last executing test programs: 1m10.11628588s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 1m8.449653283s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 59.597795045s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 59.009493263s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 47.56843601s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 46.771737189s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 30.474184232s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 29.827467709s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 20.046137201s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 19.673421126s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 8.584411831s ago: executing program 3 (id=790): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095000000000000009a9f0286fefa38d7faa322aacfad0302deb13e760e6af171756f95267d7bc4021f593ceb805c3a4d7ca3b70c1af067b068"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@private=0xa010102, 0x4e23, 0x1, 0x4e21, 0xe0, 0xa, 0x0, 0xa0, 0x2b, r2, 0xee00}, {0x7, 0x0, 0xa, 0x5, 0x5, 0xa0, 0x1000}, {0x2, 0x6, 0x1, 0x1}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0x3d}, 0x2, @in=@private=0xa010102, 0x3501, 0x4, 0x3, 0x7, 0x6, 0x6, 0xc}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x80, 0x82f, 0xe618, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast1, {[@end, @lsrr={0x83, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @remote]}, @end, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={0xffffffffffffffff, 0x8000000000000001, 0x9, 0xa73}) r5 = accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendto$packet(r5, &(0x7f00000001c0)="ba9946cab7e9c5a9ed1448133905a7cf79ea661c282d8316ffe7f06eaec75d405d7313ee5824", 0x26, 0x2400c804, &(0x7f0000000200)={0x11, 0x1b, r3, 0x1, 0x6}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r3, 0x21, r6}, 0x10) 6.916467086s ago: executing program 2 (id=1409): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0x4004090) (fail_nth: 13) 2.966293675s ago: executing program 0 (id=1966): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00001cce000014000100fc010000000040000000000000000000"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0x5f, "8cb9884833beccae23220c400b4c510f7cb60edf845b334be7012c7efe04bf86277905a488f8aea98a57a9cd37e933bab9c43f0d51babbd0827679a3cd315f2f0c72606df40d1d29fde1b6f3bb6c01190fc201dd6f1b216b4d218def372c13"}, &(0x7f0000000300)=0x67) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000600)={r10, @in6={{0xa, 0x4e21, 0x4e3, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10000}}, 0x4, 0x2, 0x1, 0x1, 0x80, 0xbe, 0xe}, 0x9c) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x6162, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', r4, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.398236757s ago: executing program 0 (id=1973): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.246695784s ago: executing program 0 (id=1978): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, &(0x7f0000000100)=""/170, 0xaa}, 0x10042) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="4e48824b4a6b3ee09b1eb4edf945bbb3d14c169ecc70f4aac3db6265c0601a57aee579b3aafb6fbd7e794929b5b9bcb23b718bd2211c90e835879e4c710231c7c91c598998f25c23c5146617c7643d5a9a95d0f4e2cc52d34a6092387c52", 0x5e}, {&(0x7f00000002c0)="f42423d7e6242f4f0be214d2f48544bf5d0c6d8516508e4ca39ff28413", 0x1d}], 0x2, &(0x7f0000000340)=[{0xd0, 0x111, 0x0, "59b4602a2c9c2feac0b1939a083ebf9ed69a033de59f07ae92c359112fa2c7caae5f81ed40d147cd319c4383b92fa6834256b0f4ea46ccea3dcf14d8a262bf27eff60d967bcf2d825dbc3e31d1e2828c18a92572dcdb1729af62f4fb21aba224baf8d5dd6ec1f8d861dafb050dcca9649b48f065dc1d26e5e3118a81a1794ff5e7cafe4a5f46a28607faf7efec8a39281e686a37f88af408fa3c774939f9cb27a0c214d9e612e1eb10c341b8f550959660a504837c4701deb5ef7e148cab04d7"}, {0x88, 0x10f, 0xe, "ffc39bcbbb73952bee57084a9657b4956425175d8ec50895d596fb0d5b313d3a75a19ecd80fca1275b295a09db3288bb0935b3e9cc80c5dbf698204f7ebaecd250972323aff8b1344893db061e694ab1c25a23169e0f81d8013aee767d5022348c503107842aa027440653103fa17aeccc70bef587f7a6"}, {0x38, 0x88, 0x3, "b11d179310c37f4bd7411c587d2c9da336f1039ebf23fd4b59471695e18a674d79"}, {0x100, 0x116, 0x8, "85ad488c88a13a56ebac26a42d03102ef02d5a0696bb81a09ca53269b7ae238c0f73d9310769bcef3348877f50ed859ec9db029e413add524b89af9ac2840cb009d7d97982889861cfcac23b5999c8b1ca612e444f1aa5fe01e090ea1dd2083560d8c1ca131d7788c4012f48fd3a6ea616064b5f5940877d1eefe06043ba10afb856a1fbb8efebc78239b85363ccb52c2bf8c271f191d3005bceb18da413f1a9e77016109865fe3beb13350ccfdd64d0e9ebbc1efb22ec5b92f02788f5f55f114d64745184973345d979b0e5e6a212c19655f209397010b0799bd5f19447ddaf8b11ca8b4c2f7276ccf43aef1c7ac2"}, {0xb0, 0xff, 0x0, "a1fc099c5207d9d9eff3b90a1444d39a480037a0a3fc1e8cc83101bb2f257dac9ba011eaf9ee4efe0406fd6856e37096a93cae39e53180494da5aa1489f5d49859bb645a68163501bed7234ae45e984b21661e5cba5c6e8a05dce6462cec33a9c02f9e59807eabc254e2cfbe9f108dc9002aef31bf590f2f58c8ae554c4695f12f3827d3f14368e38e5084592467273f33c9c77325a62073f90e974b4e85"}], 0x340}, 0x4000040) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000006c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1fc, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x501c}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4fa3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0x35}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20048004}, 0x10) r6 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r6, &(0x7f0000000a00)=@util={0x25, "5e5113b51e7bd1a55f2a576eaa30696a"}, 0x18) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a80)={'veth0_macvtap\x00', 0x2802}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ca3bfa0bf"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "30c1fecd81"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x28000001) socket$igmp(0x2, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xa4, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xf}, @ETHTOOL_A_COALESCE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001240)={0x0, 0xc}, &(0x7f0000001280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000012c0)=@assoc_value={r9, 0x6}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x16}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x400c080) 1.039668849s ago: executing program 0 (id=1979): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0xfffffffffffffffb, 0x12) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x18, 0x1, "000002000000"}, {0x9d5e225cf2b564c0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {}, {0x1}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'tgr192\x00'}}}]}, 0x13c}}, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffeee, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}}, 0x0) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf45dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x1, 0x0) 993.36951ms ago: executing program 4 (id=1980): r0 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r0, &(0x7f0000000000)="0211a3af91346c5f7a3ae9c7747f0220fce340cb37c201e83a0bbc1f3ebd6e736e78e514b862a7f41246ee2773a69d1d3cd1b4d65ff4be34c0ab363469f579dbcf546bf183fd858d53c726500527f4b400ebdb849cbe8d4bed55b789039f21211ea67ab05111b214b7dfce06a47dcbfa13a4fe25a864f0030085955b4802aaa778e86f679e1bc8d440a9a65e50f7fb2e", 0x90, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f00000005c0)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100ff05008a"], 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x29, 0x7, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) sendto$inet6(r0, &(0x7f0000000000)="0211a3af91346c5f7a3ae9c7747f0220fce340cb37c201e83a0bbc1f3ebd6e736e78e514b862a7f41246ee2773a69d1d3cd1b4d65ff4be34c0ab363469f579dbcf546bf183fd858d53c726500527f4b400ebdb849cbe8d4bed55b789039f21211ea67ab05111b214b7dfce06a47dcbfa13a4fe25a864f0030085955b4802aaa778e86f679e1bc8d440a9a65e50f7fb2e", 0x90, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async) clock_gettime(0x0, &(0x7f00000005c0)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100ff05008a"], 0x30}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x29, 0x7, 0x0) (async) 904.781138ms ago: executing program 0 (id=1982): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4010051) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000003c0)=0x1003) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x2) close(r0) 852.790117ms ago: executing program 4 (id=1983): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @private}, &(0x7f0000000100)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @private, 0x0}, &(0x7f0000000100)=0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f00000000c0)={0x1d, @broadcast, 0x4e23, 0x0, 'none\x00', 0x10, 0x9, 0x4c}, 0x2c) sendmmsg$inet(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r3, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x18}}], 0x67c, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="4c000000100001040300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000002c001280110001006272696467655f736c6176650000000014000580080003"], 0x4c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 757.047925ms ago: executing program 1 (id=1984): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x0, @local}}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x22, 0x0, 0x0, 0xfffff010}, {0x23, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) 717.941683ms ago: executing program 4 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 566.789016ms ago: executing program 0 (id=1986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x44055) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x1, 0x0}, &(0x7f00000002c0)=0x40) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000016000000b30000160d8086aba97dee81d101007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018000000202078250000000000202020db1af8ff40000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 523.359372ms ago: executing program 1 (id=1987): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=@hopopts={0x3c}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a09040000000000000000020000055800048010000180090001006c6173740000000010000180090001006d6173710000000024000180090001006861736800000000140002800800074000000000080006400000000910000180090001007866726d000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 449.039889ms ago: executing program 4 (id=1988): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040007001a000900", 0x33a) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x2, 0x2, 0x3, 0x3}}, 0x2e) r2 = socket(0x3, 0x4, 0xffff) write(r2, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=@bridge_setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x5, 0x6, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x12, "f35751f88c6b449a9f59145c9d5d734a"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x0}) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) getpeername$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000003c0)={@dev, 0x0}, &(0x7f0000000400)=0x14) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x144, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_PEERS={0xf4, 0x8, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x10, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xfffffffffffffddf, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc9480715edfd2343d44d97ed1fa25a3d186f098d804cf4ecb9694c01ad47bf6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x144}}, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x80, 0xc7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0xc081}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x3, 0x1e00c2d2, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x8000, 0x4, 0x7}}) r17 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r17, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r17, 0x1, 0x25, &(0x7f0000000280)=0x5f6f, 0x4) bind$packet(r17, &(0x7f0000000080)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1dc, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x684b2b91d26d30fb}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008810) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x11, 0x0, 0x0) 448.181536ms ago: executing program 1 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffe60000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xfd, 0x9}) 362.593349ms ago: executing program 1 (id=1990): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, &(0x7f0000000100)=""/170, 0xaa}, 0x10042) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="4e48824b4a6b3ee09b1eb4edf945bbb3d14c169ecc70f4aac3db6265c0601a57aee579b3aafb6fbd7e794929b5b9bcb23b718bd2211c90e835879e4c710231c7c91c598998f25c23c5146617c7643d5a9a95d0f4e2cc52d34a6092387c52", 0x5e}, {&(0x7f00000002c0)="f42423d7e6242f4f0be214d2f48544bf5d0c6d8516508e4ca39ff28413", 0x1d}], 0x2, &(0x7f0000000340)=[{0xd0, 0x111, 0x0, "59b4602a2c9c2feac0b1939a083ebf9ed69a033de59f07ae92c359112fa2c7caae5f81ed40d147cd319c4383b92fa6834256b0f4ea46ccea3dcf14d8a262bf27eff60d967bcf2d825dbc3e31d1e2828c18a92572dcdb1729af62f4fb21aba224baf8d5dd6ec1f8d861dafb050dcca9649b48f065dc1d26e5e3118a81a1794ff5e7cafe4a5f46a28607faf7efec8a39281e686a37f88af408fa3c774939f9cb27a0c214d9e612e1eb10c341b8f550959660a504837c4701deb5ef7e148cab04d7"}, {0x88, 0x10f, 0xe, "ffc39bcbbb73952bee57084a9657b4956425175d8ec50895d596fb0d5b313d3a75a19ecd80fca1275b295a09db3288bb0935b3e9cc80c5dbf698204f7ebaecd250972323aff8b1344893db061e694ab1c25a23169e0f81d8013aee767d5022348c503107842aa027440653103fa17aeccc70bef587f7a6"}, {0x38, 0x88, 0x3, "b11d179310c37f4bd7411c587d2c9da336f1039ebf23fd4b59471695e18a674d79"}, {0x100, 0x116, 0x8, "85ad488c88a13a56ebac26a42d03102ef02d5a0696bb81a09ca53269b7ae238c0f73d9310769bcef3348877f50ed859ec9db029e413add524b89af9ac2840cb009d7d97982889861cfcac23b5999c8b1ca612e444f1aa5fe01e090ea1dd2083560d8c1ca131d7788c4012f48fd3a6ea616064b5f5940877d1eefe06043ba10afb856a1fbb8efebc78239b85363ccb52c2bf8c271f191d3005bceb18da413f1a9e77016109865fe3beb13350ccfdd64d0e9ebbc1efb22ec5b92f02788f5f55f114d64745184973345d979b0e5e6a212c19655f209397010b0799bd5f19447ddaf8b11ca8b4c2f7276ccf43aef1c7ac2"}, {0xb0, 0xff, 0x0, "a1fc099c5207d9d9eff3b90a1444d39a480037a0a3fc1e8cc83101bb2f257dac9ba011eaf9ee4efe0406fd6856e37096a93cae39e53180494da5aa1489f5d49859bb645a68163501bed7234ae45e984b21661e5cba5c6e8a05dce6462cec33a9c02f9e59807eabc254e2cfbe9f108dc9002aef31bf590f2f58c8ae554c4695f12f3827d3f14368e38e5084592467273f33c9c77325a62073f90e974b4e85"}], 0x340}, 0x4000040) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000006c0)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1fc, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x501c}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4fa3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0x35}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20048004}, 0x10) r6 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r6, &(0x7f0000000a00)=@util={0x25, "5e5113b51e7bd1a55f2a576eaa30696a"}, 0x18) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a80)={'veth0_macvtap\x00', 0x2802}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ca3bfa0bf"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "30c1fecd81"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x28000001) socket$igmp(0x2, 0x3, 0x2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xa4, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xf}, @ETHTOOL_A_COALESCE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001240)={0x0, 0xc}, &(0x7f0000001280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000012c0)=@assoc_value={r9, 0x6}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x16}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x400c080) 347.206031ms ago: executing program 4 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x40}}, 0x22004440) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00'}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf255e00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40) 248.551014ms ago: executing program 1 (id=1992): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x22, 0x2, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000), 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f0}, {&(0x7f0000000bc0)="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", 0x25a}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf03114784a11e8463", 0x80}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 109.649896ms ago: executing program 4 (id=1993): socket$inet6(0xa, 0x1, 0x4) unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x2c, 0x2c, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0xfff3, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x2c}}, 0x4084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) close(r4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) 0s ago: executing program 1 (id=1994): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x63) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000180)=r4}, 0x20) (async, rerun: 64) close(r4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07e03406000043fe0000070600000ee60000bf050000000000003d3500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a406c5119761d5aabb51c5175461f8b0aa7265c380317f08775d8a8a8bda64ada2c6b3599f548d6272937e4d89ef6ebcecf84fa856024b55dd057056bbae005f0fba858f3abdd9c115064000000000000000000070b0bb28fd1eca97a90864863235d415379d1bdb3d35015f85be2ae802455d3b079f12aa837996ca1ce7280cb394b4c13ca623c30b19887d41eab495f698284a1bc17ff100000000000000000000dac089bdf7984e3300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): +0x219a/0x3520 [ 177.724459][T10643] ? aa_sk_perm+0x96d/0xab0 [ 177.728990][T10643] ? __pfx_sctp_sendmsg+0x10/0x10 [ 177.734045][T10643] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.738924][T10643] ? inet_sendmsg+0x330/0x390 [ 177.743635][T10643] __sock_sendmsg+0x1a6/0x270 [ 177.748341][T10643] ____sys_sendmsg+0x52a/0x7e0 [ 177.753141][T10643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.756339][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.758450][T10643] __sys_sendmmsg+0x3ab/0x730 [ 177.769779][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.770615][T10643] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.779986][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.782811][T10643] ? __pfx_lock_release+0x10/0x10 [ 177.792779][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.794727][T10643] ? kstrtouint_from_user+0x128/0x190 [ 177.794780][T10643] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 177.794803][T10643] ? ksys_write+0x229/0x2b0 [ 177.794821][T10643] ? __pfx_lock_release+0x10/0x10 [ 177.804015][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.807152][T10643] ? vfs_write+0x730/0xd30 [ 177.807193][T10643] ? __mutex_unlock_slowpath+0x21d/0x750 [ 177.807222][T10643] ? __fget_files+0x3f3/0x470 [ 177.807254][T10643] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.814043][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.817635][T10643] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.817670][T10643] ? do_syscall_64+0x100/0x230 [ 177.817692][T10643] __x64_sys_sendmmsg+0xa0/0xb0 [ 177.817718][T10643] do_syscall_64+0xf3/0x230 [ 177.817736][T10643] ? clear_bhb_loop+0x35/0x90 [ 177.817757][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.817780][T10643] RIP: 0033:0x7fcb73d7e719 [ 177.817798][T10643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.817812][T10643] RSP: 002b:00007fcb74c15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.817834][T10643] RAX: ffffffffffffffda RBX: 00007fcb73f35f80 RCX: 00007fcb73d7e719 [ 177.817848][T10643] RDX: 0000000000000001 RSI: 0000000020001680 RDI: 0000000000000003 [ 177.817862][T10643] RBP: 00007fcb74c15090 R08: 0000000000000000 R09: 0000000000000000 [ 177.817875][T10643] R10: 0000000004004090 R11: 0000000000000246 R12: 0000000000000001 [ 177.817887][T10643] R13: 0000000000000000 R14: 00007fcb73f35f80 R15: 00007ffd552948a8 [ 177.817915][T10643] [ 177.990806][T10648] netlink: 'syz.1.1346': attribute type 4 has an invalid length. [ 178.039724][T10663] __nla_validate_parse: 4 callbacks suppressed [ 178.039744][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 178.102602][T10663] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1349'. [ 178.128818][T10655] lo speed is unknown, defaulting to 1000 [ 178.282786][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 178.318565][T10682] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1355'. [ 178.331575][T10655] chnl_net:caif_netlink_parms(): no params data found [ 178.445186][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 178.460136][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'. [ 178.474763][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'. [ 178.598193][ T2993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.664693][T10703] xt_TCPMSS: Only works on TCP SYN packets [ 178.729952][T10700] netlink: 'syz.1.1360': attribute type 4 has an invalid length. [ 178.803154][ T2993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.966100][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.973417][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.991246][T10655] bridge_slave_0: entered allmulticast mode [ 178.998788][T10655] bridge_slave_0: entered promiscuous mode [ 179.012216][T10709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.104626][ T2993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.149790][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.158466][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.165869][T10655] bridge_slave_1: entered allmulticast mode [ 179.172890][T10655] bridge_slave_1: entered promiscuous mode [ 179.268649][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.281241][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.408091][T10655] team0: Port device team_slave_0 added [ 179.436971][T10655] team0: Port device team_slave_1 added [ 179.631418][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.686483][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.784601][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.867309][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.886280][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.919475][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.933228][ T2993] bridge_slave_1: left allmulticast mode [ 179.982668][ T2993] bridge_slave_1: left promiscuous mode [ 180.004663][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.029066][ T2993] bridge_slave_0: left allmulticast mode [ 180.045433][ T2993] bridge_slave_0: left promiscuous mode [ 180.051724][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.061746][ T54] Bluetooth: hci0: command tx timeout [ 180.072504][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 180.172584][T10769] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1379'. [ 180.471014][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.483574][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.496166][ T2993] bond0 (unregistering): Released all slaves [ 180.514621][T10769] tipc: Enabling of bearer rejected, already enabled [ 180.652766][T10779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1383'. [ 180.740369][T10655] hsr_slave_0: entered promiscuous mode [ 180.756154][T10655] hsr_slave_1: entered promiscuous mode [ 180.762714][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.775166][T10655] Cannot create hsr debugfs directory [ 180.780884][T10783] netlink: 'syz.2.1382': attribute type 4 has an invalid length. [ 180.798262][T10790] netlink: 'syz.1.1386': attribute type 25 has an invalid length. [ 180.812844][T10790] netlink: 'syz.1.1386': attribute type 7 has an invalid length. [ 180.821341][T10783] hsr_slave_0: left promiscuous mode [ 180.831338][T10783] hsr_slave_1: left promiscuous mode [ 181.082282][ T2993] hsr_slave_0: left promiscuous mode [ 181.098934][ T2993] hsr_slave_1: left promiscuous mode [ 181.111282][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.118894][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.128706][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.140990][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.170087][ T2993] veth1_macvtap: left promiscuous mode [ 181.179750][ T2993] veth0_macvtap: left promiscuous mode [ 181.185719][ T2993] veth1_vlan: left promiscuous mode [ 181.191704][ T2993] veth0_vlan: left promiscuous mode [ 181.536689][T10817] sctp: [Deprecated]: syz.4.1394 (pid 10817) Use of int in max_burst socket option. [ 181.536689][T10817] Use struct sctp_assoc_value instead [ 181.553002][T10820] FAULT_INJECTION: forcing a failure. [ 181.553002][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 181.566982][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.0.1395 Not tainted 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 [ 181.577787][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.587866][T10820] Call Trace: [ 181.591151][T10820] [ 181.594081][T10820] dump_stack_lvl+0x241/0x360 [ 181.598760][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.603961][T10820] ? __pfx__printk+0x10/0x10 [ 181.608575][T10820] should_fail_ex+0x3b0/0x4e0 [ 181.613276][T10820] should_failslab+0xac/0x100 [ 181.617953][T10820] ? sctp_add_bind_addr+0x89/0x3a0 [ 181.623065][T10820] __kmalloc_cache_noprof+0x6c/0x2c0 [ 181.628362][T10820] sctp_add_bind_addr+0x89/0x3a0 [ 181.633317][T10820] sctp_copy_local_addr_list+0x311/0x500 [ 181.638956][T10820] ? sctp_copy_local_addr_list+0xab/0x500 [ 181.644693][T10820] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 181.650885][T10820] ? sctp_v4_is_any+0x35/0x60 [ 181.655591][T10820] sctp_bind_addr_copy+0xad/0x3b0 [ 181.660644][T10820] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 181.667008][T10820] sctp_connect_new_asoc+0x2f3/0x6c0 [ 181.672308][T10820] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 181.678108][T10820] ? sctp_sendmsg+0xbb9/0x3520 [ 181.682870][T10820] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 181.688683][T10820] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 181.694260][T10820] sctp_sendmsg+0x219a/0x3520 [ 181.698957][T10820] ? aa_sk_perm+0x96d/0xab0 [ 181.703464][T10820] ? __pfx_sctp_sendmsg+0x10/0x10 [ 181.708511][T10820] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.713389][T10820] ? inet_sendmsg+0x330/0x390 [ 181.718082][T10820] __sock_sendmsg+0x1a6/0x270 [ 181.722766][T10820] ____sys_sendmsg+0x52a/0x7e0 [ 181.727547][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.732854][T10820] __sys_sendmmsg+0x3ab/0x730 [ 181.737555][T10820] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.742785][T10820] ? __pfx_lock_release+0x10/0x10 [ 181.747837][T10820] ? kstrtouint_from_user+0x128/0x190 [ 181.753239][T10820] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 181.759304][T10820] ? ksys_write+0x229/0x2b0 [ 181.763819][T10820] ? __pfx_lock_release+0x10/0x10 [ 181.768860][T10820] ? vfs_write+0x730/0xd30 [ 181.773309][T10820] ? __mutex_unlock_slowpath+0x21d/0x750 [ 181.778955][T10820] ? __fget_files+0x3f3/0x470 [ 181.783686][T10820] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.789688][T10820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.796043][T10820] ? do_syscall_64+0x100/0x230 [ 181.800812][T10820] __x64_sys_sendmmsg+0xa0/0xb0 [ 181.805696][T10820] do_syscall_64+0xf3/0x230 [ 181.810215][T10820] ? clear_bhb_loop+0x35/0x90 [ 181.814886][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.820937][T10820] RIP: 0033:0x7f2c8477e719 [ 181.825372][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.845012][T10820] RSP: 002b:00007f2c8556c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.853461][T10820] RAX: ffffffffffffffda RBX: 00007f2c84935f80 RCX: 00007f2c8477e719 [ 181.861451][T10820] RDX: 0000000000000001 RSI: 0000000020001680 RDI: 0000000000000003 [ 181.869436][T10820] RBP: 00007f2c8556c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.877419][T10820] R10: 0000000004004090 R11: 0000000000000246 R12: 0000000000000002 [ 181.885410][T10820] R13: 0000000000000000 R14: 00007f2c84935f80 R15: 00007ffc82bbcdb8 [ 181.893498][T10820] [ 182.113021][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 182.140182][ T54] Bluetooth: hci0: command tx timeout [ 182.166517][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 182.975300][T10846] bridge_slave_0: left allmulticast mode [ 182.981003][T10846] bridge_slave_0: left promiscuous mode [ 182.992817][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.049049][T10846] bond0: (slave bond_slave_0): Releasing backup interface [ 183.101051][T10855] __nla_validate_parse: 1 callbacks suppressed [ 183.101069][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 183.138774][T10846] bond0: (slave bond_slave_1): Releasing backup interface [ 183.191255][T10846] team0: Port device team_slave_0 removed [ 183.201454][T10846] team0: Port device team_slave_1 removed [ 183.210723][T10846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.221475][T10846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.273582][T10850] lo speed is unknown, defaulting to 1000 [ 183.323570][T10854] netlink: 'syz.1.1403': attribute type 12 has an invalid length. [ 183.390934][T10861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1404'. [ 183.536017][T10867] netlink: 'syz.1.1406': attribute type 25 has an invalid length. [ 183.544008][T10867] netlink: 'syz.1.1406': attribute type 7 has an invalid length. [ 183.940418][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.949963][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.965519][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.983238][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.002174][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.010633][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.021882][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 184.183077][T10887] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 184.211082][T10887] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 184.217939][ T5843] Bluetooth: hci0: command tx timeout [ 184.238381][T10887] bond0: (slave netdevsim0): Releasing backup interface [ 184.270127][T10655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.298901][T10883] lo speed is unknown, defaulting to 1000 [ 184.308601][T10655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.358277][T10655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.389165][T10655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.569785][T10908] tipc: Enabling of bearer rejected, already enabled [ 184.667396][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.677696][T10912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1417'. [ 184.714926][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.752219][T10655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.780910][T10655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.799720][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.806888][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.826882][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.834021][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.862875][T10883] chnl_net:caif_netlink_parms(): no params data found [ 185.059879][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.082021][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.097147][T10883] bridge_slave_0: entered allmulticast mode [ 185.104467][T10883] bridge_slave_0: entered promiscuous mode [ 185.124872][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.142946][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.151689][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.159146][T10883] bridge_slave_1: entered allmulticast mode [ 185.167289][T10883] bridge_slave_1: entered promiscuous mode [ 185.193009][T10655] veth0_vlan: entered promiscuous mode [ 185.232016][T10944] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 185.290874][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.329741][T10655] veth1_vlan: entered promiscuous mode [ 185.349528][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.411651][T10950] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 185.477852][T10883] team0: Port device team_slave_0 added [ 185.499970][T10883] team0: Port device team_slave_1 added [ 185.509714][T10655] veth0_macvtap: entered promiscuous mode [ 185.601067][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.609971][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.637474][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.650522][T10655] veth1_macvtap: entered promiscuous mode [ 185.682768][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.700255][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.710874][T10655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.723410][T10655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.735502][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.762931][T10965] lo speed is unknown, defaulting to 1000 [ 185.765615][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 185.799612][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.822568][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.862151][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.892742][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.949366][T10655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.958759][T10655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.969018][T10655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.989321][T10655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.064945][ T5843] Bluetooth: hci3: command tx timeout [ 186.204953][T10883] hsr_slave_0: entered promiscuous mode [ 186.232333][T10883] hsr_slave_1: entered promiscuous mode [ 186.272234][T10883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.298525][ T5843] Bluetooth: hci0: command tx timeout [ 186.304534][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 186.310640][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 186.342712][T10883] Cannot create hsr debugfs directory [ 186.569747][T10975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1438'. [ 186.889906][T10883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.900902][T10883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.955723][T11001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1442'. [ 186.971390][ T6343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.984923][ T6343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.056702][T10883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.067800][T10883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.109219][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.121917][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.186367][T10883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.201695][T10883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.354900][T10883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.366702][T10883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.466679][T11028] netlink: 'syz.0.1448': attribute type 6 has an invalid length. [ 187.490933][T11028] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1448'. [ 187.500557][T10883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.511113][T10883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.522498][T10883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.534737][T10883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.613609][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.654761][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.678993][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.686131][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.707441][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.714576][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.811493][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 187.906268][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.977046][T10883] veth0_vlan: entered promiscuous mode [ 187.998092][T10883] veth1_vlan: entered promiscuous mode [ 188.049332][T10883] veth0_macvtap: entered promiscuous mode [ 188.068003][T10883] veth1_macvtap: entered promiscuous mode [ 188.101603][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.124874][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.135607][ T5851] Bluetooth: hci3: command tx timeout [ 188.148816][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.159854][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.170529][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.181390][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.193851][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.207333][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.219123][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.232375][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.257337][T10883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.281021][T10883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.290549][T10883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.300380][T10883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.368423][T11044] pim6reg: left allmulticast mode [ 188.407955][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.420132][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.465660][T11020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.473523][T11020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.517821][T11048] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 188.839906][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'. [ 188.855688][T11055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1457'. [ 188.921017][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 188.950634][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1459'. [ 189.212795][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.411627][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.490940][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.579416][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.653982][ T11] bridge_slave_1: left allmulticast mode [ 189.661808][ T11] bridge_slave_1: left promiscuous mode [ 189.667901][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.676581][ T11] bridge_slave_0: left allmulticast mode [ 189.682246][ T11] bridge_slave_0: left promiscuous mode [ 189.688441][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.022627][T11078] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 190.213586][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.245633][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.272487][ T11] bond0 (unregistering): Released all slaves [ 190.301419][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.312989][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.321841][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.330490][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.339695][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.350146][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.471332][T11092] netlink: 'syz.4.1469': attribute type 10 has an invalid length. [ 190.490159][T11088] lo speed is unknown, defaulting to 1000 [ 190.706971][ T11] hsr_slave_0: left promiscuous mode [ 190.720470][ T11] hsr_slave_1: left promiscuous mode [ 190.747899][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.757784][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.767081][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.784389][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.817988][ T11] veth1_macvtap: left promiscuous mode [ 190.823537][ T11] veth0_macvtap: left promiscuous mode [ 190.840498][ T11] veth1_vlan: left promiscuous mode [ 190.855296][ T11] veth0_vlan: left promiscuous mode [ 191.124963][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.135617][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.144444][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.153337][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.164158][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 191.165869][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.182688][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.539838][ T11] team0 (unregistering): Port device team_slave_1 removed [ 191.581374][ T11] team0 (unregistering): Port device team_slave_0 removed [ 192.012533][T11107] gretap0: entered promiscuous mode [ 192.019482][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 192.082707][T11117] lo speed is unknown, defaulting to 1000 [ 192.205646][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'. [ 192.208979][T11129] Bluetooth: MGMT ver 1.23 [ 192.282538][T11129] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 192.299845][T11135] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 192.347529][T11088] chnl_net:caif_netlink_parms(): no params data found [ 192.368449][T11139] sctp: [Deprecated]: syz.1.1482 (pid 11139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.368449][T11139] Use struct sctp_sack_info instead [ 192.464561][ T54] Bluetooth: hci0: command tx timeout [ 192.556042][T11088] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.569013][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.576675][T11088] bridge_slave_0: entered allmulticast mode [ 192.583831][T11088] bridge_slave_0: entered promiscuous mode [ 192.601184][T11088] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.620193][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.628088][T11088] bridge_slave_1: entered allmulticast mode [ 192.635665][T11088] bridge_slave_1: entered promiscuous mode [ 192.647268][T11154] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 192.659992][T11154] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 192.690092][T11117] chnl_net:caif_netlink_parms(): no params data found [ 192.701930][T11088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.716704][T11088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.787461][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.807814][T11088] team0: Port device team_slave_0 added [ 192.826724][T11088] team0: Port device team_slave_1 added [ 192.879680][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.900550][T11088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.907616][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.934001][T11088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.950253][T11088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.957573][T11088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.983859][T11088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.023755][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.080600][T11117] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.087957][T11117] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.096847][T11117] bridge_slave_0: entered allmulticast mode [ 193.103506][T11117] bridge_slave_0: entered promiscuous mode [ 193.125420][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.181066][T11117] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.188553][T11117] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.197243][T11117] bridge_slave_1: entered allmulticast mode [ 193.205309][T11117] bridge_slave_1: entered promiscuous mode [ 193.217526][T11088] hsr_slave_0: entered promiscuous mode [ 193.228845][T11088] hsr_slave_1: entered promiscuous mode [ 193.240443][T11088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.248470][T11088] Cannot create hsr debugfs directory [ 193.255675][ T54] Bluetooth: hci3: command tx timeout [ 193.347284][T11117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.363091][T11169] nbd: must specify a size in bytes for the device [ 193.382199][T11117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.516723][T11117] team0: Port device team_slave_0 added [ 193.547236][ T11] bridge_slave_1: left allmulticast mode [ 193.552930][ T11] bridge_slave_1: left promiscuous mode [ 193.575381][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.591967][ T11] bridge_slave_0: left allmulticast mode [ 193.599891][ T11] bridge_slave_0: left promiscuous mode [ 193.611376][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.965586][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.980295][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.991224][ T11] bond0 (unregistering): Released all slaves [ 194.006546][T11117] team0: Port device team_slave_1 added [ 194.033060][T11183] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 194.052047][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 194.220075][T11117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.228042][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.262080][T11117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.283552][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 194.299330][T11190] vlan3: entered promiscuous mode [ 194.305156][T11190] vlan3: entered allmulticast mode [ 194.346524][T11117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.356009][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.384534][T11117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.402197][T11190] xfrm0: entered allmulticast mode [ 194.414852][T11190] xfrm0: entered promiscuous mode [ 194.493552][T11199] netlink: 'syz.1.1498': attribute type 8 has an invalid length. [ 194.534672][ T54] Bluetooth: hci0: command tx timeout [ 194.642628][ T11] hsr_slave_0: left promiscuous mode [ 194.654975][ T11] hsr_slave_1: left promiscuous mode [ 194.671758][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.680033][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.695913][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.703418][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.739441][ T11] veth1_macvtap: left promiscuous mode [ 194.745523][ T11] veth0_macvtap: left promiscuous mode [ 194.751439][ T11] veth1_vlan: left promiscuous mode [ 194.757668][ T11] veth0_vlan: left promiscuous mode [ 194.782949][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 195.178877][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.218986][ T11] team0 (unregistering): Port device team_slave_0 removed [ 195.334988][ T54] Bluetooth: hci3: command tx timeout [ 195.623337][T11117] hsr_slave_0: entered promiscuous mode [ 195.630483][T11117] hsr_slave_1: entered promiscuous mode [ 195.639720][T11117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.650717][T11117] Cannot create hsr debugfs directory [ 195.671342][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1501'. [ 195.963758][T11088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.990322][T11237] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20000 [ 196.024701][T11088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.077081][T11088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.094691][T11088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.280021][T11088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.303470][T11088] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.321342][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.328527][T11020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.351560][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.358738][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.437697][T11117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.452204][T11117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.470072][T11117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.479725][T11117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.584085][T11117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.613415][T11117] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.614674][ T54] Bluetooth: hci0: command tx timeout [ 196.629871][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.637061][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.658048][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.665287][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.693564][T11088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.812452][T11088] veth0_vlan: entered promiscuous mode [ 196.842116][T11088] veth1_vlan: entered promiscuous mode [ 196.886310][T11088] veth0_macvtap: entered promiscuous mode [ 196.906557][T11088] veth1_macvtap: entered promiscuous mode [ 196.937839][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.950166][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.976725][T11088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.987893][T11088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.000475][T11088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.019214][T11088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.052592][T11088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.069487][T11088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.088267][T11088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.116690][T11088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.163450][T11117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.278531][T11117] veth0_vlan: entered promiscuous mode [ 197.291270][T11117] veth1_vlan: entered promiscuous mode [ 197.367016][T11117] veth0_macvtap: entered promiscuous mode [ 197.376263][T11117] veth1_macvtap: entered promiscuous mode [ 197.387637][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.396376][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.434453][ T54] Bluetooth: hci3: command tx timeout [ 197.443324][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.488896][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.504707][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.524578][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.538152][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.549668][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.561730][T11117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.572458][T11117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.585616][T11117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.597333][T11117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.620571][T11305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1525'. [ 197.627997][T11298] netlink: 'syz.4.1522': attribute type 2 has an invalid length. [ 197.638226][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 197.640368][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1525'. [ 197.667817][T11117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.684398][T11117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.693942][T11117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.702862][T11117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.713677][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 197.734600][T11020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.742460][T11020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.874615][T11020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.882594][T11020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.043003][T11320] lo speed is unknown, defaulting to 1000 [ 198.049526][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 198.079054][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.093540][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.181018][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1533'. [ 199.512214][T11366] xt_l2tp: wrong L2TP version: 0 [ 199.730452][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.589334][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.591144][T11403] netlink: 'syz.0.1549': attribute type 25 has an invalid length. [ 200.607862][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.617595][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.639150][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.649878][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.657621][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.685936][T11403] netlink: 'syz.0.1549': attribute type 7 has an invalid length. [ 200.764847][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.774026][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.792668][T11406] lo speed is unknown, defaulting to 1000 [ 200.805524][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.837663][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.873164][T11415] netlink: 'syz.0.1552': attribute type 11 has an invalid length. [ 200.873798][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.887599][T11415] __nla_validate_parse: 6 callbacks suppressed [ 200.887616][T11415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1552'. [ 200.910202][T11416] netlink: 'syz.0.1552': attribute type 11 has an invalid length. [ 200.919859][T11416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1552'. [ 200.919960][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.942017][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.019123][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'. [ 201.022105][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.098130][T11410] lo speed is unknown, defaulting to 1000 [ 201.161820][T11432] netlink: 6084 bytes leftover after parsing attributes in process `syz.0.1558'. [ 201.178714][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 201.206392][T11432] netlink: 6084 bytes leftover after parsing attributes in process `syz.0.1558'. [ 201.242189][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.272325][T11437] openvswitch: netlink: Message has -1 unknown bytes. [ 201.283501][T11437] openvswitch: netlink: Message has -1 unknown bytes. [ 201.429874][T11446] netlink: 'syz.1.1562': attribute type 25 has an invalid length. [ 201.440882][T11446] netlink: 'syz.1.1562': attribute type 7 has an invalid length. [ 201.520911][T11406] chnl_net:caif_netlink_parms(): no params data found [ 201.611791][ T35] bridge_slave_1: left allmulticast mode [ 201.623896][ T35] bridge_slave_1: left promiscuous mode [ 201.632296][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.664013][ T35] bridge_slave_0: left allmulticast mode [ 201.670542][ T35] bridge_slave_0: left promiscuous mode [ 201.678775][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.443435][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.457533][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.471161][ T35] bond0 (unregistering): Released all slaves [ 202.483481][T11410] chnl_net:caif_netlink_parms(): no params data found [ 202.702789][ T5851] Bluetooth: hci0: command tx timeout [ 202.735231][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.742386][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.750165][T11406] bridge_slave_0: entered allmulticast mode [ 202.761238][T11406] bridge_slave_0: entered promiscuous mode [ 202.770013][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.785011][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.804808][T11406] bridge_slave_1: entered allmulticast mode [ 202.811840][T11406] bridge_slave_1: entered promiscuous mode [ 202.999782][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.014567][ T5851] Bluetooth: hci3: command tx timeout [ 203.054739][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.061963][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.082215][T11410] bridge_slave_0: entered allmulticast mode [ 203.090645][T11410] bridge_slave_0: entered promiscuous mode [ 203.100914][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.125210][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 203.134139][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'. [ 203.144919][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.160968][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.170180][T11410] bridge_slave_1: entered allmulticast mode [ 203.178383][T11410] bridge_slave_1: entered promiscuous mode [ 203.196348][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.235780][T11406] team0: Port device team_slave_0 added [ 203.248611][ T35] hsr_slave_0: left promiscuous mode [ 203.255893][ T35] hsr_slave_1: left promiscuous mode [ 203.272339][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.273047][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.286429][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.300427][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.308366][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.338566][ T35] veth1_macvtap: left promiscuous mode [ 203.344096][ T35] veth0_macvtap: left promiscuous mode [ 203.350176][ T35] veth1_vlan: left promiscuous mode [ 203.364728][ T35] veth0_vlan: left promiscuous mode [ 203.382872][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.832924][ T35] team0 (unregistering): Port device team_slave_1 removed [ 203.879057][ T35] team0 (unregistering): Port device team_slave_0 removed [ 204.353192][T11410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.366281][T11406] team0: Port device team_slave_1 added [ 204.439403][T11523] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.492784][T11410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.573761][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.583723][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.617596][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.647562][T11410] team0: Port device team_slave_0 added [ 204.661474][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.677592][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.720473][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.784252][ T5851] Bluetooth: hci0: command tx timeout [ 204.795516][T11410] team0: Port device team_slave_1 added [ 204.943435][T11410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.953715][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.980316][T11410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.980722][T11540] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1585'. [ 204.991818][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 205.104446][ T5851] Bluetooth: hci3: command tx timeout [ 205.260223][T11537] batman_adv: batadv0: Removing interface: team0 [ 205.283577][T11537] team0 (unregistering): Port device team_slave_1 removed [ 205.318071][T11406] hsr_slave_0: entered promiscuous mode [ 205.326907][T11406] hsr_slave_1: entered promiscuous mode [ 205.333173][T11406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.344366][T11406] Cannot create hsr debugfs directory [ 205.351376][T11410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.364360][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.391133][T11410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.548786][T11410] hsr_slave_0: entered promiscuous mode [ 205.558392][T11410] hsr_slave_1: entered promiscuous mode [ 205.570159][T11410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.578127][T11410] Cannot create hsr debugfs directory [ 205.672475][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.761772][T11562] sctp: [Deprecated]: syz.1.1590 (pid 11562) Use of int in maxseg socket option. [ 205.761772][T11562] Use struct sctp_assoc_value instead [ 205.830639][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.943724][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.001895][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.130807][ T35] bridge_slave_1: left allmulticast mode [ 206.139906][ T35] bridge_slave_1: left promiscuous mode [ 206.147433][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.158736][ T35] bridge_slave_0: left allmulticast mode [ 206.165627][ T35] bridge_slave_0: left promiscuous mode [ 206.171881][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.598061][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.613862][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.639152][ T35] bond0 (unregistering): Released all slaves [ 206.702772][T11580] vlan2: entered allmulticast mode [ 206.751266][T11585] lo speed is unknown, defaulting to 1000 [ 206.820772][T11584] lo speed is unknown, defaulting to 1000 [ 206.864505][ T5851] Bluetooth: hci0: command tx timeout [ 206.991731][T11600] __nla_validate_parse: 2 callbacks suppressed [ 206.991751][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'. [ 207.068650][ T35] hsr_slave_0: left promiscuous mode [ 207.079162][ T35] hsr_slave_1: left promiscuous mode [ 207.088702][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.098350][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.107120][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.115426][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.135833][ T35] veth1_macvtap: left promiscuous mode [ 207.141410][ T35] veth0_macvtap: left promiscuous mode [ 207.147130][ T35] veth1_vlan: left promiscuous mode [ 207.152409][ T35] veth0_vlan: left promiscuous mode [ 207.176282][ T5851] Bluetooth: hci3: command tx timeout [ 207.564956][ T35] team0 (unregistering): Port device team_slave_1 removed [ 207.611680][ T35] team0 (unregistering): Port device team_slave_0 removed [ 208.033659][T11406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.068564][T11596] ipvlan1: entered promiscuous mode [ 208.107215][T11406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.212115][T11406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.225671][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 208.242545][T11604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1602'. [ 208.285777][T11406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.370945][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'. [ 208.648107][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 208.697694][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.753790][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 208.764849][T11620] bridge0: entered promiscuous mode [ 208.773907][T11410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.781566][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 208.817580][T11410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.842504][T11410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.872918][T11410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.918264][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.942737][ T5851] Bluetooth: hci0: command tx timeout [ 208.962068][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.969279][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.983352][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1617'. [ 209.011263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.018552][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.227282][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.256239][ T5851] Bluetooth: hci3: command tx timeout [ 209.303176][T11410] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.356568][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.363748][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.386447][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.393592][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.561555][T11406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.590883][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1630'. [ 209.666685][T11406] veth0_vlan: entered promiscuous mode [ 209.690970][T11406] veth1_vlan: entered promiscuous mode [ 209.772153][T11406] veth0_macvtap: entered promiscuous mode [ 209.796217][T11406] veth1_macvtap: entered promiscuous mode [ 209.833101][T11406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.867649][T11406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.895005][T11406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.920587][T11406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.941473][T11406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.964748][T11406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.992985][T11410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.027924][T11406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.049735][T11406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.065311][T11406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.080609][T11406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.215110][T11698] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.468446][ T7687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.490240][ T7687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.552228][T11410] veth0_vlan: entered promiscuous mode [ 210.580261][T11014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.588249][T11713] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1648'. [ 210.612529][T11014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.626951][T11410] veth1_vlan: entered promiscuous mode [ 210.713733][T11410] veth0_macvtap: entered promiscuous mode [ 210.748562][T11410] veth1_macvtap: entered promiscuous mode [ 210.821365][T11410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.836124][T11410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.852913][T11410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.866692][T11410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.884529][T11410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.909039][T11410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.931313][T11410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.966041][T11410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.977183][T11410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.997256][T11410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.071005][T11410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.093223][T11410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.102725][T11410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.112214][T11410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.240584][T11024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.257270][T11024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.321154][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.338980][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.710775][T11024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.173718][T11024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.527617][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.546368][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.556045][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.579125][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.608254][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.615800][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.042015][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.059205][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.074929][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.082827][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.101126][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.109294][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.621106][T11024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.673625][T11765] lo speed is unknown, defaulting to 1000 [ 214.695742][ T54] Bluetooth: hci0: command tx timeout [ 214.721855][T11774] lo speed is unknown, defaulting to 1000 [ 214.782971][T11024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.915128][T11799] syz.1.1686[11799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.915228][T11799] syz.1.1686[11799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.975162][T11799] syz.1.1686[11799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.089007][T11024] bridge_slave_1: left allmulticast mode [ 215.109755][T11024] bridge_slave_1: left promiscuous mode [ 215.116843][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.152968][T11024] bridge_slave_0: left allmulticast mode [ 215.167388][T11024] bridge_slave_0: left promiscuous mode [ 215.173897][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.175598][ T54] Bluetooth: hci3: command tx timeout [ 215.742149][T11024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.753441][T11024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.766208][T11024] bond0 (unregistering): Released all slaves [ 215.777850][T11799] pim6reg1: entered promiscuous mode [ 215.783900][T11799] pim6reg1: entered allmulticast mode [ 216.008330][T11774] chnl_net:caif_netlink_parms(): no params data found [ 216.282326][T11765] chnl_net:caif_netlink_parms(): no params data found [ 216.363549][T11024] hsr_slave_0: left promiscuous mode [ 216.370053][T11024] hsr_slave_1: left promiscuous mode [ 216.378001][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.385804][T11024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.425233][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.437134][T11024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.471766][T11024] veth1_macvtap: left promiscuous mode [ 216.478933][T11024] veth0_macvtap: left promiscuous mode [ 216.485210][T11024] veth1_vlan: left promiscuous mode [ 216.490806][T11024] veth0_vlan: left promiscuous mode [ 216.774378][ T54] Bluetooth: hci0: command tx timeout [ 216.980611][T11024] team0 (unregistering): Port device team_slave_1 removed [ 217.032937][T11024] team0 (unregistering): Port device team_slave_0 removed [ 217.254887][ T54] Bluetooth: hci3: command tx timeout [ 217.541905][T11846] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 217.569935][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.584062][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.592137][T11774] bridge_slave_0: entered allmulticast mode [ 217.599532][T11774] bridge_slave_0: entered promiscuous mode [ 217.658871][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.673829][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.683262][T11774] bridge_slave_1: entered allmulticast mode [ 217.690752][T11774] bridge_slave_1: entered promiscuous mode [ 217.886516][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.914889][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.929724][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.950404][T11765] bridge_slave_0: entered allmulticast mode [ 217.959038][T11765] bridge_slave_0: entered promiscuous mode [ 217.967887][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.975580][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.982815][T11765] bridge_slave_1: entered allmulticast mode [ 217.990144][T11765] bridge_slave_1: entered promiscuous mode [ 218.016975][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.045417][T11880] __nla_validate_parse: 4 callbacks suppressed [ 218.045436][T11880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1706'. [ 218.168686][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 218.244860][T11765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.255668][T11890] netlink: 734 bytes leftover after parsing attributes in process `syz.4.1709'. [ 218.267578][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1709'. [ 218.287276][T11774] team0: Port device team_slave_0 added [ 218.295853][T11774] team0: Port device team_slave_1 added [ 218.348600][T11765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.364792][T11898] netlink: 'syz.0.1712': attribute type 24 has an invalid length. [ 218.373158][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 218.417871][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.439047][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.468328][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.509876][T11904] pimreg: entered allmulticast mode [ 218.553989][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.561307][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.587631][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.624864][T11907] team0: Port device team_slave_0 removed [ 218.631154][T11907] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 218.658386][T11765] team0: Port device team_slave_0 added [ 218.715286][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 218.731936][T11024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.808267][T11774] hsr_slave_0: entered promiscuous mode [ 218.816098][T11774] hsr_slave_1: entered promiscuous mode [ 218.823411][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.839723][T11774] Cannot create hsr debugfs directory [ 218.850422][T11765] team0: Port device team_slave_1 added [ 218.856940][ T54] Bluetooth: hci0: command tx timeout [ 218.962074][T11024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.996222][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 219.038787][T11024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.094973][T11926] netlink: 351 bytes leftover after parsing attributes in process `syz.0.1720'. [ 219.143229][T11024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.165414][T11765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.180816][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.210891][T11765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.268897][T11926] syzkaller0: entered promiscuous mode [ 219.278699][T11926] syzkaller0: entered allmulticast mode [ 219.290240][T11942] netlink: 'syz.0.1720': attribute type 11 has an invalid length. [ 219.312957][T11942] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1720'. [ 219.324055][T11765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.331761][T11765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.364410][ T54] Bluetooth: hci3: command tx timeout [ 219.371548][T11765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.662094][T11961] ip6t_srh: unknown srh match flags 5294 [ 220.934423][ T54] Bluetooth: hci0: command tx timeout [ 221.415076][ T54] Bluetooth: hci3: command tx timeout [ 221.449537][T11961] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 221.513377][T11024] bridge_slave_1: left allmulticast mode [ 221.520940][T11024] bridge_slave_1: left promiscuous mode [ 221.530260][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.539074][T11024] bridge_slave_0: left allmulticast mode [ 221.545198][T11024] bridge_slave_0: left promiscuous mode [ 221.550914][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.875669][T11024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.890464][T11024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.901714][T11024] bond0 (unregistering): Released all slaves [ 221.932944][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 222.053610][T11765] hsr_slave_0: entered promiscuous mode [ 222.068821][T11765] hsr_slave_1: entered promiscuous mode [ 222.079512][T11765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.091703][T11765] Cannot create hsr debugfs directory [ 222.413373][T11024] hsr_slave_0: left promiscuous mode [ 222.420925][T11024] hsr_slave_1: left promiscuous mode [ 222.427705][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.437115][T11024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.445630][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.453789][T11024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.476485][T11024] veth1_macvtap: left promiscuous mode [ 222.482020][T11024] veth0_macvtap: left promiscuous mode [ 222.487998][T11024] veth1_vlan: left promiscuous mode [ 222.493267][T11024] veth0_vlan: left promiscuous mode [ 222.929527][T11024] team0 (unregistering): Port device team_slave_1 removed [ 222.979015][T11024] team0 (unregistering): Port device team_slave_0 removed [ 223.412037][T12004] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 223.452474][T12004] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 223.612758][T12013] ip6gretap1: entered allmulticast mode [ 223.646112][T12018] __nla_validate_parse: 1 callbacks suppressed [ 223.646130][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'. [ 223.672614][T12020] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 223.688664][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'. [ 223.837738][T11774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.856330][T11774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.887614][T11774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.899482][T11774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.022119][T12033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1753'. [ 224.184930][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.299514][T11765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.318949][T12043] IPVS: length: 60 != 8 [ 224.367768][T11765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.383253][T11765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.399312][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.434257][T11765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.458153][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.465444][T11024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.556714][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.563979][T11024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.709744][T12060] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 224.737930][T12060] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1761'. [ 224.771905][T12060] NCSI netlink: No device for ifindex 458760 [ 224.823131][T11765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.878035][T11765] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.913490][T12063] lo speed is unknown, defaulting to 1000 [ 224.940324][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.947602][T11024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.963432][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.970682][T11024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.162706][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.221607][T12076] syzkaller0: entered promiscuous mode [ 225.227645][T12076] syzkaller0: entered allmulticast mode [ 225.253770][ T11] syzkaller0: tun_net_xmit 48 [ 225.312292][T11774] veth0_vlan: entered promiscuous mode [ 225.327624][T12076] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 225.347214][T11774] veth1_vlan: entered promiscuous mode [ 225.371314][T12076] syzkaller0: tun_net_xmit 1280 [ 227.140130][T11765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.163609][T11774] veth0_macvtap: entered promiscuous mode [ 227.247017][T11774] veth1_macvtap: entered promiscuous mode [ 227.299331][T12094] netlink: 'syz.1.1767': attribute type 4 has an invalid length. [ 227.307913][T12094] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1767'. [ 227.382924][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.403502][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.433473][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.444885][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.456869][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.469208][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.481091][T12104] netlink: 'syz.0.1772': attribute type 21 has an invalid length. [ 227.489853][T12104] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1772'. [ 227.499997][T12104] netlink: 'syz.0.1772': attribute type 5 has an invalid length. [ 227.509440][T12104] netlink: 'syz.0.1772': attribute type 6 has an invalid length. [ 227.517362][T12104] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1772'. [ 227.526657][T12105] netlink: 'syz.0.1772': attribute type 21 has an invalid length. [ 227.535926][T12105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1772'. [ 227.547902][T12105] netlink: 'syz.0.1772': attribute type 5 has an invalid length. [ 227.558148][T12105] netlink: 'syz.0.1772': attribute type 6 has an invalid length. [ 227.575126][T12105] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1772'. [ 227.610092][T11774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.644228][T11774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.669945][T11774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.703479][T11774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.758123][T11765] veth0_vlan: entered promiscuous mode [ 227.787459][T11765] veth1_vlan: entered promiscuous mode [ 227.907657][T12130] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1775'. [ 228.022349][T11765] veth0_macvtap: entered promiscuous mode [ 228.045777][T11014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.066158][T11014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.087049][T12139] netlink: 'syz.4.1777': attribute type 3 has an invalid length. [ 228.104759][T11765] veth1_macvtap: entered promiscuous mode [ 228.148528][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.162438][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.172936][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.194361][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.204629][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.219780][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.236548][T11765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.255711][T11014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.263827][T11014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.337382][T11765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.364397][T11765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.391561][T11765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.408465][T11765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.433011][T11765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.447699][T11765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.475373][T11765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.637499][ T7687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.681123][ T7687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.813168][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.857842][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.867924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.008889][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.081005][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.159494][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.282799][ T2993] bridge_slave_1: left allmulticast mode [ 229.288901][ T2993] bridge_slave_1: left promiscuous mode [ 229.312361][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.327685][ T2993] bridge_slave_0: left allmulticast mode [ 229.333394][ T2993] bridge_slave_0: left promiscuous mode [ 229.346849][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.392593][T12160] No such timeout policy "syz0" [ 229.415040][ T8] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 60 sec [ 229.540121][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.556118][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.566463][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.584109][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.598654][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.617264][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.807371][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.825667][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.837954][ T2993] bond0 (unregistering): Released all slaves [ 229.857841][T12160] __nla_validate_parse: 5 callbacks suppressed [ 229.857862][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 229.892577][T12165] lo speed is unknown, defaulting to 1000 [ 230.064143][T12165] chnl_net:caif_netlink_parms(): no params data found [ 230.130845][ T2993] hsr_slave_0: left promiscuous mode [ 230.138819][ T2993] hsr_slave_1: left promiscuous mode [ 230.151443][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.164413][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.172377][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.180024][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.201103][ T2993] veth1_macvtap: left promiscuous mode [ 230.206873][ T2993] veth0_macvtap: left promiscuous mode [ 230.212403][ T2993] veth1_vlan: left promiscuous mode [ 230.218304][ T2993] veth0_vlan: left promiscuous mode [ 230.698071][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.708017][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.716758][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.735146][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.749678][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.758850][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.899797][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 230.947409][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 231.420936][T12183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1784'. [ 231.490692][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.514747][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.522015][T12165] bridge_slave_0: entered allmulticast mode [ 231.535457][T12165] bridge_slave_0: entered promiscuous mode [ 231.543571][T12187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.583816][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'. [ 231.613333][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.640670][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.651918][T12165] bridge_slave_1: entered allmulticast mode [ 231.658003][ T54] Bluetooth: hci0: command tx timeout [ 231.675945][T12165] bridge_slave_1: entered promiscuous mode [ 231.696824][T12184] lo speed is unknown, defaulting to 1000 [ 231.749122][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 231.822132][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.879367][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.978717][T12165] team0: Port device team_slave_0 added [ 231.991182][T12165] team0: Port device team_slave_1 added [ 232.065700][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.072788][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.123967][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.143230][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.152116][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.179994][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.257752][T12165] hsr_slave_0: entered promiscuous mode [ 232.270138][T12165] hsr_slave_1: entered promiscuous mode [ 232.277917][T12165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.285945][T12165] Cannot create hsr debugfs directory [ 232.296648][T12220] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1796'. [ 232.482855][ T2993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.620713][ T2993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.649768][T12184] chnl_net:caif_netlink_parms(): no params data found [ 232.718087][ T2993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.802396][T12252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1805'. [ 232.854705][ T54] Bluetooth: hci3: command tx timeout [ 232.868239][ T2993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.929668][T12260] netlink: 'syz.1.1807': attribute type 25 has an invalid length. [ 232.941907][T12260] netlink: 'syz.1.1807': attribute type 7 has an invalid length. [ 233.059045][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.075578][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.083402][T12184] bridge_slave_0: entered allmulticast mode [ 233.112644][T12184] bridge_slave_0: entered promiscuous mode [ 233.152417][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.160163][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.171087][T12184] bridge_slave_1: entered allmulticast mode [ 233.181677][T12184] bridge_slave_1: entered promiscuous mode [ 233.249188][ T2993] bridge_slave_1: left allmulticast mode [ 233.261351][ T2993] bridge_slave_1: left promiscuous mode [ 233.267374][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.280093][ T2993] bridge_slave_0: left allmulticast mode [ 233.286736][ T2993] bridge_slave_0: left promiscuous mode [ 233.292863][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.744870][ T54] Bluetooth: hci0: command tx timeout [ 233.812068][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.831699][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.842791][ T2993] bond0 (unregistering): Released all slaves [ 233.862290][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.875017][T12290] ipvlan1: entered promiscuous mode [ 233.922818][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.141370][T12184] team0: Port device team_slave_0 added [ 234.173299][T12184] team0: Port device team_slave_1 added [ 234.349732][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.364371][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.393589][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.445822][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.464008][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.490833][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.551742][ T2993] hsr_slave_0: left promiscuous mode [ 234.573726][ T2993] hsr_slave_1: left promiscuous mode [ 234.584288][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.593444][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.617652][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.632539][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.660504][ T2993] veth1_macvtap: left promiscuous mode [ 234.666667][ T2993] veth0_macvtap: left promiscuous mode [ 234.672488][ T2993] veth1_vlan: left promiscuous mode [ 234.678732][ T2993] veth0_vlan: left promiscuous mode [ 234.817499][T12341] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1823'. [ 234.937705][ T54] Bluetooth: hci3: command tx timeout [ 235.166218][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 235.216069][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 235.617266][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 235.768140][T12184] hsr_slave_0: entered promiscuous mode [ 235.775817][T12184] hsr_slave_1: entered promiscuous mode [ 235.781811][T12184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.789868][T12184] Cannot create hsr debugfs directory [ 235.795651][T12165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.814337][ T54] Bluetooth: hci0: command tx timeout [ 235.823167][T12165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.841802][T12165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.872904][T12165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.191577][T12165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.229987][T12165] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.243671][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.250848][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.265930][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.273049][T11024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.332560][T12165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.486014][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.496311][T12184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.512004][T12184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.524039][T12184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.553255][T12184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.594128][T12165] veth0_vlan: entered promiscuous mode [ 236.616994][T12165] veth1_vlan: entered promiscuous mode [ 236.679137][T12165] veth0_macvtap: entered promiscuous mode [ 236.699759][T12165] veth1_macvtap: entered promiscuous mode [ 236.745297][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.778627][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.798045][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.813245][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.832480][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.847909][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 236.871521][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.886972][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.902459][T12165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.925614][T12165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.939431][T12165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.948771][T12165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.014794][ T54] Bluetooth: hci3: command tx timeout [ 237.039199][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.098640][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.105837][T11024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.138724][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 237.154968][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.162190][T11024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.189896][T12390] bridge0: port 2(hsr0) entered blocking state [ 237.198589][T12390] bridge0: port 2(hsr0) entered disabled state [ 237.206633][T12390] hsr0: entered allmulticast mode [ 237.212475][T12390] hsr_slave_0: entered allmulticast mode [ 237.218949][T12390] hsr_slave_1: entered allmulticast mode [ 237.226039][T12390] hsr0: entered promiscuous mode [ 237.231924][T12390] bridge0: port 2(hsr0) entered blocking state [ 237.238237][T12390] bridge0: port 2(hsr0) entered forwarding state [ 237.297457][T11025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.319277][T11025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.386030][T11020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.409767][T11020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.423144][T12184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.467730][T12404] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 237.751767][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.811628][T12184] veth0_vlan: entered promiscuous mode [ 237.857717][T12184] veth1_vlan: entered promiscuous mode [ 237.909688][T12184] veth0_macvtap: entered promiscuous mode [ 237.935802][T12184] veth1_macvtap: entered promiscuous mode [ 237.981980][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.008959][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.019425][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.031433][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.041861][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.052996][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.068050][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.095447][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.119008][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.157990][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.179682][T12184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.193756][T12184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.214053][T12184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.226166][T12184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.369311][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.386123][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.418988][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.428410][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.479346][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1857'. [ 238.503658][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1857'. [ 238.639909][T12446] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.1858'. [ 238.650524][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1858'. [ 238.660952][T12446] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.1858'. [ 238.873523][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1862'. [ 238.982699][T12470] netlink: 'syz.0.1865': attribute type 39 has an invalid length. [ 238.998101][T12470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1865'. [ 239.223968][T11025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.613750][T11025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.708342][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.719627][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.729951][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.741372][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.749704][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.758146][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.788779][T12483] lo speed is unknown, defaulting to 1000 [ 239.869885][T12483] chnl_net:caif_netlink_parms(): no params data found [ 239.916993][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.924112][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.931866][T12483] bridge_slave_0: entered allmulticast mode [ 239.938690][T12483] bridge_slave_0: entered promiscuous mode [ 239.948033][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.955557][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.962787][T12483] bridge_slave_1: entered allmulticast mode [ 239.972768][T12483] bridge_slave_1: entered promiscuous mode [ 240.001504][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.013716][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.041046][T12483] team0: Port device team_slave_0 added [ 240.050557][T12483] team0: Port device team_slave_1 added [ 240.120072][T12498] xt_addrtype: ipv6 does not support BROADCAST matching [ 240.265642][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.276434][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.292352][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.320572][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.341472][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.351375][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.404067][T11025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.441655][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.453593][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.495141][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.510980][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.519226][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.553950][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.629196][T12506] lo speed is unknown, defaulting to 1000 [ 240.645798][T12483] hsr_slave_0: entered promiscuous mode [ 240.652505][T12483] hsr_slave_1: entered promiscuous mode [ 240.674646][T12483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.682304][T12483] Cannot create hsr debugfs directory [ 240.763252][T11025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.938356][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 240.968613][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 241.474026][T11025] bridge_slave_1: left allmulticast mode [ 241.482462][T12557] IPVS: set_ctl: invalid protocol: 60 172.20.20.31:20001 [ 241.487724][T11025] bridge_slave_1: left promiscuous mode [ 241.516066][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.543931][T11025] bridge_slave_0: left allmulticast mode [ 241.549918][T11025] bridge_slave_0: left promiscuous mode [ 241.566041][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.815361][ T54] Bluetooth: hci0: command tx timeout [ 241.970107][T11025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.981750][T11025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.997452][T11025] bond0 (unregistering): Released all slaves [ 242.020551][T12572] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 242.112070][T12506] chnl_net:caif_netlink_parms(): no params data found [ 242.392374][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.414662][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.421948][T12506] bridge_slave_0: entered allmulticast mode [ 242.454563][ T54] Bluetooth: hci3: command tx timeout [ 242.455811][T12506] bridge_slave_0: entered promiscuous mode [ 242.478688][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.486145][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.493471][T12506] bridge_slave_1: entered allmulticast mode [ 242.500770][T12506] bridge_slave_1: entered promiscuous mode [ 242.508453][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1888'. [ 242.551864][T12583] lo speed is unknown, defaulting to 1000 [ 242.591774][T11025] hsr_slave_0: left promiscuous mode [ 242.599129][T11025] hsr_slave_1: left promiscuous mode [ 242.605642][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.613612][T11025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.625764][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.633212][T11025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.645054][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 242.670013][T11025] veth1_macvtap: left promiscuous mode [ 242.676934][T11025] veth0_macvtap: left promiscuous mode [ 242.682473][T11025] veth1_vlan: left promiscuous mode [ 242.690525][T11025] veth0_vlan: left promiscuous mode [ 243.146473][T11025] team0 (unregistering): Port device team_slave_1 removed [ 243.190916][T11025] team0 (unregistering): Port device team_slave_0 removed [ 243.632574][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.673250][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.800010][T12506] team0: Port device team_slave_0 added [ 243.846943][T12506] team0: Port device team_slave_1 added [ 243.895039][ T54] Bluetooth: hci0: command tx timeout [ 243.952669][T12483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.962766][T12483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.973416][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.990103][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.024863][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.037762][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.049489][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.076811][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.104876][T12483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.172005][T12483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.213546][T12506] hsr_slave_0: entered promiscuous mode [ 244.221892][T12506] hsr_slave_1: entered promiscuous mode [ 244.228293][T12506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.236143][T12506] Cannot create hsr debugfs directory [ 244.398144][ T2993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.407323][T12628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.446929][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1904'. [ 244.457523][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1904'. [ 244.535105][ T54] Bluetooth: hci3: command tx timeout [ 244.596331][ T2993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.720236][ T2993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.752647][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.807726][ T2993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.838585][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.876090][T12483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.886839][T12483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.906286][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.913477][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.943823][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.951005][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.110019][ T2993] bridge_slave_1: left allmulticast mode [ 245.120631][ T2993] bridge_slave_1: left promiscuous mode [ 245.127302][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.141928][ T2993] bridge_slave_0: left allmulticast mode [ 245.148400][ T2993] bridge_slave_0: left promiscuous mode [ 245.154212][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.567989][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.621448][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.648182][ T2993] bond0 (unregistering): Released all slaves [ 245.789454][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.902545][T12669] xt_l2tp: v2 doesn't support IP mode [ 245.951060][T12483] veth0_vlan: entered promiscuous mode [ 245.985279][ T54] Bluetooth: hci0: command tx timeout [ 246.032915][T12483] veth1_vlan: entered promiscuous mode [ 246.075296][T12483] veth0_macvtap: entered promiscuous mode [ 246.087204][T12483] veth1_macvtap: entered promiscuous mode [ 246.163060][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 246.188134][T12676] bond2: entered promiscuous mode [ 246.202723][ T2993] hsr_slave_0: left promiscuous mode [ 246.209220][ T2993] hsr_slave_1: left promiscuous mode [ 246.219133][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.227298][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.239432][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.247339][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.267593][ T2993] veth1_macvtap: left promiscuous mode [ 246.273104][ T2993] veth0_macvtap: left promiscuous mode [ 246.278923][ T2993] veth1_vlan: left promiscuous mode [ 246.284349][ T2993] veth0_vlan: left promiscuous mode [ 246.350299][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 246.616869][ T54] Bluetooth: hci3: command tx timeout [ 246.767175][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 246.812512][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 247.240056][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.279944][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.304246][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.323970][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.347951][T12483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.362814][T12686] can: request_module (can-proto-0) failed. [ 247.368977][T12483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.403205][T12483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.412836][T12483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.424796][T12483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.438495][T12483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.552690][T12506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.597475][T12506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.647564][T12702] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 247.698652][T12506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.744711][T12506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.833062][T12707] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 247.891073][ T7687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.899667][ T7687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.008718][T12710] syzkaller0: entered promiscuous mode [ 248.014774][T12710] syzkaller0: entered allmulticast mode [ 248.040233][T12718] veth0: entered promiscuous mode [ 248.047710][T12718] veth0: entered allmulticast mode [ 248.054992][ T54] Bluetooth: hci0: command tx timeout [ 248.060809][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1928'. [ 248.070171][T12718] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 248.115327][ T7687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.136668][ T7687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.704610][ T54] Bluetooth: hci3: command tx timeout [ 249.770158][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.881157][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.980279][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.987465][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.047209][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.054399][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.248947][T12763] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 250.460609][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.575353][T12506] veth0_vlan: entered promiscuous mode [ 250.687920][T11020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.779740][ T54] Bluetooth: hci3: command tx timeout [ 250.833281][T11020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.868471][T12506] veth1_vlan: entered promiscuous mode [ 250.911202][T11020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.965321][T12506] veth0_macvtap: entered promiscuous mode [ 250.975334][T12506] veth1_macvtap: entered promiscuous mode [ 251.006224][T11020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.031492][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.054326][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.074560][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.094599][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.114257][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.125007][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.145627][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.166167][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.184630][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.205683][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.227542][T12506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.244427][T12506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.253162][T12506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.274289][T12506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.363260][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.374812][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.391902][T11020] bridge_slave_1: left allmulticast mode [ 251.397997][T11020] bridge_slave_1: left promiscuous mode [ 251.403673][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.412542][T11020] bridge_slave_0: left allmulticast mode [ 251.419445][T11020] bridge_slave_0: left promiscuous mode [ 251.425429][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.740297][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.751453][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.762399][T11020] bond0 (unregistering): Released all slaves [ 251.785735][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.795674][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.041325][T11020] hsr_slave_0: left promiscuous mode [ 252.047556][T11020] hsr_slave_1: left promiscuous mode [ 252.053440][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.061711][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.072055][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.079868][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.097957][T11020] veth1_macvtap: left promiscuous mode [ 252.103479][T11020] veth0_macvtap: left promiscuous mode [ 252.111192][T11020] veth1_vlan: left promiscuous mode [ 252.124603][T11020] veth0_vlan: left promiscuous mode [ 252.417401][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.428388][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.443418][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.473970][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.482657][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.491467][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.842647][T11020] team0 (unregistering): Port device team_slave_1 removed [ 252.892633][T11020] team0 (unregistering): Port device team_slave_0 removed [ 253.430006][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.459831][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.489496][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.503361][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.511551][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 253.521393][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.638883][T12796] lo speed is unknown, defaulting to 1000 [ 253.710348][T12799] lo speed is unknown, defaulting to 1000 [ 253.758904][T12804] netlink: 'syz.1.1944': attribute type 3 has an invalid length. [ 254.139091][T12796] chnl_net:caif_netlink_parms(): no params data found [ 254.293070][T11020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.406670][T12838] erspan0: entered promiscuous mode [ 254.413465][T12838] erspan0: left promiscuous mode [ 254.472711][T12799] chnl_net:caif_netlink_parms(): no params data found [ 254.522250][T11020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.535985][ T5851] Bluetooth: hci0: command tx timeout [ 254.570590][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 254.673851][T11020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.720030][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.727782][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.736002][T12796] bridge_slave_0: entered allmulticast mode [ 254.743699][T12796] bridge_slave_0: entered promiscuous mode [ 254.752824][T12852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.755940][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.770934][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.808911][T12796] bridge_slave_1: entered allmulticast mode [ 254.816477][T12796] bridge_slave_1: entered promiscuous mode [ 254.881680][T11020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.964107][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.979958][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.129611][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.137243][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.146080][T12799] bridge_slave_0: entered allmulticast mode [ 255.155044][T12799] bridge_slave_0: entered promiscuous mode [ 255.169451][T12796] team0: Port device team_slave_0 added [ 255.194645][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.201888][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.221066][T12799] bridge_slave_1: entered allmulticast mode [ 255.235992][T12799] bridge_slave_1: entered promiscuous mode [ 255.251526][T12796] team0: Port device team_slave_1 added [ 255.333011][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.356050][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.367951][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.375315][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.403087][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.423029][T11020] bridge_slave_1: left allmulticast mode [ 255.430709][T11020] bridge_slave_1: left promiscuous mode [ 255.441851][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.452322][T11020] bridge_slave_0: left allmulticast mode [ 255.458839][T11020] bridge_slave_0: left promiscuous mode [ 255.465111][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.581676][ T5851] Bluetooth: hci3: command tx timeout [ 255.915474][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.928261][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.941756][T11020] bond0 (unregistering): Released all slaves [ 255.975293][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.982641][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.011264][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.050687][T12877] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1960'. [ 256.069437][T12883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1962'. [ 256.115819][T12799] team0: Port device team_slave_0 added [ 256.241060][T12799] team0: Port device team_slave_1 added [ 256.298879][T12894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1966'. [ 256.312485][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.330355][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.366933][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.463282][T12796] hsr_slave_0: entered promiscuous mode [ 256.479403][T12796] hsr_slave_1: entered promiscuous mode [ 256.487076][T12796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.494895][T12796] Cannot create hsr debugfs directory [ 256.500982][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.508432][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.537343][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.613379][T12905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1971'. [ 256.634630][ T5851] Bluetooth: hci0: command tx timeout [ 256.649109][T12903] 8021q: VLANs not supported on bridge0 [ 256.695488][T11020] hsr_slave_0: left promiscuous mode [ 256.708529][T11020] hsr_slave_1: left promiscuous mode [ 256.716656][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.724873][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.732950][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.741493][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.774528][T11020] veth1_macvtap: left promiscuous mode [ 256.785066][T11020] veth0_macvtap: left promiscuous mode [ 256.790902][T11020] veth1_vlan: left promiscuous mode [ 256.797074][T11020] veth0_vlan: left promiscuous mode [ 257.309765][T11020] team0 (unregistering): Port device team_slave_1 removed [ 257.352142][T11020] team0 (unregistering): Port device team_slave_0 removed [ 257.667456][ T5851] Bluetooth: hci3: command tx timeout [ 257.939018][T12799] hsr_slave_0: entered promiscuous mode [ 257.947729][T12799] hsr_slave_1: entered promiscuous mode [ 257.953950][T12799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.962291][T12799] Cannot create hsr debugfs directory [ 257.971878][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1977'. [ 258.018500][T12922] bond0: (slave bridge0): Releasing backup interface [ 258.173579][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 258.273264][T12936] netlink: 'syz.1.1981': attribute type 25 has an invalid length. [ 258.288315][T12936] netlink: 'syz.1.1981': attribute type 7 has an invalid length. [ 258.309723][T12944] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 258.466488][T12951] pim6reg1: entered promiscuous mode [ 258.474642][T12951] pim6reg1: entered allmulticast mode [ 258.534266][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 258.545060][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 258.664713][T12961] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1988'. [ 258.685455][T12961] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 258.697958][ T5851] Bluetooth: hci0: command tx timeout [ 258.778117][T12796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.824028][T12796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.836337][T12796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.847720][T12796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.957549][T12969] geneve3: entered promiscuous mode [ 258.962781][T12969] geneve3: entered allmulticast mode [ 258.992922][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.019348][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.034056][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.041316][T11020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.101046][T12796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.111783][T12796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.132827][T12975] [ 259.135191][T12975] ============================================ [ 259.141349][T12975] WARNING: possible recursive locking detected [ 259.147496][T12975] 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 Not tainted [ 259.154584][T12975] -------------------------------------------- [ 259.160723][T12975] syz.1.1994/12975 is trying to acquire lock: [ 259.166769][T12975] ffff88804a321a00 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 259.175633][T12975] [ 259.175633][T12975] but task is already holding lock: [ 259.182980][T12975] ffff88804a321a00 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 259.191828][T12975] [ 259.191828][T12975] other info that might help us debug this: [ 259.199881][T12975] Possible unsafe locking scenario: [ 259.199881][T12975] [ 259.207321][T12975] CPU0 [ 259.210583][T12975] ---- [ 259.213843][T12975] lock(&trie->lock); [ 259.217906][T12975] lock(&trie->lock); [ 259.221953][T12975] [ 259.221953][T12975] *** DEADLOCK *** [ 259.221953][T12975] [ 259.230076][T12975] May be due to missing lock nesting notation [ 259.230076][T12975] [ 259.238458][T12975] 3 locks held by syz.1.1994/12975: [ 259.243629][T12975] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 259.253530][T12975] #1: ffff88804a321a00 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 259.262856][T12975] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 259.272275][T12975] [ 259.272275][T12975] stack backtrace: [ 259.278145][T12975] CPU: 0 UID: 0 PID: 12975 Comm: syz.1.1994 Not tainted 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 [ 259.288897][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.298944][T12975] Call Trace: [ 259.302208][T12975] [ 259.305143][T12975] dump_stack_lvl+0x241/0x360 [ 259.309813][T12975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.315029][T12975] ? __pfx__printk+0x10/0x10 [ 259.319643][T12975] ? lockdep_unlock+0x16a/0x300 [ 259.324516][T12975] print_deadlock_bug+0x483/0x620 [ 259.329559][T12975] validate_chain+0x15e2/0x5920 [ 259.334522][T12975] ? __pfx_validate_chain+0x10/0x10 [ 259.339817][T12975] ? __pfx_validate_chain+0x10/0x10 [ 259.345013][T12975] ? __pfx_validate_chain+0x10/0x10 [ 259.350224][T12975] ? 0xffffffffa000095c [ 259.354470][T12975] ? 0xffffffffa000095c [ 259.358622][T12975] ? is_bpf_text_address+0x285/0x2a0 [ 259.363932][T12975] ? is_bpf_text_address+0x26/0x2a0 [ 259.369223][T12975] ? __lock_acquire+0x1384/0x2050 [ 259.374258][T12975] ? __pfx_validate_chain+0x10/0x10 [ 259.379442][T12975] ? mark_lock+0x9a/0x360 [ 259.383799][T12975] __lock_acquire+0x1384/0x2050 [ 259.388761][T12975] lock_acquire+0x1ed/0x550 [ 259.393289][T12975] ? trie_delete_elem+0x96/0x6a0 [ 259.398224][T12975] ? __pfx_lock_acquire+0x10/0x10 [ 259.403254][T12975] ? __lock_acquire+0x1384/0x2050 [ 259.408358][T12975] _raw_spin_lock_irqsave+0xd5/0x120 [ 259.413650][T12975] ? trie_delete_elem+0x96/0x6a0 [ 259.418594][T12975] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 259.424473][T12975] ? __pfx_lock_acquire+0x10/0x10 [ 259.429677][T12975] trie_delete_elem+0x96/0x6a0 [ 259.434440][T12975] ? __pfx___cant_migrate+0x10/0x10 [ 259.439640][T12975] ? bpf_trace_run4+0x244/0x590 [ 259.444503][T12975] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 259.449954][T12975] bpf_trace_run4+0x334/0x590 [ 259.454634][T12975] ? __pfx_lock_release+0x10/0x10 [ 259.459845][T12975] ? __pfx_bpf_trace_run4+0x10/0x10 [ 259.465048][T12975] ? percpu_ref_get_many+0x19/0x140 [ 259.470408][T12975] __traceiter_mm_page_alloc+0x3a/0x60 [ 259.475853][T12975] __alloc_pages_noprof+0x6dc/0x710 [ 259.481060][T12975] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 259.486776][T12975] ? bpf_map_get_memcg+0x4e/0x5c0 [ 259.491789][T12975] ? do_raw_spin_lock+0x14f/0x370 [ 259.496797][T12975] ? __pfx_lock_release+0x10/0x10 [ 259.501815][T12975] ___kmalloc_large_node+0x8b/0x1d0 [ 259.507011][T12975] __kmalloc_large_node_noprof+0x1a/0x80 [ 259.512635][T12975] __kmalloc_node_noprof+0x2d2/0x440 [ 259.517900][T12975] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 259.523172][T12975] bpf_map_kmalloc_node+0xd3/0x1c0 [ 259.528266][T12975] trie_update_elem+0x1cd/0xc00 [ 259.533099][T12975] ? __pfx___might_resched+0x10/0x10 [ 259.538372][T12975] bpf_map_update_value+0x4d3/0x540 [ 259.543584][T12975] map_update_elem+0x51a/0x6f0 [ 259.548342][T12975] __sys_bpf+0x76f/0x810 [ 259.552583][T12975] ? __pfx___sys_bpf+0x10/0x10 [ 259.557335][T12975] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.563314][T12975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.569626][T12975] ? do_syscall_64+0x100/0x230 [ 259.574373][T12975] __x64_sys_bpf+0x7c/0x90 [ 259.578772][T12975] do_syscall_64+0xf3/0x230 [ 259.583252][T12975] ? clear_bhb_loop+0x35/0x90 [ 259.587927][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.593816][T12975] RIP: 0033:0x7fa515b7e719 [ 259.598223][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.617896][T12975] RSP: 002b:00007fa516922038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.626309][T12975] RAX: ffffffffffffffda RBX: 00007fa515d35f80 RCX: 00007fa515b7e719 [ 259.634275][T12975] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 259.642225][T12975] RBP: 00007fa515bf139e R08: 0000000000000000 R09: 0000000000000000 [ 259.650172][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.658120][T12975] R13: 0000000000000000 R14: 00007fa515d35f80 R15: 00007ffdf25a73b8 [ 259.666077][T12975]