926][ T9886] hsr_slave_1: entered promiscuous mode [ 180.497336][T10061] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 180.540415][T10061] netlink: 228 bytes leftover after parsing attributes in process `syz.0.850'. [ 180.583875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.629674][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 180.694853][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.705465][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.723265][ T9937] bridge_slave_0: entered allmulticast mode [ 180.730357][ T9937] bridge_slave_0: entered promiscuous mode [ 180.797509][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.817541][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.833534][ T9937] bridge_slave_1: entered allmulticast mode [ 180.849020][ T9937] bridge_slave_1: entered promiscuous mode [ 181.016977][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 181.070158][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.196380][T10097] netlink: 'syz.0.855': attribute type 21 has an invalid length. [ 181.213809][ T6084] bridge_slave_1: left allmulticast mode [ 181.219651][ T6084] bridge_slave_1: left promiscuous mode [ 181.226457][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.245372][ T6084] bridge_slave_0: left allmulticast mode [ 181.250467][ T5834] Bluetooth: hci1: command 0x0401 tx timeout [ 181.254239][ T6084] bridge_slave_0: left promiscuous mode [ 181.275271][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.485406][ T5836] Bluetooth: hci2: command tx timeout [ 181.738175][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.749361][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.765586][ T6084] bond0 (unregistering): Released all slaves [ 181.778092][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.992660][T10116] No such timeout policy "syz0" [ 182.044292][ T9937] team0: Port device team_slave_0 added [ 182.107118][ T9937] team0: Port device team_slave_1 added [ 182.251456][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.269760][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.284904][ T5836] Bluetooth: hci0: command tx timeout [ 182.332172][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.446162][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.462579][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.535145][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.840022][ T6084] hsr_slave_0: left promiscuous mode [ 182.855003][ T6084] hsr_slave_1: left promiscuous mode [ 182.860990][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.875964][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.922138][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.951948][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.031191][ T6084] veth1_macvtap: left promiscuous mode [ 183.049316][ T6084] veth0_macvtap: left promiscuous mode [ 183.063748][ T6084] veth1_vlan: left promiscuous mode [ 183.080386][ T6084] veth0_vlan: left promiscuous mode [ 183.569057][ T5836] Bluetooth: hci2: command tx timeout [ 183.835009][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 183.878095][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 184.364016][ T5836] Bluetooth: hci0: command tx timeout [ 184.371800][ T9937] hsr_slave_0: entered promiscuous mode [ 184.393903][ T9937] hsr_slave_1: entered promiscuous mode [ 184.399848][ T9937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.424963][ T9937] Cannot create hsr debugfs directory [ 184.523418][ C0] net_ratelimit: 4 callbacks suppressed [ 184.523437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.965418][T10214] __nla_validate_parse: 3 callbacks suppressed [ 184.965436][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 184.984773][ T9886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.008413][ T9886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.083202][ T9886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.121784][ T9886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.237984][T10230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.880'. [ 185.275342][T10231] netlink: 52 bytes leftover after parsing attributes in process `syz.3.880'. [ 185.298088][T10233] netlink: 52 bytes leftover after parsing attributes in process `syz.3.880'. [ 185.366675][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.390052][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.421494][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.428760][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.447981][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.455168][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.563464][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.563923][ T9886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.629425][ T9937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.644114][ T5836] Bluetooth: hci2: command tx timeout [ 185.696965][ T9937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.724354][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 185.773464][ T9937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.817160][ T9937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.015685][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 186.137506][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.242901][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.328347][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.345946][T10279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'. [ 186.355327][ T9886] veth0_vlan: entered promiscuous mode [ 186.367066][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 186.379252][ T9886] veth1_vlan: entered promiscuous mode [ 186.440736][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.447919][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.488243][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.495431][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.548912][ T9886] veth0_macvtap: entered promiscuous mode [ 186.603454][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.628415][ T9886] veth1_macvtap: entered promiscuous mode [ 186.688935][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.703098][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.773883][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.793394][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.815027][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.837418][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.853842][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.883400][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.895462][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.912310][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.932617][ T9886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.972466][ T9886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.013547][ T9886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.022293][ T9886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.052076][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 187.115546][T10310] netlink: 'syz.3.894': attribute type 21 has an invalid length. [ 187.134026][T10310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.894'. [ 187.146476][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.305087][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.320650][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.331045][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.895'. [ 187.376014][ T9937] veth0_vlan: entered promiscuous mode [ 187.431960][ T9937] veth1_vlan: entered promiscuous mode [ 187.462116][ T6083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.491256][ T6083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.520563][T10322] netlink: 'syz.3.897': attribute type 4 has an invalid length. [ 187.555859][ T9937] veth0_macvtap: entered promiscuous mode [ 187.578543][ T9937] veth1_macvtap: entered promiscuous mode [ 187.643518][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.680097][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.723671][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.738477][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.749375][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.765678][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.783577][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.810629][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.821966][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.839141][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.850263][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.865590][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.876213][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.887327][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.916315][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.963090][ T9937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.983818][ T9937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.012806][ T9937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.041018][ T9937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.092891][T10355] tipc: Started in network mode [ 188.119626][T10355] tipc: Node identity , cluster identity 4711 [ 188.314524][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.329647][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.396740][ T6083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.425047][ T6083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.677954][ T6083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.683541][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.042611][ T6083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.191379][ T6083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.296134][ T6083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.628019][ T6083] bridge_slave_1: left allmulticast mode [ 189.644470][ T6083] bridge_slave_1: left promiscuous mode [ 189.650237][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.678161][ T6083] bridge_slave_0: left allmulticast mode [ 189.689263][ T6083] bridge_slave_0: left promiscuous mode [ 189.696287][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.723497][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.802613][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.815554][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.839751][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.864000][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.889319][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.897596][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.101682][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.112261][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.126608][ T6083] bond0 (unregistering): Released all slaves [ 190.162563][T10419] lo speed is unknown, defaulting to 1000 [ 190.763493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.106796][ T6083] hsr_slave_0: left promiscuous mode [ 191.128600][ T6083] hsr_slave_1: left promiscuous mode [ 191.149139][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.149218][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.160975][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.184361][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.197181][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.207976][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.219307][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.227294][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.236859][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.256979][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.297102][ T6083] veth1_macvtap: left promiscuous mode [ 191.302690][ T6083] veth0_macvtap: left promiscuous mode [ 191.324157][ T6083] veth1_vlan: left promiscuous mode [ 191.329509][ T6083] veth0_vlan: left promiscuous mode [ 191.803460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.966107][ T5834] Bluetooth: hci0: command tx timeout [ 192.112446][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 192.153011][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 192.540725][T10419] chnl_net:caif_netlink_parms(): no params data found [ 192.734711][T10503] __nla_validate_parse: 2 callbacks suppressed [ 192.734728][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 192.767929][T10466] lo speed is unknown, defaulting to 1000 [ 192.844603][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.950217][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 193.004098][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.011240][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.029407][T10419] bridge_slave_0: entered allmulticast mode [ 193.050264][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.926'. [ 193.054525][T10419] bridge_slave_0: entered promiscuous mode [ 193.101492][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.132302][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.164266][T10419] bridge_slave_1: entered allmulticast mode [ 193.262903][T10419] bridge_slave_1: entered promiscuous mode [ 193.330637][ T5834] Bluetooth: hci2: command tx timeout [ 193.403235][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.456829][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.591951][T10419] team0: Port device team_slave_0 added [ 193.658816][T10419] team0: Port device team_slave_1 added [ 193.765804][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.934'. [ 193.779900][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.808050][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.858180][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.883395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.964516][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.971692][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.008100][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.053104][T10572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 194.053868][ T5834] Bluetooth: hci0: command tx timeout [ 194.175427][T10578] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 194.277090][ T6083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.355760][T10466] chnl_net:caif_netlink_parms(): no params data found [ 194.379158][T10419] hsr_slave_0: entered promiscuous mode [ 194.394664][T10419] hsr_slave_1: entered promiscuous mode [ 194.533938][ T6083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.534345][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550939][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.569671][T10601] netlink: 165 bytes leftover after parsing attributes in process `syz.3.942'. [ 194.765115][ T6083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.883250][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 194.894535][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 194.917041][T10622] Bluetooth: MGMT ver 1.23 [ 194.923381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.958171][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 195.055181][ T6083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.166822][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 195.189966][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 195.207150][T10636] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 195.274068][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.281195][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.307033][T10466] bridge_slave_0: entered allmulticast mode [ 195.326471][T10466] bridge_slave_0: entered promiscuous mode [ 195.351055][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.364423][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.379159][T10466] bridge_slave_1: entered allmulticast mode [ 195.395188][T10466] bridge_slave_1: entered promiscuous mode [ 195.403716][ T5834] Bluetooth: hci2: command tx timeout [ 195.550193][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.590426][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.820117][T10466] team0: Port device team_slave_0 added [ 195.875700][T10466] team0: Port device team_slave_1 added [ 195.904976][ T6083] bridge_slave_1: left allmulticast mode [ 195.911521][ T6083] bridge_slave_1: left promiscuous mode [ 195.926749][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.939078][ T6083] bridge_slave_0: left allmulticast mode [ 195.945820][ T6083] bridge_slave_0: left promiscuous mode [ 195.951547][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.963365][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.322854][ T6083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.337812][ T6083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.350756][ T6083] bond0 (unregistering): Released all slaves [ 196.466442][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.485021][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.531274][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.547288][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.559417][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.587312][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.870845][T10466] hsr_slave_0: entered promiscuous mode [ 196.888095][T10466] hsr_slave_1: entered promiscuous mode [ 196.904820][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.936578][T10466] Cannot create hsr debugfs directory [ 197.003385][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.172417][ T6083] hsr_slave_0: left promiscuous mode [ 197.189153][ T6083] hsr_slave_1: left promiscuous mode [ 197.204533][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.222205][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.244679][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.260348][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.327381][ T6083] veth1_macvtap: left promiscuous mode [ 197.356737][ T6083] veth0_macvtap: left promiscuous mode [ 197.369997][ T6083] veth1_vlan: left promiscuous mode [ 197.395615][ T6083] veth0_vlan: left promiscuous mode [ 197.483686][ T5834] Bluetooth: hci2: command tx timeout [ 197.940830][ T6083] team0 (unregistering): Port device team_slave_1 removed [ 197.985523][ T6083] team0 (unregistering): Port device team_slave_0 removed [ 198.043383][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.401657][T10733] __nla_validate_parse: 3 callbacks suppressed [ 198.401676][T10733] netlink: 10 bytes leftover after parsing attributes in process `syz.0.966'. [ 198.443639][T10419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.479117][T10419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.520578][T10419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.574871][T10419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.083412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.098223][T10419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.196923][T10419] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.216333][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.223549][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.308025][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.315217][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.338826][T10780] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 199.385117][T10784] macvlan0: entered allmulticast mode [ 199.393064][T10784] veth1_vlan: entered allmulticast mode [ 199.401813][T10784] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 199.411805][T10784] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 199.530028][T10788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.979'. [ 199.564921][ T5834] Bluetooth: hci2: command tx timeout [ 199.579632][T10795] netlink: 136 bytes leftover after parsing attributes in process `syz.3.980'. [ 199.640296][T10466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.718941][T10466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.757078][T10466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.800484][T10466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.856368][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.970170][T10419] veth0_vlan: entered promiscuous mode [ 199.985894][T10808] sctp: [Deprecated]: syz.0.985 (pid 10808) Use of int in maxseg socket option. [ 199.985894][T10808] Use struct sctp_assoc_value instead [ 200.002180][T10810] sctp: [Deprecated]: syz.0.985 (pid 10810) Use of int in maxseg socket option. [ 200.002180][T10810] Use struct sctp_assoc_value instead [ 200.038727][T10419] veth1_vlan: entered promiscuous mode [ 200.123471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.145272][T10419] veth0_macvtap: entered promiscuous mode [ 200.175366][T10419] veth1_macvtap: entered promiscuous mode [ 200.208013][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.250786][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.278748][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.313322][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.343474][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.363887][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.386594][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.438975][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.446524][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.512735][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.542202][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.570765][T10419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.594441][T10828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.601666][T10419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.624116][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.646545][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.653715][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.142004][T10419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.152750][T10419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.163385][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.167483][T10419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.204134][T10419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.251314][T10466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.278613][T10466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.428650][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.469175][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.527145][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.545417][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.661942][T10847] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 201.682961][T10852] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 201.702460][T10847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.994'. [ 201.719878][T10852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.780716][T10855] bond3: (slave gretap1): making interface the new active one [ 201.801107][T10855] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 202.068220][T10856] syzkaller1: entered promiscuous mode [ 202.079129][T10856] syzkaller1: entered allmulticast mode [ 202.090140][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.203512][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.269862][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 202.336070][T10874] raw_sendmsg: syz.4.1002 forgot to set AF_INET. Fix it! [ 202.343363][T10466] veth0_vlan: entered promiscuous mode [ 202.380425][T10466] veth1_vlan: entered promiscuous mode [ 202.431667][T10466] veth0_macvtap: entered promiscuous mode [ 202.470817][T10466] veth1_macvtap: entered promiscuous mode [ 202.502543][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.524759][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.542262][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.553691][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.568747][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.581560][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.603255][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.708014][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.730962][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.742961][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.757055][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.767993][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.778637][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.789588][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.800742][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.829165][T10466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.838383][T10466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.853986][T10466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.862699][T10466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.967978][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.983229][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.999796][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.031525][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.047766][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.074028][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.181144][ T6084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.249436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.376519][ T6084] bridge_slave_1: left allmulticast mode [ 203.382232][ T6084] bridge_slave_1: left promiscuous mode [ 203.390088][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.400715][ T6084] bridge_slave_0: left allmulticast mode [ 203.408908][ T6084] bridge_slave_0: left promiscuous mode [ 203.415913][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.107043][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.129096][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.156707][ T6084] bond0 (unregistering): Released all slaves [ 204.283364][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.345305][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.360284][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.368653][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.381567][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.389305][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.399952][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.498862][T10925] lo speed is unknown, defaulting to 1000 [ 204.799820][ T6084] hsr_slave_0: left promiscuous mode [ 204.806365][ T6084] hsr_slave_1: left promiscuous mode [ 204.812254][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.820502][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.828953][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.837318][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.879001][ T6084] veth1_macvtap: left promiscuous mode [ 204.897850][ T6084] veth0_macvtap: left promiscuous mode [ 204.905125][ T6084] veth1_vlan: left promiscuous mode [ 204.920639][ T6084] veth0_vlan: left promiscuous mode [ 204.988613][T10952] IPv4: Oversized IP packet from 172.20.20.24 [ 204.998010][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 205.004607][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 205.006714][T10950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'. [ 205.045949][T10950] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1010'. [ 205.166651][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 205.323416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.371995][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.383007][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.392713][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.411264][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.434094][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.441653][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.663042][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 205.703402][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 206.105161][T10946] FAULT_INJECTION: forcing a failure. [ 206.105161][T10946] name failslab, interval 1, probability 0, space 0, times 0 [ 206.118699][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.0.1009 Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 206.118722][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.118731][T10946] Call Trace: [ 206.118738][T10946] [ 206.118745][T10946] dump_stack_lvl+0x241/0x360 [ 206.118781][T10946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.118799][T10946] ? __pfx__printk+0x10/0x10 [ 206.118817][T10946] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 206.118839][T10946] ? __pfx___might_resched+0x10/0x10 [ 206.118858][T10946] ? vsnprintf+0x1152/0x1220 [ 206.118886][T10946] should_fail_ex+0x40a/0x550 [ 206.118912][T10946] should_failslab+0xac/0x100 [ 206.118934][T10946] __kmalloc_node_noprof+0xe1/0x4d0 [ 206.118954][T10946] ? __kvmalloc_node_noprof+0x72/0x190 [ 206.118978][T10946] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 206.118997][T10946] __kvmalloc_node_noprof+0x72/0x190 [ 206.119021][T10946] alloc_netdev_mqs+0xa4/0x1210 [ 206.119043][T10946] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 206.119061][T10946] ? rcu_is_watching+0x15/0xb0 [ 206.119082][T10946] rtnl_create_link+0x2f9/0xc90 [ 206.119110][T10946] rtnl_newlink_create+0x210/0xa40 [ 206.119135][T10946] ? __pfx___mutex_lock+0x10/0x10 [ 206.119155][T10946] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 206.119180][T10946] ? ns_capable+0x8a/0xf0 [ 206.119202][T10946] rtnl_newlink+0x17cc/0x1d30 [ 206.119235][T10946] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.119249][T10946] ? __netlink_deliver_tap+0x561/0x7f0 [ 206.119272][T10946] ? __pfx_validate_chain+0x10/0x10 [ 206.119287][T10946] ? __sock_sendmsg+0x221/0x270 [ 206.119302][T10946] ? ____sys_sendmsg+0x53a/0x860 [ 206.119321][T10946] ? __sys_sendmsg+0x269/0x350 [ 206.119340][T10946] ? do_syscall_64+0xf3/0x230 [ 206.119357][T10946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.119398][T10946] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.119423][T10946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.119454][T10946] ? mark_lock+0x9a/0x360 [ 206.119473][T10946] ? __lock_acquire+0x1397/0x2100 [ 206.119528][T10946] ? __pfx_lock_release+0x10/0x10 [ 206.119565][T10946] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.119583][T10946] rtnetlink_rcv_msg+0x791/0xcf0 [ 206.119598][T10946] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 206.119619][T10946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.119660][T10946] ? ref_tracker_free+0x643/0x7e0 [ 206.119690][T10946] netlink_rcv_skb+0x206/0x480 [ 206.119713][T10946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.119732][T10946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.119778][T10946] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.119803][T10946] netlink_unicast+0x7f6/0x990 [ 206.119830][T10946] ? __pfx_netlink_unicast+0x10/0x10 [ 206.119847][T10946] ? __virt_addr_valid+0x45f/0x530 [ 206.119868][T10946] ? __phys_addr_symbol+0x2f/0x70 [ 206.119880][T10946] ? __check_object_size+0x47a/0x730 [ 206.119895][T10946] netlink_sendmsg+0x8de/0xcb0 [ 206.119915][T10946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.119931][T10946] ? aa_sock_msg_perm+0x91/0x160 [ 206.119948][T10946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.119960][T10946] __sock_sendmsg+0x221/0x270 [ 206.119972][T10946] ____sys_sendmsg+0x53a/0x860 [ 206.119988][T10946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.120000][T10946] ? __fget_files+0x2a/0x410 [ 206.120014][T10946] ? __fget_files+0x2a/0x410 [ 206.120030][T10946] __sys_sendmsg+0x269/0x350 [ 206.120046][T10946] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.120065][T10946] ? do_sys_openat2+0x17a/0x1d0 [ 206.120092][T10946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.120106][T10946] ? do_syscall_64+0x100/0x230 [ 206.120118][T10946] ? do_syscall_64+0xb6/0x230 [ 206.120130][T10946] do_syscall_64+0xf3/0x230 [ 206.120141][T10946] ? clear_bhb_loop+0x35/0x90 [ 206.120154][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.120166][T10946] RIP: 0033:0x7f774b98cde9 [ 206.120180][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.120188][T10946] RSP: 002b:00007f774c7af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.120202][T10946] RAX: ffffffffffffffda RBX: 00007f774bba5fa0 RCX: 00007f774b98cde9 [ 206.120209][T10946] RDX: 0000000020004090 RSI: 0000400000000280 RDI: 0000000000000003 [ 206.120215][T10946] RBP: 00007f774c7af090 R08: 0000000000000000 R09: 0000000000000000 [ 206.120221][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.120226][T10946] R13: 0000000000000000 R14: 00007f774bba5fa0 R15: 00007ffd708616f8 [ 206.120242][T10946] [ 206.560284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.567652][ T5834] Bluetooth: hci0: command tx timeout [ 206.664603][T10973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.671907][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 206.679216][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 206.824221][T10961] lo speed is unknown, defaulting to 1000 [ 206.880082][T10980] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1014'. [ 206.917740][T10980] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1014'. [ 206.934594][T10980] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1014'. [ 207.051920][T10925] chnl_net:caif_netlink_parms(): no params data found [ 207.284804][T11001] netlink: 'syz.4.1020': attribute type 3 has an invalid length. [ 207.290526][T11004] netlink: 'syz.3.1021': attribute type 9 has an invalid length. [ 207.300932][T11004] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1021'. [ 207.311461][T11001] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1020'. [ 207.338847][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 207.351362][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.360723][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.371927][T10925] bridge_slave_0: entered allmulticast mode [ 207.382541][T10925] bridge_slave_0: entered promiscuous mode [ 207.431682][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.460860][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.483090][T10925] bridge_slave_1: entered allmulticast mode [ 207.492316][T10925] bridge_slave_1: entered promiscuous mode [ 207.497431][ T5834] Bluetooth: hci2: command tx timeout [ 207.563470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.639054][T10961] chnl_net:caif_netlink_parms(): no params data found [ 207.641918][T11025] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 207.659167][T11025] xt_TCPMSS: Only works on TCP SYN packets [ 207.674101][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.731440][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.896373][T11038] x_tables: duplicate underflow at hook 3 [ 207.902231][T11037] x_tables: duplicate underflow at hook 3 [ 207.994429][ T6084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.105875][T10925] team0: Port device team_slave_0 added [ 208.351271][ T6084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.384146][T10925] team0: Port device team_slave_1 added [ 208.401198][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.410991][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.422184][T10961] bridge_slave_0: entered allmulticast mode [ 208.431793][T10961] bridge_slave_0: entered promiscuous mode [ 208.481453][T11073] netlink: 'syz.0.1037': attribute type 21 has an invalid length. [ 208.497268][ T6084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.511917][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.519683][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.527227][T10961] bridge_slave_1: entered allmulticast mode [ 208.534598][T10961] bridge_slave_1: entered promiscuous mode [ 208.541790][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 208.585532][T11073] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 208.603709][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.614283][ T5834] Bluetooth: hci0: command tx timeout [ 208.737754][ T6084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.791899][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.808691][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.844628][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.870238][T10961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.893230][T10961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.921899][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.934986][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.962819][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.080226][T10961] team0: Port device team_slave_0 added [ 209.120085][T10961] team0: Port device team_slave_1 added [ 209.206314][T11112] netlink: 'syz.0.1048': attribute type 12 has an invalid length. [ 209.262344][T10925] hsr_slave_0: entered promiscuous mode [ 209.281338][T10925] hsr_slave_1: entered promiscuous mode [ 209.306309][T11115] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 209.337682][T10961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.354682][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.385728][T10961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.484048][T10961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.491048][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.523916][T10961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.563602][ T5836] Bluetooth: hci2: command tx timeout [ 209.578868][ T6084] bridge_slave_1: left allmulticast mode [ 209.586513][ T6084] bridge_slave_1: left promiscuous mode [ 209.592281][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.602363][ T6084] bridge_slave_0: left allmulticast mode [ 209.608535][ T6084] bridge_slave_0: left promiscuous mode [ 209.615119][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.643469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.962808][ T6084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.976610][ T6084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.987795][ T6084] bond0 (unregistering): Released all slaves [ 210.011794][T10961] hsr_slave_0: entered promiscuous mode [ 210.018316][T10961] hsr_slave_1: entered promiscuous mode [ 210.024747][T10961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.032333][T10961] Cannot create hsr debugfs directory [ 210.542771][T11165] __nla_validate_parse: 5 callbacks suppressed [ 210.542788][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'. [ 210.683470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.683653][ T5836] Bluetooth: hci0: command tx timeout [ 210.823984][ T6084] hsr_slave_0: left promiscuous mode [ 210.854773][ T6084] hsr_slave_1: left promiscuous mode [ 210.871566][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.883380][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.900582][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.918502][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.967131][ T6084] veth1_macvtap: left promiscuous mode [ 210.984859][ T6084] veth0_macvtap: left promiscuous mode [ 210.990554][ T6084] veth1_vlan: left promiscuous mode [ 211.010912][ T6084] veth0_vlan: left promiscuous mode [ 211.143238][T11155] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 211.196028][T11193] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1063'. [ 211.249730][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 211.260217][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 211.652621][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 211.723354][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.772236][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 211.813190][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 212.339675][T11217] macvlan2: entered promiscuous mode [ 212.345527][T11217] macvlan2: entered allmulticast mode [ 212.444800][ T5834] Bluetooth: hci1: command 0x0401 tx timeout [ 212.468878][T11224] openvswitch: netlink: Unknown nsh attribute 0 [ 212.478613][T11224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.491922][T11224] Bluetooth: MGMT ver 1.23 [ 212.567706][T11228] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 212.575738][T11228] netlink: 'syz.3.1068': attribute type 4 has an invalid length. [ 212.583595][T11228] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1068'. [ 212.614002][T11230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.760461][T10925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.767390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.773593][ T5834] Bluetooth: hci0: command tx timeout [ 212.904349][T10925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.944463][T10925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.978946][T10925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.002942][T11255] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1076'. [ 213.041807][T11252] tipc: Started in network mode [ 213.068247][T11252] tipc: Node identity 7f000001, cluster identity 4711 [ 213.093679][T11252] tipc: Enabling of bearer rejected, failed to enable media [ 213.256421][T11265] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 213.337706][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.375795][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 213.391799][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.442522][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.449741][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.500020][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.507213][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.539913][T10961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.589409][T10961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.617295][T10961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.636265][T10961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.723966][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 213.728658][T11297] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1082'. [ 213.750310][T11294] xt_bpf: check failed: parse error [ 213.804587][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.077594][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.115424][T11315] netlink: 'syz.4.1086': attribute type 2 has an invalid length. [ 214.120325][T10961] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.146675][T11315] netlink: 'syz.4.1086': attribute type 2 has an invalid length. [ 214.181482][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.188668][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.248198][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.255369][ T6084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.369813][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 214.389017][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.516454][T10925] veth0_vlan: entered promiscuous mode [ 214.558001][T10925] veth1_vlan: entered promiscuous mode [ 214.638437][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1092'. [ 214.651405][T10925] veth0_macvtap: entered promiscuous mode [ 214.660543][T11341] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 214.699415][T10925] veth1_macvtap: entered promiscuous mode [ 214.753248][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.784903][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.823796][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.843471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.859079][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.889114][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.935520][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.963845][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.982081][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.998612][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.040280][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.056930][T10961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.103189][T10925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.132936][T10925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.156365][T10925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.182727][T10925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.410027][T10961] veth0_vlan: entered promiscuous mode [ 215.482277][T10961] veth1_vlan: entered promiscuous mode [ 215.518956][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.553978][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.628205][T10961] veth0_macvtap: entered promiscuous mode [ 215.659190][T10961] veth1_macvtap: entered promiscuous mode [ 215.671507][ T6092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.687919][ T6092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.701386][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.713009][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.727631][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.739514][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1104'. [ 215.748669][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.759186][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.778584][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.802972][T10961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.811329][ T5836] Bluetooth: hci2: command 0x040f tx timeout [ 215.847662][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.861433][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.872598][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.883359][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.884517][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.900937][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.911612][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.935982][T10961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.959312][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 215.988905][T10961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.991716][T11422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1109'. [ 216.005995][T10961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.022256][T10961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.032982][T10961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.271060][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 216.446748][T11446] netlink: 'syz.4.1115': attribute type 11 has an invalid length. [ 216.478501][T11446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1115'. [ 216.492987][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.572966][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.604552][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.682363][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.757865][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.778839][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.803673][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.903139][T10961] ------------[ cut here ]------------ [ 216.909380][T10961] refcount_t: underflow; use-after-free. [ 216.915625][T10961] WARNING: CPU: 1 PID: 10961 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 216.923411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.925315][T10961] Modules linked in: [ 216.936129][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 216.947126][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 216.957849][T10961] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 216.964821][T10961] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 e4 d5 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 be d5 31 0b 01 90 [ 216.984684][T10961] RSP: 0018:ffffc90004257738 EFLAGS: 00010246 [ 216.990776][T10961] RAX: da115054f746e000 RBX: ffff888067d6c078 RCX: ffff888022705a00 [ 216.998796][T10961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.007066][T10961] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 217.015338][T10961] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888067d6c060 [ 217.023422][T10961] R13: ffffffff86384ef0 R14: 1ffff1100cfad80c R15: ffff888067d6c060 [ 217.031415][T10961] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 217.040410][T10961] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.047062][T10961] CR2: 00007fff10604569 CR3: 000000000e938000 CR4: 00000000003526f0 [ 217.055659][T10961] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.064153][T10961] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.072145][T10961] Call Trace: [ 217.075561][T10961] [ 217.078497][T10961] ? __warn+0x165/0x4d0 [ 217.082642][T10961] ? refcount_warn_saturate+0x15a/0x1d0 [ 217.088380][T10961] ? report_bug+0x2b3/0x500 [ 217.088795][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 217.092889][T10961] ? refcount_warn_saturate+0x15a/0x1d0 [ 217.104591][T10961] ? handle_bug+0x60/0x90 [ 217.108946][T10961] ? exc_invalid_op+0x1a/0x50 [ 217.113713][T10961] ? asm_exc_invalid_op+0x1a/0x20 [ 217.118762][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.124509][T10961] ? __warn_printk+0x292/0x360 [ 217.129295][T10961] ? refcount_warn_saturate+0x15a/0x1d0 [ 217.134926][T10961] ? refcount_warn_saturate+0x159/0x1d0 [ 217.140487][T10961] klist_dec_and_del+0x3ec/0x3f0 [ 217.145511][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.151066][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.157065][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.162608][T10961] klist_remove+0x25e/0x480 [ 217.167894][T10961] ? __pfx_klist_remove+0x10/0x10 [ 217.173029][T10961] ? __pfx_kobject_move+0x10/0x10 [ 217.178102][T10961] ? get_device_parent+0x25d/0x410 [ 217.183455][T10961] device_move+0x1b4/0x710 [ 217.187890][T10961] ? kasan_quarantine_put+0xdc/0x230 [ 217.193164][T10961] hci_conn_del_sysfs+0xb5/0x170 [ 217.198193][T10961] hci_conn_del+0x8c4/0xc40 [ 217.202708][T10961] hci_conn_hash_flush+0x258/0x350 [ 217.207897][T10961] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 217.213652][T10961] ? drain_workqueue+0x2d3/0x3a0 [ 217.218604][T10961] ? hci_discovery_set_state+0x57/0x180 [ 217.224265][T10961] hci_dev_close_sync+0xa8b/0x1260 [ 217.229414][T10961] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 217.235002][T10961] ? rcu_is_watching+0x15/0xb0 [ 217.239790][T10961] hci_unregister_dev+0x20b/0x510 [ 217.245014][T10961] vhci_release+0x80/0xd0 [ 217.249366][T10961] ? __pfx_vhci_release+0x10/0x10 [ 217.254479][T10961] __fput+0x3e9/0x9f0 [ 217.258791][T10961] task_work_run+0x24f/0x310 [ 217.263884][T10961] ? __pfx_task_work_run+0x10/0x10 [ 217.269009][T10961] ? do_exit+0xa25/0x28e0 [ 217.273430][T10961] ? do_exit+0xa25/0x28e0 [ 217.277774][T10961] do_exit+0xa2a/0x28e0 [ 217.281934][T10961] ? __pfx_do_exit+0x10/0x10 [ 217.286582][T10961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.292590][T10961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.299042][T10961] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.304307][T10961] ? lockdep_hardirqs_on+0x99/0x150 [ 217.309613][T10961] do_group_exit+0x207/0x2c0 [ 217.314313][T10961] __x64_sys_exit_group+0x3f/0x40 [ 217.319362][T10961] x64_sys_call+0x26a8/0x26b0 [ 217.324329][T10961] do_syscall_64+0xf3/0x230 [ 217.328855][T10961] ? clear_bhb_loop+0x35/0x90 [ 217.333596][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.339500][T10961] RIP: 0033:0x7f3c6c58cde9 [ 217.343959][T10961] Code: Unable to access opcode bytes at 0x7f3c6c58cdbf. [ 217.351011][T10961] RSP: 002b:00007ffc5adf4da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.360118][T10961] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c6c58cde9 [ 217.368662][T10961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 217.376727][T10961] RBP: 00007f3c6c5ed8d0 R08: 00007ffc5adf2b47 R09: 0000000000000003 [ 217.384765][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.392758][T10961] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc5adf4f60 [ 217.400913][T10961] [ 217.404107][T10961] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.411401][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 217.422343][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 217.432415][T10961] Call Trace: [ 217.435689][T10961] [ 217.438607][T10961] dump_stack_lvl+0x241/0x360 [ 217.443278][T10961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.448483][T10961] ? __pfx__printk+0x10/0x10 [ 217.453062][T10961] ? vscnprintf+0x5d/0x90 [ 217.457410][T10961] panic+0x349/0x880 [ 217.461308][T10961] ? __warn+0x174/0x4d0 [ 217.465475][T10961] ? __pfx_panic+0x10/0x10 [ 217.469924][T10961] __warn+0x344/0x4d0 [ 217.473906][T10961] ? refcount_warn_saturate+0x15a/0x1d0 [ 217.479488][T10961] report_bug+0x2b3/0x500 [ 217.483821][T10961] ? refcount_warn_saturate+0x15a/0x1d0 [ 217.489403][T10961] handle_bug+0x60/0x90 [ 217.493590][T10961] exc_invalid_op+0x1a/0x50 [ 217.498180][T10961] asm_exc_invalid_op+0x1a/0x20 [ 217.503136][T10961] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 217.509381][T10961] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 e4 d5 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 be d5 31 0b 01 90 [ 217.529084][T10961] RSP: 0018:ffffc90004257738 EFLAGS: 00010246 [ 217.535156][T10961] RAX: da115054f746e000 RBX: ffff888067d6c078 RCX: ffff888022705a00 [ 217.543117][T10961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.551082][T10961] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 217.559051][T10961] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff888067d6c060 [ 217.567022][T10961] R13: ffffffff86384ef0 R14: 1ffff1100cfad80c R15: ffff888067d6c060 [ 217.574989][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.580533][T10961] ? __warn_printk+0x292/0x360 [ 217.585304][T10961] ? refcount_warn_saturate+0x159/0x1d0 [ 217.590852][T10961] klist_dec_and_del+0x3ec/0x3f0 [ 217.595787][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.601325][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.606867][T10961] ? __pfx_klist_children_put+0x10/0x10 [ 217.612410][T10961] klist_remove+0x25e/0x480 [ 217.616916][T10961] ? __pfx_klist_remove+0x10/0x10 [ 217.621941][T10961] ? __pfx_kobject_move+0x10/0x10 [ 217.626975][T10961] ? get_device_parent+0x25d/0x410 [ 217.632089][T10961] device_move+0x1b4/0x710 [ 217.636507][T10961] ? kasan_quarantine_put+0xdc/0x230 [ 217.642046][T10961] hci_conn_del_sysfs+0xb5/0x170 [ 217.646982][T10961] hci_conn_del+0x8c4/0xc40 [ 217.651486][T10961] hci_conn_hash_flush+0x258/0x350 [ 217.656600][T10961] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 217.662234][T10961] ? drain_workqueue+0x2d3/0x3a0 [ 217.667174][T10961] ? hci_discovery_set_state+0x57/0x180 [ 217.672722][T10961] hci_dev_close_sync+0xa8b/0x1260 [ 217.677832][T10961] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 217.683385][T10961] ? rcu_is_watching+0x15/0xb0 [ 217.688161][T10961] hci_unregister_dev+0x20b/0x510 [ 217.693191][T10961] vhci_release+0x80/0xd0 [ 217.697520][T10961] ? __pfx_vhci_release+0x10/0x10 [ 217.702535][T10961] __fput+0x3e9/0x9f0 [ 217.706521][T10961] task_work_run+0x24f/0x310 [ 217.711106][T10961] ? __pfx_task_work_run+0x10/0x10 [ 217.716251][T10961] ? do_exit+0xa25/0x28e0 [ 217.720581][T10961] ? do_exit+0xa25/0x28e0 [ 217.724909][T10961] do_exit+0xa2a/0x28e0 [ 217.729066][T10961] ? __pfx_do_exit+0x10/0x10 [ 217.733652][T10961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.739637][T10961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.745969][T10961] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.751217][T10961] ? lockdep_hardirqs_on+0x99/0x150 [ 217.756409][T10961] do_group_exit+0x207/0x2c0 [ 217.761006][T10961] __x64_sys_exit_group+0x3f/0x40 [ 217.766025][T10961] x64_sys_call+0x26a8/0x26b0 [ 217.770694][T10961] do_syscall_64+0xf3/0x230 [ 217.775197][T10961] ? clear_bhb_loop+0x35/0x90 [ 217.779871][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.785761][T10961] RIP: 0033:0x7f3c6c58cde9 [ 217.790166][T10961] Code: Unable to access opcode bytes at 0x7f3c6c58cdbf. [ 217.797175][T10961] RSP: 002b:00007ffc5adf4da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.805600][T10961] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c6c58cde9 [ 217.813565][T10961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 217.821525][T10961] RBP: 00007f3c6c5ed8d0 R08: 00007ffc5adf2b47 R09: 0000000000000003 [ 217.829485][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.837447][T10961] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc5adf4f60 [ 217.845430][T10961] [ 217.848582][T10961] Kernel Offset: disabled [ 217.853247][T10961] Rebooting in 86400 seconds..