last executing test programs: 1m51.497969357s ago: executing program 2 (id=1323): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket(0xf, 0x3, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xc, 0x5, 0xfce, 0x800, 0xffffffffffffffff, 0x4, '\x00', r2, r5, 0x2, 0x3, 0x2, 0x9, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 1m51.316198899s ago: executing program 2 (id=1326): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xc, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f00000003c0)={@val={0x4}, @void, @eth={@broadcast, @local, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b79a56", 0x44, 0x29, 0x0, @local, @mcast2={0xff, 0x3}, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}}, 0x82) read$alg(0xffffffffffffffff, &(0x7f00000003c0)=""/98, 0x4c) socket$inet6(0xa, 0x2, 0x3) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) bind$netrom(r8, 0x0, 0x0) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x6, [0x10001, 0xfffff5b5], 0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000003300)="ac", 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe5a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x10001) write(r2, 0x0, 0x0) 1m46.677295408s ago: executing program 2 (id=1353): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="87000000000000006111480000000000850000008b00000095000000000000008911a497f879aa69cd74ff97dd8314ae55f5316d4591fc84fed9cd082ece7b472d10c335c3b19359e9e45e90c1e7da578cd06f5c3b58eac3324efd57cc4d4da91249da7cf61538b51abf570b061000000000000000e5e96208815d2cf72014f20df3e20a9d0cf0bc9ff55fdf30b03aecd504b038"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000180)=0x1b8045fd) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4003) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000202020005000300000000000900010073797a3000000000050004"], 0x30}, 0x1, 0x40030000000000, 0x0, 0x44880}, 0x4008000) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 1m46.516998304s ago: executing program 2 (id=1357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) (async) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESHEX=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESHEX=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRES64], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x40030000000000}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7) sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@iv={0x100, 0x117, 0x2, 0xe8, "1f57765904e8b2f590e3d58e8ea0f237c0f41d976bf1edba727e690da4959bf17ceaa262b8bb045e31244adffa00caa913d5b550b47272b8305d0757f5101c0306f40df856e8f27a937c42ea610762dc5be401b0807a4cb9928cd7873c8095b1f6348f1b1c8c2b07047cd8464a1d648402378db4b1ddfef4938d76b7af67d559b05dd1982ee5c3ba152f53f0260542096b9d3269099fd30fc668cddfbe9b13975dd91ba8553869a69f3504f0c2d8464d72797fe9c265da10e491fdad59185fbb4253c296dcccb850d09bd74eb9dc5a4a65707b44f35f63326fd2df2fdc006dccee932f8687abf08e"}, @assoc={0x18, 0x117, 0x4, 0x7f}], 0x118, 0x810}, 0x20044000) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25020004d93ada1663186c8bb28df2ed0000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25020004d93ada1663186c8bb28df2ed0000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7e879000) socket$xdp(0x2c, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="f200000095", @ANYRES8=r2], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r10, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x50) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x200, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000780)=0x78) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10000, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3, 0x4e23, 0x0, 0x2, 0xa0, 0x40, 0x4}, {0x5f2, 0xb3, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x0, 0x3}}, [@etimer_thresh={0x8}]}, 0xc0}}, 0x0) 1m44.109686525s ago: executing program 2 (id=1369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4008094) 1m43.824637996s ago: executing program 2 (id=1374): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000c06010800000000000000000700000405000100070000000500010007000000050001000700000005000100070000000900020073797a30000017ddebbe339dcf6f00008586e936b0591c5a702bceb10fb7f3d1d75d5ea762f0d460"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x50) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) (async) r9 = socket$kcm(0x10, 0x3, 0x10) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ead248b804184a65a99154ae495d424d5c6b4c4ea85f91862962085ac77543632547f5065cb832cdbe2fac5b783f385053c5e1bac4b7bfc6d7c1cfb228bcb04482ae117acddca354d3defc9d25e32d14cc68a7a52c0b30ea4f4e38816b7aceeed6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x10213}}], 0x20}, 0x0) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r11, &(0x7f0000000080)=[{&(0x7f00000001c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="bc5af9f348806291f2ee08ce69691742b07a787b1c138606c7d544dbff28acd3701ecd7858d26e49e0ef99e7cdac61e86c72d95e6f1a482eb6ea1e63e1a7e990ac9055b9d6135c8fbac1e2defc29bd0d33faddf03cba9c65224f93bfc88c0c4287ad992432b64e3effe8abc325401a8cd710a52046e2", 0x76}], 0x1, &(0x7f00000c3000)=ANY=[@ANYBLOB="2000000500c57b006b4a000002000000000041021c2bd7459500", @ANYRES32=0x0], 0x20, 0x84}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711297000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 1m28.388316326s ago: executing program 32 (id=1374): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000c06010800000000000000000700000405000100070000000500010007000000050001000700000005000100070000000900020073797a30000017ddebbe339dcf6f00008586e936b0591c5a702bceb10fb7f3d1d75d5ea762f0d460"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x50) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) (async) r9 = socket$kcm(0x10, 0x3, 0x10) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ead248b804184a65a99154ae495d424d5c6b4c4ea85f91862962085ac77543632547f5065cb832cdbe2fac5b783f385053c5e1bac4b7bfc6d7c1cfb228bcb04482ae117acddca354d3defc9d25e32d14cc68a7a52c0b30ea4f4e38816b7aceeed6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b94f01845288200eb141fb220cf", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x10213}}], 0x20}, 0x0) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r11, &(0x7f0000000080)=[{&(0x7f00000001c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="bc5af9f348806291f2ee08ce69691742b07a787b1c138606c7d544dbff28acd3701ecd7858d26e49e0ef99e7cdac61e86c72d95e6f1a482eb6ea1e63e1a7e990ac9055b9d6135c8fbac1e2defc29bd0d33faddf03cba9c65224f93bfc88c0c4287ad992432b64e3effe8abc325401a8cd710a52046e2", 0x76}], 0x1, &(0x7f00000c3000)=ANY=[@ANYBLOB="2000000500c57b006b4a000002000000000041021c2bd7459500", @ANYRES32=0x0], 0x20, 0x84}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711297000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 1m3.60604171s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 52.76352727s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 42.970747338s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 31.69183203s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 18.959520974s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 5.895853768s ago: executing program 0 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000003a9580000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001831000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000697520e06000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb628a58abfacb2b8}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001"], 0x38}}, 0x0) 2.22897574s ago: executing program 4 (id=2100): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207a1af8ff00000000bfa100000100000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000340)=0x4, 0x4) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c00", @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x9}], 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800"], 0x10}}], 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a190030006500000f119078ac1414bbac1414bb07130d640101010a0101007f000001ffffffff004e214e240008907831dd0faf3f829f9e0f3f821a2bb94072333ffc0678ed315a639ff684c17362c843093a595beae19611a3f0c87e8d69234c057a247c8e5908a6af7d4ce8a081a6b55e1ffe8370383f19e92347290e61fb2bae99c364d26829a535e2a3df03b44a4a2b4918b064"], 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073012f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000001c0)=0x8) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000040)) 2.053310365s ago: executing program 3 (id=2102): bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async, rerun: 32) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f0000006100), 0x49f, 0x0, 0x0) 1.96809092s ago: executing program 1 (id=2103): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000180)="ca0077d87e1d8bbedb87aee2d6269b9af945b05970", 0x15) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 1.876438723s ago: executing program 3 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfd}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa6b8, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$inet6(r4, 0x0, &(0x7f0000000400), 0x80800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000600)=0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000640)={'hsr0\x00', 0x4000}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@const={0x4, 0x0, 0x0, 0xa, 0x1}, @fwd={0x2}, @enum64={0xb, 0x7, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x5, 0x8001}, {0xb, 0x7, 0x4000}, {0x10, 0x256a, 0x8}, {0x8, 0x100, 0x5}, {0xd}, {0xb, 0x2, 0xd}, {0x7, 0x10001, 0x7ff}]}, @const={0xa, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f0000000840)=""/195, 0xa1, 0xc3, 0x1, 0x8, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x2, '\x00', r9, r10, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000a80)={'erspan0\x00', r9, 0x20, 0x8000, 0x2, 0x2, {{0x48, 0x4, 0x1, 0x3, 0x120, 0x67, 0x0, 0x7, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, {[@timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x9, 0xbe, 0x5]}, @timestamp={0x44, 0x2c, 0x73, 0x0, 0x9, [0xc9, 0x8, 0x3, 0xd9c6feb, 0x5, 0x5, 0x7, 0xffff, 0x6, 0x6]}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x2, 0xd, "8c0189302fec88777b5697"}, {0x0, 0x10, "2856ab544c7daf0c3dc2ea83cd21"}, {0x0, 0xc, "9d3787e19ab81d6ad842"}, {0x2, 0x6, "05b4874c"}, {0x2, 0x8, "90b4bfbaf72b"}, {0x7, 0x8, "6ae681c63733"}, {0x7, 0xd, "b18b328f3add31b013acde"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xe0, 0x0, 0x9, [0x3, 0xf8, 0x4, 0x403, 0x2844, 0xfffeffff, 0x953, 0x8]}, @noop, @timestamp={0x44, 0x18, 0x2c, 0x0, 0x1, [0x9, 0x3, 0xf, 0x3, 0x1]}, @ssrr={0x89, 0xf, 0x30, [@rand_addr=0x64010100, @multicast1, @empty]}, @rr={0x7, 0x7, 0x85, [@remote]}, @timestamp_addr={0x44, 0x24, 0xc6, 0x1, 0x4, [{@multicast1, 0x5}, {@remote}, {@remote, 0x2}, {@empty, 0x8}]}]}}}}}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r13, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r14, 0x206, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000d40)={r7, 0xba47, 0x30}, 0xc) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6c8}, @NL80211_ATTR_SSID={0x14, 0x34, @random="91f17b5aef5fc454dbf43f6ad376892c"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000044) 1.69588875s ago: executing program 1 (id=2106): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000003ec0)={&(0x7f0000000940)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140005000000000029000000340000007fe94323c6f4482d894c47e58b76809b5d9b1ef2b352f82f9fda9cf5a743b8165c4772e78e591a8054c77ccca6c9787f839b6e5c2d6a730694bb992957eb57a33b1c4190af83b113067f7bb1e0c8dd87612a6db3f83365926f0307449b78c946149d49f644f5ce946bab02ee1282c10732da223f3c4fbd5f75476bda7d9e1de2aa4defdc6b23c1930a4929c33d0fce8bcb673cca83619f90099176413746cd395786211f0e60ae42dc79d233a246ac121f0af96e78f166b220bdb34551f8e1b12f04734a9d4986dc92f3558905"], 0x18}, 0x8810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x3, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000bc0)={0x250, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x537}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x67464f10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf42}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10001}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a30347371f3fb3fd58f805086bd27a09ebb71762c7ea"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff0b1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf5}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x280000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe80e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40090}, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xb, 0x0, &(0x7f0000000100)) socket$vsock_stream(0x28, 0x1, 0x0) 1.632123813s ago: executing program 5 (id=2107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="18000000010005", 0x7) (async) write(r2, &(0x7f0000000040)="18000000010005", 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f009bc9eb0a426be1817169", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x47, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) close(r4) (async) close(r4) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) (async) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.372933145s ago: executing program 3 (id=2108): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004094) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x68}, 0x480267a0}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000956088fe00001470ddd642a3762f72a797"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r6 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, 0x0) 1.231098368s ago: executing program 4 (id=2109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000a00)={0x0, 0x0, "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", "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"}) (rerun: 32) socketpair(0x2b, 0x6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x15) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x80, 0x0, 0x7, 0x1ff, {{0x8, 0x4, 0x1, 0x37, 0x20, 0x68, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100, {[@timestamp={0x44, 0x8, 0x2b, 0x0, 0x2, [0x9]}, @end, @noop]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', r8, r7, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcff3230ffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001a00)={r3, 0xc}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r11, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x784}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x40000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r5) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x5c, 0x10, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x16, 0x0, 0x0, 0x6}, {0x0, 0x1c, 0x0, 0x0, 0x52}, {0x0, 0x18, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x1b, 0x0, 0x0, 0x800}]}}, @AF_MPLS, @AF_MPLS]}, @IFLA_IFALIAS={0xffffff5f, 0x14, 'vcan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}]}]}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r14, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) 1.123778279s ago: executing program 5 (id=2110): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 936.928617ms ago: executing program 3 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x10, 0x1, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x2, 0x0, 0xa, 0xc00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0xa3b0769e23657117) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r2, @ANYRES32=r0], 0x44}}, 0x0) 883.995071ms ago: executing program 5 (id=2112): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x9, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 813.364027ms ago: executing program 5 (id=2113): pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="a39a6a4201406790c1478cbeff6ff74495bb9213736d2431803af473b36266cd33189d0cfccce37cbf0b15ed2e949a063df075f84689e71946413194173460dca0ab066bd93237508789ad76b7ab14da45ee732b48c74839fc8c882f38", 0x5d}], 0x1, 0x401, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) socket$inet(0x2, 0x6, 0xc) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @local}, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xff}) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r1, 0x0, 0xf, &(0x7f0000000200)='blkio.bfq.time\x00'}, 0x30) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x16, @private=0xa010101, 0x4e24, 0x3, 'nq\x00', 0x3e, 0xa11, 0x2e}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x38, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x7, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x3, 0x3, 0x1, 0x5}, {0x1, 0x5, 0xe, 0x9}, {0x3, 0x3, 0x4, 0x6}, {0x5, 0x2, 0x3, 0x5}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x1, 0xa, 0x1}, {0x2, 0x3, 0xe, 0x2}], 0x10, 0x307, @void, @value}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000540)={0x0, 0x7fff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={r5, 0x3}, 0x8) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000640)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f00000006c0)={0x1, 0x40, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r1}, 0x8) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000740)={@local, @remote, 0x3c, "a2f6677267f4d2d2a028e0ef39a45fcfa32975e7defab8337052f99d9015f47a", 0x0, 0xf, 0x6, 0x7}, 0x3c) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000780)={0x10, 0x2, 0x51cfeabb, 0x0, 0x80000001, 0x8, 0x200, 0x1}, &(0x7f00000007c0)={0x1, 0x7, 0x8, 0x6, 0x2, 0x400, 0x7, 0x8000000000000001}, &(0x7f0000000800)={0x8000000000000001, 0x875d, 0x7, 0x100000001, 0x7, 0x6, 0x9, 0x9}, &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000009c0)={0x4, 0x48, '\x00', 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000a00)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0xb, 0xff, "94be9b5c6aeb2579766338d834e6f576c5b715271e3943d789f0d6b23f72626f8cae6851e80d7be7cfc0efd14e82ddb16b683dd084ca09370966217127f985", 0x23}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a80)="b33319574bd0b5bd0ca839376d5a8e6259f52a54a00470", 0x17}, {&(0x7f0000000ac0)="ff36a5fb95c9a0676ec8f16c667ebb27dff39b5506207146bf1471f87931e7aca77eafeddbec45e60393cb1d0a8ffa1ec46857a10a09b1f20d25de13d2924b4950b53ffe1644497763ac6cd2857c099b0e86f7484668a0b0e776a78ce59733c40c82e7923bbd3b70eba197593c390d75a39e98e9", 0x74}], 0x2, &(0x7f0000000b80)=[{0xf0, 0x108, 0x6, "8cda70dc04bb6f757df98ceeb249ecc60974b9cfa687a91ca2e76d685c2aa308ca0ac8d4e27b425dcaaae2816d3c011a4a5e2fdb7a5b3f238e27311d1ad0308bd1c802d9275f7934865a1c0a48507fe3dca2928ff92e721655cb37e1faf9b2e832c29991c4219716303f1891bf485a33cb26dad3c30ae5281d86ef5c52f4fefd6dcf768c65a5ea896b0ee31cee634550a798d7eae4bc7d467db478454ea146a41e087de1c9061d0a38148aaabcbd6f73da468591f780323da28286938fe09e0a3c990d8dcabe5fc663c21589a459b6a76fdcb4a44ea9e7ac9571b5a9a7"}, {0x10, 0x113, 0x4a}, {0x30, 0x88, 0xf8, "e4e763beb3c76c5692463c55dcd4c202a85974e017a57abd3453"}, {0xa0, 0x110, 0x9, "0142c2d42665853e3d56a561f5e83851bb051905d19bbea77c11087c21922a52fe4604177da7d5ea8d1122cfd0d35fcd445903b0e83fab9767e633268312d1a044c4be76d17f0551c725a990b84bc1ec95e59c692583cf5e2a48a51dd3b62cd5cb9b837de4c2d19704fe0fb9b881abe033ae0d9596cc88ed4381b6fec7147737d45fcc2a694b15109669"}, {0x20, 0x104, 0x0, "58d8500a3f79a4da4e2168a9d0d05946"}], 0x1f0}, 0x8044) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000dc0)=0x19, 0x4) socket(0x3, 0x800, 0x2) shutdown(r8, 0x1) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x3fa, 0x400, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000f40)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0xe78f, &(0x7f0000000f00)='sit0\x00', 0x6, 0x6, 0x7ff}) 743.152099ms ago: executing program 4 (id=2114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 692.059122ms ago: executing program 3 (id=2115): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000380)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x31, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000005001606bf0900000000000045090100000003709500000000000000bf91000000008500000000010000b7000000000000009500"/89], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1002, &(0x7f0000002e40)=""/4098, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 614.229622ms ago: executing program 1 (id=2116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001480)=@bridge_newvlan={0x30, 0x70, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x3}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) (async) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="08001efbb07d0000", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000ffff320bddbc4bbe8f8a443b10ffff0012c7a4acf00a21128713f0ba4f1d4f4d330bf6cb2f3a577fc337cebcde3c24b53c6a08c0dba38b4d7f7a5df485b7eb28857c5ac3ad50805160129d6327be289faeb656112e63c73ca33a632a373d2c99749cd7645705b141f197d40fa9d3c21171e6f55e97c79032ef521df673582c334fce8935fd20d05e7a5a89e3b3"], 0x48) 581.481502ms ago: executing program 4 (id=2117): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) pipe(0x0) (rerun: 64) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000ee0000000000000000b4432b15e706dffc8b00000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="100000002c000100fcff140001000000"], 0x10}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_lru_insertion\x00', r6}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000400), &(0x7f0000000000), 0x2}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) 495.9282ms ago: executing program 3 (id=2118): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0xa, 0x200100) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x23cafa3) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24040891) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0xffff, @private}, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000018000100000000000000000002140000ff000006001deb2f173aceef77e9e3f74f86b6a598000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 487.547342ms ago: executing program 5 (id=2119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r4, 0x0) shutdown(r4, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="2f0000000017000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, 0xffffffffffffffff, 0x2f, 0x2000, 0x4, @value=r6}, 0x20) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async) bind$tipc(r9, 0x0, 0x0) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x841, 0x2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) (async) getsockopt$inet6_tcp_buf(r12, 0x6, 0xb, 0x0, &(0x7f0000000300)) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1, 0x3}, 0x10) 358.333497ms ago: executing program 1 (id=2120): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x400000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x400000, 0x4) (async) 179.814067ms ago: executing program 5 (id=2121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x40, 0x8, 0x7, {{0x20, 0x4, 0x1, 0x35, 0x80, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0x1f, 0x23, [@private=0xa010100, @multicast2, @broadcast, @broadcast, @loopback, @rand_addr=0x64010100, @empty]}, @cipso={0x86, 0xf, 0x3, [{0x2, 0x5, "83066c"}, {0x4, 0x4, 'nj'}]}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x6, [{@local, 0x8}, {@broadcast, 0x1}]}, @end, @rr={0x7, 0x7, 0x41, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x13, 0x6d, [@rand_addr=0x64010102, @multicast2, @broadcast, @remote]}, @rr={0x7, 0xb, 0xc0, [@local, @empty]}, @noop]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000180)=0x84) recvfrom(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x40000020, &(0x7f00000011c0)=@un=@file={0x1, './file0\x00'}, 0x80) bind$bt_rfcomm(r2, &(0x7f0000001240)={0x1f, @none, 0xb}, 0xa) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000001280)={0x0, {{0xa, 0x4e21, 0xfffeffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}}, 0x88) r4 = accept$packet(r3, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001380)=0x14) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000013c0)={0x0, "03319fb8a457be777fb644ffff6b620e"}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000023c0)={r6, "21643537bd63a4fb7e40cd679638aa9b"}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000033c0)={@local, 0x3f, r5}) recvmmsg(r3, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003400)=""/176, 0xb0}, {&(0x7f00000034c0)=""/65, 0x41}], 0x2, &(0x7f0000003580)=""/144, 0x90}, 0x5}, {{&(0x7f0000003640)=@ax25={{0x3, @null}, [@rose, @remote, @null, @rose, @null, @rose, @bcast, @null]}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000036c0)=""/76, 0x4c}, {&(0x7f0000003740)=""/167, 0xa7}, {&(0x7f0000003800)=""/229, 0xe5}, {&(0x7f0000003900)=""/160, 0xa0}, {&(0x7f00000039c0)=""/26, 0x1a}, {&(0x7f0000003a00)=""/190, 0xbe}], 0x6, &(0x7f0000003b40)=""/2, 0x2}, 0x3ff}, {{&(0x7f0000003b80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003c00)=""/24, 0x18}], 0x1, &(0x7f0000003c80)=""/4096, 0x1000}, 0x1}], 0x3, 0x10022, &(0x7f0000004d40)={0x77359400}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000004d80), r8) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000004dc0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004e00)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xf, 0x4e24, 0xff, 0x2, 0x80, 0x0, 0x2b, 0x0, r9}, {0xd, 0x8, 0x3199, 0x4, 0xc, 0x8000000000000001, 0x0, 0x8}, {0x7ff, 0x8, 0x2, 0x5}, 0x4, 0x6e6bb8, 0xc84eb34e48bf8148, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x32}, 0x8, @in6=@empty, 0x0, 0x2, 0x0, 0x2, 0x3d, 0x0, 0x6}}, 0xe8) recvmmsg(r0, &(0x7f0000008480)=[{{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/112, 0x70}, {&(0x7f0000005f80)=""/92, 0x5c}, {&(0x7f0000006000)=""/221, 0xdd}, {&(0x7f0000006100)=""/221, 0xdd}, {&(0x7f0000006200)=""/202, 0xca}, {&(0x7f0000006300)=""/148, 0x94}, {&(0x7f00000063c0)=""/74, 0x4a}, {&(0x7f0000006440)=""/27, 0x1b}], 0x9, &(0x7f0000006540)=""/246, 0xf6}, 0x8}, {{&(0x7f0000006640)=@vsock, 0x80, &(0x7f0000007880)=[{&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/133, 0x85}, {&(0x7f0000007780)=""/108, 0x6c}, {&(0x7f0000007800)=""/123, 0x7b}], 0x4}, 0x8}, {{&(0x7f00000078c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000007940), 0x0, &(0x7f0000007980)=""/31, 0x1f}, 0x9}, {{&(0x7f00000079c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000007b40)=[{&(0x7f0000007a40)=""/67, 0x43}, {&(0x7f0000007ac0)=""/55, 0x37}, {&(0x7f0000007b00)=""/62, 0x3e}], 0x3}, 0xac4}, {{&(0x7f0000007b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007c00)=""/68, 0x44}, {&(0x7f0000007c80)=""/102, 0x66}, {&(0x7f0000007d00)=""/8, 0x8}, {&(0x7f0000007d40)=""/121, 0x79}, {&(0x7f0000007dc0)=""/123, 0x7b}, {&(0x7f0000007e40)=""/17, 0x11}], 0x6}, 0x4}, {{0x0, 0x0, &(0x7f0000008380)=[{&(0x7f0000007f00)=""/229, 0xe5}, {&(0x7f0000008000)=""/208, 0xd0}, {&(0x7f0000008100)=""/199, 0xc7}, {&(0x7f0000008200)=""/226, 0xe2}, {&(0x7f0000008300)=""/81, 0x51}], 0x5, &(0x7f0000008400)=""/69, 0x45}, 0x800}], 0x6, 0x20, &(0x7f0000008600)={0x0, 0x989680}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000008680), r2) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000008880)={&(0x7f0000008640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008840)={&(0x7f00000086c0)={0x174, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff2}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1a27}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x4840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000088c0)={'nr0\x00'}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000008940)=@add_del={0x2, &(0x7f0000008900)='gretap0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000089c0), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000008a80)={&(0x7f0000008980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008a40)={&(0x7f0000008a00)={0x14, r11, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004810) bind$bt_rfcomm(r3, &(0x7f0000008ac0)={0x1f, @none, 0x4}, 0xa) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000008b00)={{{@in6=@remote, @in6=@initdev}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000008c00)=0xe8) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000008c80), r8) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000008d40)={&(0x7f0000008c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000008d00)={&(0x7f0000008cc0)={0x14, r12, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x20008800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000008e80)={&(0x7f0000008d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000008e40)={&(0x7f0000008dc0)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004014}, 0x1) 178.353299ms ago: executing program 4 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x1, 0x8000, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x0, 0x0, 0x7e4, 0x1, 0x1, 0x45, [0x7fff, 0x10000000]}}) 135.788081ms ago: executing program 1 (id=2123): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x9, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 52.902951ms ago: executing program 1 (id=2124): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000480)) 0s ago: executing program 4 (id=2125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) close(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x55, 0x2, 0x7, 0x3, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2aa3c0b5892c3391}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x38, &(0x7f0000000280)=""/56, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xe, 0x800, 0xa5}, 0x10, 0x51ec, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xc8, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x400448c9, &(0x7f0000000180)="84b31ee703f6dada8e") r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) kernel console output (not intermixed with test programs): 203][T10690] bridge0: port 3(vlan2) entered disabled state [ 246.768213][T10696] nbd: must specify a device to reconfigure [ 246.848769][T10690] vlan2 (unregistering): left allmulticast mode [ 246.855240][T10690] bond0 (unregistering): left allmulticast mode [ 246.861535][T10690] bond_slave_0: left allmulticast mode [ 246.867229][T10690] bond_slave_1: left allmulticast mode [ 246.872699][T10690] vlan2 (unregistering): left promiscuous mode [ 246.878933][T10690] bond0 (unregistering): left promiscuous mode [ 246.886275][T10690] bond_slave_0: left promiscuous mode [ 246.891931][T10690] bond_slave_1: left promiscuous mode [ 246.897813][T10690] bridge0: port 3(vlan2) entered disabled state [ 246.911374][T10690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.921685][T10690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.931130][T10690] bond0 (unregistering): Released all slaves [ 247.492456][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.516337][T10736] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 247.548787][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.566256][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.591076][T10736] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 247.619301][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.670142][T10745] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 247.700507][T10713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.771768][T10745] team0: Port device wlan1 added [ 247.860470][T10713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.919156][T10737] lo speed is unknown, defaulting to 1000 [ 248.087649][T10713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.500369][T10713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.613718][T10767] FAULT_INJECTION: forcing a failure. [ 248.613718][T10767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.630974][T10767] CPU: 1 UID: 0 PID: 10767 Comm: syz.4.1284 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 248.631001][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.631013][T10767] Call Trace: [ 248.631020][T10767] [ 248.631028][T10767] dump_stack_lvl+0x189/0x250 [ 248.631063][T10767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.631090][T10767] ? __pfx__printk+0x10/0x10 [ 248.631121][T10767] should_fail_ex+0x414/0x560 [ 248.631147][T10767] _copy_to_user+0x31/0xb0 [ 248.631176][T10767] simple_read_from_buffer+0xe1/0x170 [ 248.631206][T10767] proc_fail_nth_read+0x1df/0x250 [ 248.631236][T10767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.631267][T10767] ? rw_verify_area+0x258/0x650 [ 248.631288][T10767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.631316][T10767] vfs_read+0x1fd/0x980 [ 248.631343][T10767] ? __pfx___mutex_lock+0x10/0x10 [ 248.631363][T10767] ? __pfx_vfs_read+0x10/0x10 [ 248.631386][T10767] ? __fget_files+0x2a/0x420 [ 248.631415][T10767] ? __fget_files+0x3a0/0x420 [ 248.631439][T10767] ? __fget_files+0x2a/0x420 [ 248.631473][T10767] ksys_read+0x145/0x250 [ 248.631493][T10767] ? rcu_is_watching+0x15/0xb0 [ 248.631512][T10767] ? __pfx_ksys_read+0x10/0x10 [ 248.631537][T10767] ? do_syscall_64+0xba/0x210 [ 248.631562][T10767] do_syscall_64+0xf6/0x210 [ 248.631583][T10767] ? clear_bhb_loop+0x60/0xb0 [ 248.631605][T10767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.631622][T10767] RIP: 0033:0x7fc49078d37c [ 248.631639][T10767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.631655][T10767] RSP: 002b:00007fc491579030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.631675][T10767] RAX: ffffffffffffffda RBX: 00007fc4909b5fa0 RCX: 00007fc49078d37c [ 248.631688][T10767] RDX: 000000000000000f RSI: 00007fc4915790a0 RDI: 0000000000000004 [ 248.631700][T10767] RBP: 00007fc491579090 R08: 0000000000000000 R09: 0000000000000000 [ 248.631711][T10767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.631721][T10767] R13: 0000000000000000 R14: 00007fc4909b5fa0 R15: 00007ffd088514a8 [ 248.631750][T10767] [ 249.011468][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.062181][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.071544][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.080464][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.089339][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.342674][T10775] lo speed is unknown, defaulting to 1000 [ 249.395656][T10770] lo speed is unknown, defaulting to 1000 [ 249.431915][T10713] bridge_slave_1: left allmulticast mode [ 249.439828][T10713] bridge_slave_1: left promiscuous mode [ 249.448692][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.482244][T10713] bridge_slave_0: left allmulticast mode [ 249.488246][T10713] bridge_slave_0: left promiscuous mode [ 249.494060][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.985199][T10713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.997212][T10713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.010532][T10713] bond0 (unregistering): Released all slaves [ 250.480914][T10713] hsr_slave_0: left promiscuous mode [ 250.498568][T10713] hsr_slave_1: left promiscuous mode [ 250.504491][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.513968][T10713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.524082][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.531770][T10713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.563238][T10713] veth1_macvtap: left promiscuous mode [ 250.569039][T10713] veth0_macvtap: left promiscuous mode [ 250.574647][T10713] veth1_vlan: left promiscuous mode [ 250.579992][T10713] veth0_vlan: left promiscuous mode [ 250.661028][T10832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 251.003059][T10713] team0 (unregistering): Port device team_slave_1 removed [ 251.044479][T10713] team0 (unregistering): Port device team_slave_0 removed [ 251.175552][ T5836] Bluetooth: hci2: command tx timeout [ 251.472196][T10826] lo speed is unknown, defaulting to 1000 [ 251.573353][T10770] chnl_net:caif_netlink_parms(): no params data found [ 251.845394][T10849] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 251.853225][T10849] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1304'. [ 251.867142][T10849] netlink: 'syz.3.1304': attribute type 4 has an invalid length. [ 251.888929][T10847] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.1302'. [ 251.898828][T10847] netlink: zone id is out of range [ 251.903989][T10847] netlink: zone id is out of range [ 251.922092][T10847] netlink: zone id is out of range [ 251.957132][T10847] netlink: zone id is out of range [ 251.963080][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.979949][T10847] netlink: zone id is out of range [ 251.986713][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.994599][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 251.996272][T10847] netlink: zone id is out of range [ 252.012807][T10847] netlink: zone id is out of range [ 252.014774][T10770] bridge_slave_0: entered allmulticast mode [ 252.040170][T10770] bridge_slave_0: entered promiscuous mode [ 252.042265][T10847] netlink: zone id is out of range [ 252.051959][T10847] netlink: zone id is out of range [ 252.066185][T10847] netlink: zone id is out of range [ 252.081210][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.093338][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.105436][T10770] bridge_slave_1: entered allmulticast mode [ 252.127030][T10770] bridge_slave_1: entered promiscuous mode [ 252.263608][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.306268][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.334399][T10861] lo speed is unknown, defaulting to 1000 [ 252.365648][T10869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 252.493405][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 252.508503][T10770] team0: Port device team_slave_0 added [ 252.589073][T10867] lo speed is unknown, defaulting to 1000 [ 252.610094][T10770] team0: Port device team_slave_1 added [ 252.827867][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.834881][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.871607][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.911555][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.945326][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.977779][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.255631][ T5836] Bluetooth: hci2: command tx timeout [ 253.293810][T10770] hsr_slave_0: entered promiscuous mode [ 253.301343][T10770] hsr_slave_1: entered promiscuous mode [ 253.510550][T10903] netlink: 'syz.3.1315': attribute type 33 has an invalid length. [ 253.521295][T10903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1315'. [ 253.793887][T10911] netlink: 'syz.3.1319': attribute type 11 has an invalid length. [ 254.211837][T10770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.226241][T10933] netlink: 'syz.1.1325': attribute type 11 has an invalid length. [ 254.265302][T10770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.303263][T10770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.343964][T10770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.368202][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1325'. [ 254.377561][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1325'. [ 254.387447][T10937] syzkaller1: entered promiscuous mode [ 254.392973][T10937] syzkaller1: entered allmulticast mode [ 254.465547][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 254.687257][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.730355][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.822251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.829542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.905200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.912467][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.067533][T10770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.335316][ T5836] Bluetooth: hci2: command tx timeout [ 255.626212][T10770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.789000][T10770] veth0_vlan: entered promiscuous mode [ 255.814766][T10770] veth1_vlan: entered promiscuous mode [ 255.949886][T10770] veth0_macvtap: entered promiscuous mode [ 256.005237][T10770] veth1_macvtap: entered promiscuous mode [ 256.106542][T10770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.142314][T10770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.227982][T10973] lo speed is unknown, defaulting to 1000 [ 256.248090][T10770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.269163][T10770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.296993][T10770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.317139][T10770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.025789][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.075182][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.188766][ T6422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.211736][ T6422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.541839][T11012] lo speed is unknown, defaulting to 1000 [ 257.793617][T11027] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1348'. [ 257.836304][T11028] 2g,{: renamed from lo [ 258.103933][T11038] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 258.112647][T10711] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.454523][T10711] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.574513][T10711] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.670730][T10711] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.838715][T10711] bridge_slave_1: left allmulticast mode [ 258.844459][T10711] bridge_slave_1: left promiscuous mode [ 258.851172][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.927693][T10711] bridge_slave_0: left allmulticast mode [ 258.945034][T10711] bridge_slave_0: left promiscuous mode [ 258.958332][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.048711][T11053] net_ratelimit: 4053 callbacks suppressed [ 259.048733][T11053] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 259.371298][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.381027][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.391705][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.405615][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.414597][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.571367][T10711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.582589][T10711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.593491][T10711] bond0 (unregistering): Released all slaves [ 259.622402][T11055] : entered promiscuous mode [ 259.704816][T11057] lo speed is unknown, defaulting to 1000 [ 259.805714][T11067] lo speed is unknown, defaulting to 1000 [ 260.040368][T10711] hsr_slave_0: left promiscuous mode [ 260.050938][T10711] hsr_slave_1: left promiscuous mode [ 260.057920][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.066295][T10711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.074798][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.082994][T10711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.105802][T10711] veth1_macvtap: left promiscuous mode [ 260.111415][T10711] veth0_macvtap: left promiscuous mode [ 260.117161][T10711] veth1_vlan: left promiscuous mode [ 260.122462][T10711] veth0_vlan: left promiscuous mode [ 260.341535][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 260.608350][T10711] team0 (unregistering): Port device team_slave_1 removed [ 260.651760][T10711] team0 (unregistering): Port device team_slave_0 removed [ 261.055495][T11088] netlink: 'syz.3.1363': attribute type 7 has an invalid length. [ 261.474284][T11067] chnl_net:caif_netlink_parms(): no params data found [ 261.495529][ T5828] Bluetooth: hci2: command tx timeout [ 261.575703][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 261.776274][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 261.845465][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 261.934573][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.947693][ T30] audit: type=1800 audit(1748084526.232:4): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1372" name="cgroup.controllers" dev="tmpfs" ino=1497 res=0 errno=0 [ 261.956310][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.986176][T11067] bridge_slave_0: entered allmulticast mode [ 262.005238][T11067] bridge_slave_0: entered promiscuous mode [ 262.032350][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 262.065502][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1375'. [ 262.077210][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.091652][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.120434][T11067] bridge_slave_1: entered allmulticast mode [ 262.132025][T11067] bridge_slave_1: entered promiscuous mode [ 262.212925][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.250409][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.389751][T11067] team0: Port device team_slave_0 added [ 262.427045][T11067] team0: Port device team_slave_1 added [ 262.532475][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.555411][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.595996][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 262.626018][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.651730][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.669757][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.740186][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.860735][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1383'. [ 262.943724][T11067] hsr_slave_0: entered promiscuous mode [ 262.951589][T11067] hsr_slave_1: entered promiscuous mode [ 262.968609][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 263.188603][T11175] lo speed is unknown, defaulting to 1000 [ 263.568340][T11067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.585231][ T5828] Bluetooth: hci2: command tx timeout [ 263.600876][T11067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.621317][T11067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.637350][T11067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.881559][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.962387][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.002771][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.010056][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.058880][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.066134][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.198453][T11191] lo speed is unknown, defaulting to 1000 [ 264.222583][T11195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 264.232155][T11195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1389'. [ 264.242740][T11195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 264.265636][T11195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1389'. [ 264.591638][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.710401][T11067] veth0_vlan: entered promiscuous mode [ 264.788147][T11067] veth1_vlan: entered promiscuous mode [ 264.922115][T11067] veth0_macvtap: entered promiscuous mode [ 264.951319][T11067] veth1_macvtap: entered promiscuous mode [ 265.007742][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.052296][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.065555][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.088816][T11067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.106155][T11067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.115701][T11067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.115938][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.124410][T11067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.241004][T11229] lo speed is unknown, defaulting to 1000 [ 265.453279][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.481020][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.554215][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.579051][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.626673][T11239] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.656376][ T5828] Bluetooth: hci2: command tx timeout [ 265.672275][T11239] block nbd1: shutting down sockets [ 265.950304][T11247] netlink: 'syz.3.1404': attribute type 23 has an invalid length. [ 265.980704][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 266.214251][T11249] lo speed is unknown, defaulting to 1000 [ 266.491532][T11254] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1406'. [ 266.625193][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1405'. [ 266.800677][T11259] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 267.201885][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.398371][T11250] lo speed is unknown, defaulting to 1000 [ 267.586950][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.730797][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.769469][T11269] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1408'. [ 267.787700][T11267] delete_channel: no stack [ 267.873964][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.096975][T11291] openvswitch: netlink: Message has 4 unknown bytes. [ 268.174676][T11292] ip6tnl1: entered promiscuous mode [ 268.206767][ T13] bridge_slave_1: left allmulticast mode [ 268.212494][ T13] bridge_slave_1: left promiscuous mode [ 268.231038][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.244324][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.253957][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.262287][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.271064][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.279500][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.306377][ T13] bridge_slave_0: left allmulticast mode [ 268.309664][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1417'. [ 268.312062][ T13] bridge_slave_0: left promiscuous mode [ 268.327200][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.433084][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 268.443200][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 268.700131][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.711255][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.723871][ T13] bond0 (unregistering): Released all slaves [ 268.739825][T11299] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1416'. [ 268.749251][T11299] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.932913][T11295] lo speed is unknown, defaulting to 1000 [ 269.083513][T11343] netlink: 'syz.3.1423': attribute type 3 has an invalid length. [ 269.090476][T11348] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 269.109376][T11343] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 269.121190][T11343] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1423'. [ 269.221786][ T13] hsr_slave_0: left promiscuous mode [ 269.239767][ T13] hsr_slave_1: left promiscuous mode [ 269.257424][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.264891][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.292167][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.315606][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.351662][ T13] veth1_macvtap: left promiscuous mode [ 269.357742][ T13] veth0_macvtap: left promiscuous mode [ 269.363893][ T13] veth1_vlan: left promiscuous mode [ 269.372415][ T13] veth0_vlan: left promiscuous mode [ 269.508900][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 269.859198][ T13] team0 (unregistering): Port device team_slave_1 removed [ 269.900620][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.100837][T11369] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1431'. [ 270.307355][ T5828] Bluetooth: hci2: command tx timeout [ 270.581467][T11295] chnl_net:caif_netlink_parms(): no params data found [ 270.739719][T11388] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1437'. [ 270.910616][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.930374][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.952227][T11295] bridge_slave_0: entered allmulticast mode [ 270.960356][T11295] bridge_slave_0: entered promiscuous mode [ 271.230568][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.251466][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.279525][T11295] bridge_slave_1: entered allmulticast mode [ 271.316961][T11295] bridge_slave_1: entered promiscuous mode [ 271.412876][T11402] lo speed is unknown, defaulting to 1000 [ 271.583609][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.610230][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.711277][T11295] team0: Port device team_slave_0 added [ 271.744592][T11295] team0: Port device team_slave_1 added [ 271.832841][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.840316][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.919811][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.951439][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.971066][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.017010][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 272.035144][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.119651][T11439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1447'. [ 272.328518][T11295] hsr_slave_0: entered promiscuous mode [ 272.336776][T11295] hsr_slave_1: entered promiscuous mode [ 272.375055][ T5828] Bluetooth: hci2: command tx timeout [ 273.189255][T11475] sctp: [Deprecated]: syz.3.1457 (pid 11475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.189255][T11475] Use struct sctp_sack_info instead [ 273.294424][T11295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.339580][T11295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.386696][T11295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.435560][T11295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.510301][T11480] lo speed is unknown, defaulting to 1000 [ 273.850959][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.937536][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.951585][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.958842][T11331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.073205][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.080520][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.461486][ T5828] Bluetooth: hci2: command tx timeout [ 274.676004][T11504] __nla_validate_parse: 2 callbacks suppressed [ 274.676025][T11504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 274.714510][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.788814][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1464'. [ 274.819614][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1464'. [ 274.847381][T11295] veth0_vlan: entered promiscuous mode [ 274.870513][T11295] veth1_vlan: entered promiscuous mode [ 274.921620][T11295] veth0_macvtap: entered promiscuous mode [ 274.940071][T11295] veth1_macvtap: entered promiscuous mode [ 274.979860][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.002646][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.019901][T11516] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1467'. [ 275.031265][T11295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.042414][T11295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.051549][T11295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.061220][T11295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.192739][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 275.211850][T11335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.228910][T11335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.256536][T11527] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1469'. [ 275.285635][T11527] netlink: ct family unspecified [ 275.286281][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.299796][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.302621][T11527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.451530][T11534] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1472'. [ 275.468529][T11534] xt_limit: Overflow, try lower: 262144/524288 [ 275.593391][T11540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1475'. [ 275.879392][T11548] veth7: entered promiscuous mode [ 276.106242][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 276.190614][T11564] netlink: 8844 bytes leftover after parsing attributes in process `syz.4.1482'. [ 276.502217][T11335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.253715][T11335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.388135][T11573] syzkaller0: entered promiscuous mode [ 277.410595][T11573] syzkaller0: entered allmulticast mode [ 277.692102][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.709038][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.724056][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.743930][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.771724][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.804208][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.819675][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.829045][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.854616][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.874561][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.012581][T11578] bond0 (unregistering): Released all slaves [ 279.064777][T11335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.183306][T11335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.216195][T11588] lo speed is unknown, defaulting to 1000 [ 279.278843][T11591] lo speed is unknown, defaulting to 1000 [ 279.325932][T11603] lo speed is unknown, defaulting to 1000 [ 279.738769][T11335] bridge_slave_1: left allmulticast mode [ 279.744551][T11335] bridge_slave_1: left promiscuous mode [ 279.759382][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.778051][T11335] bridge_slave_0: left allmulticast mode [ 279.784029][T11335] bridge_slave_0: left promiscuous mode [ 279.793267][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.817417][ T5836] Bluetooth: hci2: command tx timeout [ 279.990369][ T5836] Bluetooth: hci5: command tx timeout [ 280.268478][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.280132][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.290939][T11335] bond0 (unregistering): Released all slaves [ 280.520378][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1502'. [ 280.540190][T11640] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 280.650852][T11650] netlink: 'syz.3.1504': attribute type 2 has an invalid length. [ 280.869683][T11591] chnl_net:caif_netlink_parms(): no params data found [ 280.969201][T11588] chnl_net:caif_netlink_parms(): no params data found [ 281.041783][T11335] hsr_slave_0: left promiscuous mode [ 281.050708][T11335] hsr_slave_1: left promiscuous mode [ 281.059547][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.067158][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.076402][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.084000][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.108465][T11335] veth1_macvtap: left promiscuous mode [ 281.114121][T11335] veth0_macvtap: left promiscuous mode [ 281.119946][T11335] veth1_vlan: left promiscuous mode [ 281.125441][T11335] veth0_vlan: left promiscuous mode [ 281.628811][T11335] team0 (unregistering): Port device team_slave_1 removed [ 281.686927][T11335] team0 (unregistering): Port device team_slave_0 removed [ 281.900043][ T5836] Bluetooth: hci2: command tx timeout [ 282.058713][ T5836] Bluetooth: hci5: command tx timeout [ 282.414605][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.435656][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.443683][T11591] bridge_slave_0: entered allmulticast mode [ 282.467583][T11591] bridge_slave_0: entered promiscuous mode [ 282.479575][T11588] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.487458][T11588] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.494774][T11588] bridge_slave_0: entered allmulticast mode [ 282.504494][T11588] bridge_slave_0: entered promiscuous mode [ 282.512688][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.521062][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.530044][T11591] bridge_slave_1: entered allmulticast mode [ 282.544502][T11591] bridge_slave_1: entered promiscuous mode [ 282.551688][T11588] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.560999][T11588] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.568460][T11588] bridge_slave_1: entered allmulticast mode [ 282.577253][T11588] bridge_slave_1: entered promiscuous mode [ 282.659525][T11695] xt_hashlimit: size too large, truncated to 1048576 [ 282.698282][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.745673][T11588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.760748][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.778647][T11588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.887538][T11591] team0: Port device team_slave_0 added [ 282.915210][T11705] bridge9: entered promiscuous mode [ 282.920510][T11705] bridge9: entered allmulticast mode [ 282.981410][T11588] team0: Port device team_slave_0 added [ 282.989896][T11591] team0: Port device team_slave_1 added [ 282.999513][T11588] team0: Port device team_slave_1 added [ 283.062551][T11588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.070060][T11588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.097938][T11588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.109984][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.118058][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.145564][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.157775][T11588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.164893][T11588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.192739][T11588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.207148][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.214151][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.240232][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.336111][T11708] 2g,{: entered allmulticast mode [ 283.417981][T11588] hsr_slave_0: entered promiscuous mode [ 283.428663][T11588] hsr_slave_1: entered promiscuous mode [ 283.513563][T11591] hsr_slave_0: entered promiscuous mode [ 283.522352][T11591] hsr_slave_1: entered promiscuous mode [ 283.529502][T11591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.537466][T11591] Cannot create hsr debugfs directory [ 283.562328][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 283.583982][T11713] netlink: 'syz.1.1516': attribute type 3 has an invalid length. [ 283.681706][T11707] 2g,{: left allmulticast mode [ 283.698141][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 283.747383][T11717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.942573][T11723] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1519'. [ 283.977122][ T5836] Bluetooth: hci2: command tx timeout [ 284.126959][T11738] IPv6: Can't replace route, no match found [ 284.135358][ T5836] Bluetooth: hci5: command tx timeout [ 284.229547][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 284.248666][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1527'. [ 284.505224][T11591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.566736][T11591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.650090][T11591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.707969][T11591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.912422][T11744] xt_hashlimit: size too large, truncated to 1048576 [ 284.951959][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.065655][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.190705][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.197917][T11335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.246649][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.253904][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.345239][T11779] netlink: 'syz.3.1533': attribute type 21 has an invalid length. [ 285.348121][T11588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.376164][T11779] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.413024][T11588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.443800][T11588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.470234][T11588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.670751][T11588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.724060][T11789] lo speed is unknown, defaulting to 1000 [ 285.762335][T11588] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.793215][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.800562][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.855756][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.862984][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.046894][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.055978][ T5840] Bluetooth: hci2: command tx timeout [ 286.217339][ T5840] Bluetooth: hci5: command tx timeout [ 286.380363][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'. [ 286.438486][T11802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.535514][ T5836] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 286.685932][T11802] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.787188][T11588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.830928][T11802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.960321][T11802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.337990][T11802] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.366439][T11802] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.419177][T11802] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.447896][T11591] veth0_vlan: entered promiscuous mode [ 287.482052][T11802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.551081][T11588] veth0_vlan: entered promiscuous mode [ 287.582248][T11591] veth1_vlan: entered promiscuous mode [ 287.622690][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 287.640249][T11842] pim6reg: entered allmulticast mode [ 287.650684][T11588] veth1_vlan: entered promiscuous mode [ 287.701891][T11841] pim6reg: left allmulticast mode [ 287.748472][T11846] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1546'. [ 287.833127][T11591] veth0_macvtap: entered promiscuous mode [ 287.910212][T11591] veth1_macvtap: entered promiscuous mode [ 287.952260][T11588] veth0_macvtap: entered promiscuous mode [ 288.019984][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.038652][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.056525][T11852] lo speed is unknown, defaulting to 1000 [ 288.066826][T11588] veth1_macvtap: entered promiscuous mode [ 288.089249][T11591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.089502][T11859] netlink: 'syz.3.1548': attribute type 15 has an invalid length. [ 288.108473][T11591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.127955][T11591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.129847][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1548'. [ 288.155874][T11591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.282668][T11868] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 288.293330][T11588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.353615][T11588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.374666][T11588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.386995][T11588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.396039][T11588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.406593][T11588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.685888][T11876] tap0: tun_chr_ioctl cmd 1074025673 [ 288.691609][T11875] tap0: tun_chr_ioctl cmd 1074812118 [ 288.704887][T11875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1554'. [ 288.758657][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.774137][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.894091][T11336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.917100][T11336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.954662][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.979184][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.127538][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.144138][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.374732][T11896] sctp: [Deprecated]: syz.3.1558 (pid 11896) Use of int in max_burst socket option deprecated. [ 289.374732][T11896] Use struct sctp_assoc_value instead [ 289.560632][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'. [ 289.570472][T11905] netlink: 412 bytes leftover after parsing attributes in process `syz.5.1561'. [ 289.596414][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 289.699050][T11333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.856259][T11333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.111599][T11333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.198972][T11333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.296773][T11333] bridge_slave_1: left allmulticast mode [ 290.302463][T11333] bridge_slave_1: left promiscuous mode [ 290.308824][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.318239][T11333] bridge_slave_0: left allmulticast mode [ 290.323898][T11333] bridge_slave_0: left promiscuous mode [ 290.330537][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.639517][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.651390][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.662798][T11333] bond0 (unregistering): Released all slaves [ 290.779722][T11920] siw: device registration error -23 [ 290.865975][T11923] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1566'. [ 290.910516][T11921] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 290.949154][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1567'. [ 290.985128][T11925] netlink: 'syz.5.1567': attribute type 3 has an invalid length. [ 290.992924][T11925] netlink: 'syz.5.1567': attribute type 2 has an invalid length. [ 291.047343][T11925] netlink: 'syz.5.1567': attribute type 2 has an invalid length. [ 291.239385][T11932] syzkaller1: entered promiscuous mode [ 291.269768][T11932] syzkaller1: entered allmulticast mode [ 291.319942][T11938] tipc: Started in network mode [ 291.324879][T11938] tipc: Node identity be59bf4f8c47, cluster identity 4711 [ 291.336656][T11938] tipc: Enabled bearer , priority 0 [ 291.349875][T11942] netlink: 'syz.3.1569': attribute type 3 has an invalid length. [ 291.386997][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.391330][T11943] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 291.404317][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.421343][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.431672][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.440346][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.440879][T11943] __nla_validate_parse: 3 callbacks suppressed [ 291.440896][T11943] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1569'. [ 291.477670][T11940] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 291.529519][T11940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1569'. [ 291.632694][T11931] syzkaller0: entered promiscuous mode [ 291.639618][T11931] syzkaller0: entered allmulticast mode [ 291.646279][T11931] tipc: Resetting bearer [ 291.689802][T11950] lo speed is unknown, defaulting to 1000 [ 291.702897][T11924] tipc: Resetting bearer [ 292.419375][ T975] tipc: Node number set to 840875855 [ 293.031321][T11924] tipc: Disabling bearer [ 293.101589][T11333] hsr_slave_0: left promiscuous mode [ 293.118318][T11333] hsr_slave_1: left promiscuous mode [ 293.128392][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.140358][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.151797][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.175797][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.222810][T11333] veth1_macvtap: left promiscuous mode [ 293.245334][T11333] veth0_macvtap: left promiscuous mode [ 293.256338][T11333] veth1_vlan: left promiscuous mode [ 293.271942][T11333] veth0_vlan: left promiscuous mode [ 293.505974][ T5836] Bluetooth: hci2: command tx timeout [ 293.980656][T11333] team0 (unregistering): Port device team_slave_1 removed [ 294.022689][T11333] team0 (unregistering): Port device team_slave_0 removed [ 294.419944][T11948] lo speed is unknown, defaulting to 1000 [ 294.597845][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1581'. [ 294.880159][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1584'. [ 295.070158][T11948] chnl_net:caif_netlink_parms(): no params data found [ 295.168059][T12008] lo speed is unknown, defaulting to 1000 [ 295.197828][T12018] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 295.228415][T12018] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 295.398183][T12029] openvswitch: netlink: Message has 4 unknown bytes. [ 295.475875][T12032] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1592'. [ 295.485439][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.493331][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.500969][T11948] bridge_slave_0: entered allmulticast mode [ 295.509477][T11948] bridge_slave_0: entered promiscuous mode [ 295.556637][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.564142][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.577565][ T5836] Bluetooth: hci2: command tx timeout [ 295.620736][T11948] bridge_slave_1: entered allmulticast mode [ 295.657320][T11948] bridge_slave_1: entered promiscuous mode [ 295.810996][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.948799][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.986468][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 296.205685][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 296.212230][T11948] team0: Port device team_slave_0 added [ 296.262281][T11948] team0: Port device team_slave_1 added [ 296.292857][T12058] netlink: 'syz.5.1599': attribute type 10 has an invalid length. [ 296.350077][T12058] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 296.361429][T12058] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 296.374526][T12058] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 296.590613][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.611525][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.612525][T12072] openvswitch: netlink: Message has 4 unknown bytes. [ 296.645967][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.749939][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.769380][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.839423][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.874163][T12079] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 296.881564][T12081] netlink: 'syz.3.1606': attribute type 1 has an invalid length. [ 296.910943][T12081] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1606'. [ 296.960202][T12078] lo speed is unknown, defaulting to 1000 [ 296.999178][T11948] hsr_slave_0: entered promiscuous mode [ 297.026413][T11948] hsr_slave_1: entered promiscuous mode [ 297.147454][T12079] lo speed is unknown, defaulting to 1000 [ 297.512105][T12092] netlink: 'syz.1.1609': attribute type 4 has an invalid length. [ 297.655283][ T5840] Bluetooth: hci2: command tx timeout [ 297.813722][T12104] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 297.849010][T12106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1613'. [ 298.035548][T12112] syzkaller1: entered promiscuous mode [ 298.041095][T12112] syzkaller1: entered allmulticast mode [ 298.601181][T12140] netlink: 'syz.3.1623': attribute type 1 has an invalid length. [ 298.610483][T12140] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1623'. [ 298.764723][T11948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.789695][T11948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.822034][T12149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.822568][T12149] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 298.841287][T11948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.880960][T11948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.042989][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.138651][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.176292][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.183451][T11335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.210364][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.217693][T11335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.242909][T12167] xt_limit: Overflow, try lower: 0/0 [ 299.694615][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 299.712521][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 299.735591][ T5840] Bluetooth: hci2: command 0x0419 tx timeout [ 299.778090][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.914465][T11948] veth0_vlan: entered promiscuous mode [ 299.954687][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 299.964038][T12208] vxcan0: Master is either lo or non-ether device [ 299.977975][T11948] veth1_vlan: entered promiscuous mode [ 300.061180][T11948] veth0_macvtap: entered promiscuous mode [ 300.107393][T11948] veth1_macvtap: entered promiscuous mode [ 300.128847][T12213] netlink: 'syz.3.1645': attribute type 6 has an invalid length. [ 300.154110][T12221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.196062][T12213] netlink: 'syz.3.1645': attribute type 7 has an invalid length. [ 300.205540][T12213] netlink: 'syz.3.1645': attribute type 8 has an invalid length. [ 300.240181][T12213] netlink: 'syz.3.1645': attribute type 7 has an invalid length. [ 300.279977][T11948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.328970][T11948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.370773][T11948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.395397][T11948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.404179][T11948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.423359][T11948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.441042][T12230] x_tables: unsorted entry at hook 3 [ 300.612469][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 300.639646][T12240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.694210][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1652'. [ 300.721511][T12247] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 300.802896][T12240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.837984][T12256] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1655'. [ 300.877539][T11332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.885708][T11332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.959473][T12240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.006212][T11332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.034768][T11332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.114946][T12240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.197277][T12268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.373513][T12240] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.437008][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 301.451426][T12240] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.519405][T12240] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.547122][T12240] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.067975][T11332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.126936][T12308] __nla_validate_parse: 1 callbacks suppressed [ 302.126956][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 302.557398][T11332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.759899][T11332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.815710][T11332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.901710][T11332] bridge_slave_1: left allmulticast mode [ 302.907479][T11332] bridge_slave_1: left promiscuous mode [ 302.913877][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.924022][T11332] bridge_slave_0: left allmulticast mode [ 302.929853][T11332] bridge_slave_0: left promiscuous mode [ 302.936272][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.180281][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 303.294918][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'. [ 303.591105][T11332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.624336][T11332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.648280][T11332] bond0 (unregistering): Released all slaves [ 303.652647][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.671118][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.683794][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.692712][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 303.703861][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.705340][T12316] bridge_slave_1: left allmulticast mode [ 303.719395][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.722025][T12316] bridge_slave_1: left promiscuous mode [ 303.782278][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.825533][T12316] bridge_slave_0: left allmulticast mode [ 303.831519][T12316] bridge_slave_0: left promiscuous mode [ 303.837792][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.247489][T12335] lo speed is unknown, defaulting to 1000 [ 304.440812][T12361] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 304.574901][T11332] hsr_slave_0: left promiscuous mode [ 304.592188][T11332] hsr_slave_1: left promiscuous mode [ 304.598353][T12365] netlink: 'syz.3.1681': attribute type 17 has an invalid length. [ 304.632484][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.657806][T11332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.668762][T12376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1681'. [ 304.697692][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.710197][T11332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.767874][T11332] veth1_macvtap: left promiscuous mode [ 304.773485][T11332] veth0_macvtap: left promiscuous mode [ 304.784096][T11332] veth1_vlan: left promiscuous mode [ 304.789538][T11332] veth0_vlan: left promiscuous mode [ 305.358139][T11332] team0 (unregistering): Port device team_slave_1 removed [ 305.399954][T11332] team0 (unregistering): Port device team_slave_0 removed [ 305.815227][ T5836] Bluetooth: hci2: command tx timeout [ 306.254156][T12399] lo speed is unknown, defaulting to 1000 [ 306.377092][T12335] chnl_net:caif_netlink_parms(): no params data found [ 306.628333][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.636986][T12335] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.644395][T12335] bridge_slave_0: entered allmulticast mode [ 306.654091][T12335] bridge_slave_0: entered promiscuous mode [ 306.666382][T12335] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.674372][T12335] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.681912][T12335] bridge_slave_1: entered allmulticast mode [ 306.691945][T12335] bridge_slave_1: entered promiscuous mode [ 306.754301][T12335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.801655][T12335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.902610][T12335] team0: Port device team_slave_0 added [ 306.929910][T12335] team0: Port device team_slave_1 added [ 307.051872][T12335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.072488][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.123082][T12335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.133559][T12437] netlink: 'syz.5.1700': attribute type 2 has an invalid length. [ 307.138602][T12335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.152318][T12335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.195300][T12335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.226956][T12437] `: entered promiscuous mode [ 307.367108][T12335] hsr_slave_0: entered promiscuous mode [ 307.374013][T12335] hsr_slave_1: entered promiscuous mode [ 307.382163][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1704'. [ 307.390870][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1703'. [ 307.640509][T12457] pimreg: entered allmulticast mode [ 307.660400][T12456] 8021q: VLANs not supported on pimreg [ 307.679856][T12456] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 307.687861][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 307.697527][T12456] pimreg: left allmulticast mode [ 307.898553][ T5836] Bluetooth: hci2: command tx timeout [ 308.290755][T12484] smc: net device bond0 erased user defined pnetid SYZ2 [ 308.318120][T12482] lo speed is unknown, defaulting to 1000 [ 309.054041][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1718'. [ 309.309823][T12335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.466910][T12335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.478339][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1722'. [ 309.502092][T12335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.517938][T12523] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1724'. [ 309.532693][T12335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.581941][T12523] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1724'. [ 309.824109][T12335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.918312][T12335] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.985373][ T5836] Bluetooth: hci2: command tx timeout [ 310.000326][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 310.025740][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 310.038416][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.045672][T11334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.061312][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1729'. [ 310.082524][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.089774][T11334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.123417][T12547] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 310.152156][T12548] lo speed is unknown, defaulting to 1000 [ 310.169999][T12552] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 310.187961][T12563] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 310.258211][T12563] team0: Cannot enslave team device to itself [ 310.349149][T12568] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 310.400283][T12571] xt_bpf: check failed: parse error [ 310.984681][ T30] audit: type=1107 audit(1748084575.262:5): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g' [ 311.008379][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.048089][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.074842][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.128726][T12335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.141654][T12585] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.169007][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.182905][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.236754][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.249591][T12335] veth0_vlan: entered promiscuous mode [ 311.277813][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.292682][T12335] veth1_vlan: entered promiscuous mode [ 311.310475][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.333998][T12585] hsr0 speed is unknown, defaulting to 1000 [ 311.358677][T12335] veth0_macvtap: entered promiscuous mode [ 311.385549][T12335] veth1_macvtap: entered promiscuous mode [ 311.450041][T12335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.524349][T12335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.542919][T12335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.561578][T12335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.585252][T12335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.604793][T12335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.744665][T12613] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 311.835217][T11335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.843115][T11335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.916631][T12620] IPVS: length: 204 != 8 [ 311.954730][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.971577][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.985280][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.998593][T12622] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.007386][T12622] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.015680][T12622] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.023883][T12622] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.043958][T12622] vxlan0: entered promiscuous mode [ 312.062012][ T5836] Bluetooth: hci2: command tx timeout [ 312.068986][T12622] vxlan0: entered allmulticast mode [ 312.830460][T12660] syz.5.1763 uses old SIOCAX25GETINFO [ 312.904793][T11335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.071267][T11335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.248627][T11335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.351016][T11335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.548321][T11335] bridge_slave_1: left allmulticast mode [ 313.554007][T11335] bridge_slave_1: left promiscuous mode [ 313.560116][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.570070][T11335] bridge_slave_0: left allmulticast mode [ 313.576744][T11335] bridge_slave_0: left promiscuous mode [ 313.582515][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.931736][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.943016][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.953315][T11335] bond0 (unregistering): Released all slaves [ 314.357926][T11335] hsr_slave_0: left promiscuous mode [ 314.388366][T11335] hsr_slave_1: left promiscuous mode [ 314.394681][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.438434][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.454727][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.462845][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.510049][T11335] veth1_macvtap: left promiscuous mode [ 314.527087][T11335] veth0_macvtap: left promiscuous mode [ 314.541242][T11335] veth1_vlan: left promiscuous mode [ 314.570398][T11335] veth0_vlan: left promiscuous mode [ 314.640423][T12688] __nla_validate_parse: 1 callbacks suppressed [ 314.640444][T12688] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1771'. [ 314.825166][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.837314][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.849645][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.864423][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.876542][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.196526][T11335] team0 (unregistering): Port device team_slave_1 removed [ 315.242715][T11335] team0 (unregistering): Port device team_slave_0 removed [ 315.610446][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 315.671225][T12688] ieee80211 phy45: Failed to add default virtual iface [ 315.714504][T12693] lo speed is unknown, defaulting to 1000 [ 315.751274][T12693] hsr0 speed is unknown, defaulting to 1000 [ 315.977012][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1777'. [ 316.058305][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1777'. [ 316.076280][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 316.266966][T12693] chnl_net:caif_netlink_parms(): no params data found [ 316.504578][T12744] siw: device registration error -23 [ 316.622419][T12720] lo speed is unknown, defaulting to 1000 [ 316.668988][T12720] hsr0 speed is unknown, defaulting to 1000 [ 316.669185][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.699757][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.711022][T12693] bridge_slave_0: entered allmulticast mode [ 316.737776][T12693] bridge_slave_0: entered promiscuous mode [ 316.817119][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.845982][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.853306][T12693] bridge_slave_1: entered allmulticast mode [ 316.887934][T12693] bridge_slave_1: entered promiscuous mode [ 316.935234][ T5840] Bluetooth: hci2: command tx timeout [ 316.967511][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1787'. [ 317.077766][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.100597][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.216421][T12693] team0: Port device team_slave_0 added [ 317.237062][T12693] team0: Port device team_slave_1 added [ 317.320984][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.329959][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.363257][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.390918][T12762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1788'. [ 317.401860][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.409246][T12766] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1790'. [ 317.413611][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.447849][T12767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.505596][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.512713][T12768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1790'. [ 317.686906][T12693] hsr_slave_0: entered promiscuous mode [ 317.693683][T12693] hsr_slave_1: entered promiscuous mode [ 317.749188][T12778] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1793'. [ 318.408748][T12813] FAULT_INJECTION: forcing a failure. [ 318.408748][T12813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.430744][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.3.1803 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 318.430776][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.430789][T12813] Call Trace: [ 318.430797][T12813] [ 318.430805][T12813] dump_stack_lvl+0x189/0x250 [ 318.430844][T12813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.430884][T12813] ? __pfx__printk+0x10/0x10 [ 318.430919][T12813] should_fail_ex+0x414/0x560 [ 318.430948][T12813] _copy_to_user+0x31/0xb0 [ 318.430981][T12813] simple_read_from_buffer+0xe1/0x170 [ 318.431013][T12813] proc_fail_nth_read+0x1df/0x250 [ 318.431047][T12813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.431081][T12813] ? rw_verify_area+0x258/0x650 [ 318.431104][T12813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.431134][T12813] vfs_read+0x1fd/0x980 [ 318.431163][T12813] ? __pfx___mutex_lock+0x10/0x10 [ 318.431186][T12813] ? __pfx_vfs_read+0x10/0x10 [ 318.431212][T12813] ? __fget_files+0x2a/0x420 [ 318.431246][T12813] ? __fget_files+0x3a0/0x420 [ 318.431271][T12813] ? __fget_files+0x2a/0x420 [ 318.431308][T12813] ksys_read+0x145/0x250 [ 318.431329][T12813] ? rcu_is_watching+0x15/0xb0 [ 318.431350][T12813] ? __pfx_ksys_read+0x10/0x10 [ 318.431378][T12813] ? do_syscall_64+0xba/0x210 [ 318.431405][T12813] do_syscall_64+0xf6/0x210 [ 318.431427][T12813] ? clear_bhb_loop+0x60/0xb0 [ 318.431453][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.431472][T12813] RIP: 0033:0x7f51a4f8d37c [ 318.431491][T12813] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.431507][T12813] RSP: 002b:00007f51a5d32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.431529][T12813] RAX: ffffffffffffffda RBX: 00007f51a51b5fa0 RCX: 00007f51a4f8d37c [ 318.431543][T12813] RDX: 000000000000000f RSI: 00007f51a5d320a0 RDI: 0000000000000004 [ 318.431555][T12813] RBP: 00007f51a5d32090 R08: 0000000000000000 R09: 0000000000000000 [ 318.431567][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.431578][T12813] R13: 0000000000000000 R14: 00007f51a51b5fa0 R15: 00007ffef72ca798 [ 318.431611][T12813] [ 318.652229][ T30] audit: type=1107 audit(1748084582.782:6): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Rg@h񍮪ˆ< [ 318.652229][ T30] IRyd' [ 318.872073][T12833] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 318.992745][T12833] tipc: Enabling of bearer rejected, failed to enable media [ 319.023248][ T5840] Bluetooth: hci2: command tx timeout [ 319.269951][T12693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.300401][T12693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.330971][T12693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.402172][T12693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.466178][T12871] netlink: 'syz.5.1817': attribute type 49 has an invalid length. [ 319.603068][T12877] netlink: 'syz.3.1819': attribute type 13 has an invalid length. [ 319.657004][T12880] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.669519][T12880] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.775290][T12880] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.792235][T12880] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.829175][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.859714][T12880] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.870119][T12880] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.909511][T12886] __nla_validate_parse: 4 callbacks suppressed [ 319.909530][T12886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1824'. [ 319.917850][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.933014][T12886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.956917][T12880] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.973899][T12880] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.035035][T11336] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.042334][T11336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.098192][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.105467][T11334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.185787][T12880] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.202971][T12880] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.250792][T12880] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.261880][T12880] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.291279][T12880] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.306068][T12880] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.360765][T12880] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.369687][T12880] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.379116][T12900] tipc: Enabling of bearer rejected, failed to enable media [ 320.535729][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1830'. [ 320.548208][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 320.716268][T12916] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1832'. [ 320.861228][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.983267][T12693] veth0_vlan: entered promiscuous mode [ 321.014134][T12693] veth1_vlan: entered promiscuous mode [ 321.037730][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1835'. [ 321.082455][T12693] veth0_macvtap: entered promiscuous mode [ 321.095153][ T5840] Bluetooth: hci2: command tx timeout [ 321.120431][T12693] veth1_macvtap: entered promiscuous mode [ 321.158732][T12927] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1836'. [ 321.212410][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.214360][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1837'. [ 321.223499][T12927] xt_cluster: node mask cannot exceed total number of nodes [ 321.246606][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.251690][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 321.278419][T12693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.288114][T12693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.297047][T12693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.306029][T12693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.611933][T11333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.627061][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1841'. [ 321.641345][T11333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.768293][T12948] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1841'. [ 321.782213][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.793910][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.197849][ T5840] block nbd1: Receive control failed (result -107) [ 322.235157][T12962] nbd1: detected capacity change from 0 to 32 [ 322.378986][T12972] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 322.394616][T12973] pim6reg9: entered allmulticast mode [ 322.697690][T11335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.241931][T11335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.521117][T11335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.616561][T11335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.711696][T11335] bridge_slave_1: left allmulticast mode [ 323.717790][T11335] bridge_slave_1: left promiscuous mode [ 323.723531][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.733101][T11335] bridge_slave_0: left allmulticast mode [ 323.739640][T11335] bridge_slave_0: left promiscuous mode [ 323.745399][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.430577][T11335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.444057][T11335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.461901][T11335] bond0 (unregistering): Released all slaves [ 324.723854][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.734331][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.751621][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.771243][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.781626][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.890137][T13023] lo speed is unknown, defaulting to 1000 [ 324.899401][T13023] hsr0 speed is unknown, defaulting to 1000 [ 325.002141][T13026] lo speed is unknown, defaulting to 1000 [ 325.059784][T13026] hsr0 speed is unknown, defaulting to 1000 [ 325.187079][T11335] hsr_slave_0: left promiscuous mode [ 325.205388][T11335] hsr_slave_1: left promiscuous mode [ 325.211713][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.466152][T11335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.478878][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.488249][T11335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.534468][T11335] veth1_macvtap: left promiscuous mode [ 325.643973][T11335] veth0_macvtap: left promiscuous mode [ 325.652316][T11335] veth1_vlan: left promiscuous mode [ 325.660425][T11335] veth0_vlan: left promiscuous mode [ 326.321767][T13072] __nla_validate_parse: 6 callbacks suppressed [ 326.321786][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 326.391561][T11335] team0 (unregistering): Port device team_slave_1 removed [ 326.434684][T11335] team0 (unregistering): Port device team_slave_0 removed [ 326.859599][ T5836] Bluetooth: hci2: command tx timeout [ 326.919012][T13023] chnl_net:caif_netlink_parms(): no params data found [ 326.973488][T13074] vlan3: entered promiscuous mode [ 326.981366][T13074] vlan3: entered allmulticast mode [ 326.987549][T13074] hsr_slave_1: entered allmulticast mode [ 327.248735][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 327.662302][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.680363][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.698473][T13023] bridge_slave_0: entered allmulticast mode [ 327.716895][T13023] bridge_slave_0: entered promiscuous mode [ 327.818226][T13091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.849367][T13087] lo speed is unknown, defaulting to 1000 [ 327.864490][T13087] hsr0 speed is unknown, defaulting to 1000 [ 327.886137][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.903189][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.914051][T13023] bridge_slave_1: entered allmulticast mode [ 327.927942][T13023] bridge_slave_1: entered promiscuous mode [ 328.002755][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1877'. [ 328.054618][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.104539][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.120615][T13100] lo speed is unknown, defaulting to 1000 [ 328.143078][T13100] hsr0 speed is unknown, defaulting to 1000 [ 328.199159][T13023] team0: Port device team_slave_0 added [ 328.230969][T13023] team0: Port device team_slave_1 added [ 328.536029][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.543129][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.570361][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.593321][T13107] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 328.607074][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.614071][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.708862][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.936791][ T5836] Bluetooth: hci2: command tx timeout [ 328.996673][T13118] pim6reg1: entered promiscuous mode [ 329.002061][T13118] pim6reg1: entered allmulticast mode [ 329.145569][T13023] hsr_slave_0: entered promiscuous mode [ 329.176953][T13023] hsr_slave_1: entered promiscuous mode [ 329.579970][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 329.607184][T13128] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 329.660867][T13131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1884'. [ 329.722849][T13139] xt_bpf: check failed: parse error [ 329.724449][T13128] bond3: entered promiscuous mode [ 329.741287][T13128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.812487][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1888'. [ 329.993380][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 330.011780][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 330.030172][T13151] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 330.031237][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 330.039492][T13151] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1890'. [ 330.057654][T13154] batadv_slave_0: entered promiscuous mode [ 330.063675][T13154] batadv_slave_0: entered allmulticast mode [ 330.132328][T13153] bond4: entered allmulticast mode [ 330.143588][T13153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.376764][T13171] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 330.437844][T13173] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 330.448035][T13023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.475871][T13175] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 330.486591][T13023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.507170][T13023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.526848][T13023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.770827][T13023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.824406][T13023] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.858662][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.865899][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.897154][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.904421][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.006287][T13200] lo speed is unknown, defaulting to 1000 [ 331.014638][T13200] hsr0 speed is unknown, defaulting to 1000 [ 331.043981][ T5836] Bluetooth: hci2: command tx timeout [ 331.124373][T13207] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 331.392071][T13211] lo speed is unknown, defaulting to 1000 [ 331.442470][T13211] hsr0 speed is unknown, defaulting to 1000 [ 331.463755][T13216] vlan2: entered promiscuous mode [ 331.478846][T13216] bond0: entered promiscuous mode [ 331.488989][T13216] bond_slave_0: entered promiscuous mode [ 331.504542][T13216] bond_slave_1: entered promiscuous mode [ 331.522043][T13216] bond2: entered promiscuous mode [ 331.530801][T13216] !: entered promiscuous mode [ 331.546905][T13216] bond0: (slave vlan2): Opening slave failed [ 331.919146][T13229] __nla_validate_parse: 4 callbacks suppressed [ 331.919166][T13229] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1913'. [ 332.037680][T13023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.114632][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1914'. [ 332.151265][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1914'. [ 332.187325][T13231] netlink: 4612 bytes leftover after parsing attributes in process `syz.5.1914'. [ 332.266831][T13023] veth0_vlan: entered promiscuous mode [ 332.292561][T13023] veth1_vlan: entered promiscuous mode [ 332.354126][T13023] veth0_macvtap: entered promiscuous mode [ 332.408770][T13023] veth1_macvtap: entered promiscuous mode [ 332.495107][T13023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.519636][T13023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.564394][T13023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.604283][T13023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.633991][T13023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.646158][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 332.664446][T13023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.675591][T13251] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1918'. [ 332.705713][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 332.714634][T13251] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 332.782526][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 332.791698][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1919'. [ 333.086430][T10713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.095128][ T5836] Bluetooth: hci2: command tx timeout [ 333.117315][T10713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.150348][T13264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.273680][T11332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.306781][T11332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.513701][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1923'. [ 333.552400][T13276] openvswitch: netlink: Flow key attr not present in new flow. [ 334.072316][T11332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.229495][T11332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.358413][T11332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.502055][T11332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.643671][T11332] bridge_slave_1: left allmulticast mode [ 334.649838][T11332] bridge_slave_1: left promiscuous mode [ 334.655762][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.666588][T11332] bridge_slave_0: left allmulticast mode [ 334.672257][T11332] bridge_slave_0: left promiscuous mode [ 334.678351][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.099868][T11332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.112548][T11332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.128876][T11332] bond0 (unregistering): Released all slaves [ 335.441589][T11332] hsr_slave_0: left promiscuous mode [ 335.456758][T11332] hsr_slave_1: left promiscuous mode [ 335.463028][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.482467][T11332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.530193][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.552748][T11332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.680862][T11332] veth1_macvtap: left promiscuous mode [ 335.707475][T11332] veth0_macvtap: left promiscuous mode [ 335.713326][T11332] veth1_vlan: left promiscuous mode [ 335.720061][T11332] veth0_vlan: left promiscuous mode [ 336.137227][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.150724][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.159208][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.177189][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.196762][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.626203][T11332] team0 (unregistering): Port device team_slave_1 removed [ 336.668153][T11332] team0 (unregistering): Port device team_slave_0 removed [ 337.125640][T13329] lo speed is unknown, defaulting to 1000 [ 337.146148][T13329] hsr0 speed is unknown, defaulting to 1000 [ 337.259737][T13347] netlink: 'syz.3.1941': attribute type 13 has an invalid length. [ 337.338422][T13353] netlink: 'syz.1.1943': attribute type 2 has an invalid length. [ 337.431405][T13361] sctp: [Deprecated]: syz.4.1945 (pid 13361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.431405][T13361] Use struct sctp_sack_info instead [ 337.462056][T13347] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.495229][T13347] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.503752][T13347] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.516336][T13347] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.572875][T13363] netlink: 'syz.5.1946': attribute type 1 has an invalid length. [ 337.583677][T13363] netlink: 'syz.5.1946': attribute type 2 has an invalid length. [ 337.840005][T13353] lo speed is unknown, defaulting to 1000 [ 337.885541][T13353] hsr0 speed is unknown, defaulting to 1000 [ 337.901513][T13370] __nla_validate_parse: 4 callbacks suppressed [ 337.901534][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 338.180590][T13329] chnl_net:caif_netlink_parms(): no params data found [ 338.295589][ T5836] Bluetooth: hci2: command tx timeout [ 338.401995][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'. [ 338.462448][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'. [ 338.707082][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.726340][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.733634][T13329] bridge_slave_0: entered allmulticast mode [ 338.756713][T13329] bridge_slave_0: entered promiscuous mode [ 338.779708][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.788664][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.815574][T13329] bridge_slave_1: entered allmulticast mode [ 338.823114][T13329] bridge_slave_1: entered promiscuous mode [ 338.862210][T13409] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1956'. [ 338.959934][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.983117][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.097611][T13329] team0: Port device team_slave_0 added [ 339.128555][T13329] team0: Port device team_slave_1 added [ 339.266656][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.280355][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.341326][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.360452][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.368702][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.420195][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.449187][T13435] ipt_ECN: cannot use operation on non-tcp rule [ 339.507974][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 339.621661][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1965'. [ 339.636579][T13439] batman_adv: batadv0: Adding interface: ip6gretap1 [ 339.658875][T13439] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.687342][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 339.723755][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'. [ 339.744500][T13439] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 339.811980][T13329] hsr_slave_0: entered promiscuous mode [ 339.842396][T13329] hsr_slave_1: entered promiscuous mode [ 339.859713][T13442] syzkaller0: entered allmulticast mode [ 339.881918][T13452] batman_adv: batadv0: Removing interface: ip6gretap1 [ 339.947341][T13451] syzkaller0 (unregistering): left allmulticast mode [ 340.379534][ T5840] Bluetooth: hci2: command tx timeout [ 340.554912][T13476] x_tables: duplicate underflow at hook 1 [ 340.682164][T13481] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1972'. [ 340.704243][T13487] IPVS: Error connecting to the multicast addr [ 340.725372][T13481] netlink: get zone limit has 8 unknown bytes [ 340.963432][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1977'. [ 340.963822][T13503] lo speed is unknown, defaulting to 1000 [ 341.119707][T13503] hsr0 speed is unknown, defaulting to 1000 [ 341.252581][T13329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.297021][T13329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.868634][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.876189][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.313694][T13516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.365428][T13516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.455537][ T5840] Bluetooth: hci2: command tx timeout [ 342.727801][T13516] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.748899][T13516] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.757680][T13516] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.766090][T13516] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.826040][T13516] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.834573][T13516] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.843220][T13516] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.851987][T13516] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.868657][T13329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.880698][T13329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.902228][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 343.064451][T13530] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1984'. [ 343.179327][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.239804][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.299835][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.307109][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.345424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.352664][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.632245][T13553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1992'. [ 343.649749][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1991'. [ 343.793031][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'. [ 343.950035][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.055510][T13329] veth0_vlan: entered promiscuous mode [ 344.141788][T13329] veth1_vlan: entered promiscuous mode [ 344.233411][T13329] veth0_macvtap: entered promiscuous mode [ 344.270304][T13329] veth1_macvtap: entered promiscuous mode [ 344.322269][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.403535][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.452297][T13329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.495128][T13329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.517558][T13329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.527145][T13329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.538677][ T5836] Bluetooth: hci2: command tx timeout [ 344.653160][T13593] lo speed is unknown, defaulting to 1000 [ 344.675664][T13592] x_tables: duplicate underflow at hook 2 [ 344.777831][T13593] hsr0 speed is unknown, defaulting to 1000 [ 344.819979][T11336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.848437][ T5840] block nbd2: Receive control failed (result -32) [ 344.858797][T11336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.918128][T13603] xfrm2: entered promiscuous mode [ 344.924442][T13603] xfrm2: entered allmulticast mode [ 344.960259][T13603] xt_hashlimit: size too large, truncated to 1048576 [ 345.107718][T11332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.118823][T13609] openvswitch: netlink: Unknown key attributes 2 [ 345.142633][T11332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.171873][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 345.720481][T13631] dvmrp1: left allmulticast mode [ 346.031333][T13641] lo speed is unknown, defaulting to 1000 [ 346.041148][T13651] netlink: 336 bytes leftover after parsing attributes in process `syz.5.2011'. [ 346.152558][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 346.157951][T13647] $H: left promiscuous mode [ 346.164582][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2014'. [ 346.168274][T13647] 8021q: adding VLAN 0 to HW filter on device $H [ 346.192351][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.242447][T13647] 0X: left allmulticast mode [ 346.251003][T13647] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 346.300881][T13641] hsr0 speed is unknown, defaulting to 1000 [ 346.444349][T13663] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2016'. [ 346.479316][T13663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2016'. [ 346.501088][T13663] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 346.760834][T11336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.135770][T11336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.192747][T11336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.278237][T11336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.411570][T11336] bridge_slave_1: left allmulticast mode [ 347.417612][T11336] bridge_slave_1: left promiscuous mode [ 347.423456][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.434679][T11336] bridge_slave_0: left allmulticast mode [ 347.440697][T11336] bridge_slave_0: left promiscuous mode [ 347.447148][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.783368][T11336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.794440][T11336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.805527][T11336] bond0 (unregistering): Released all slaves [ 348.077305][T11336] hsr_slave_0: left promiscuous mode [ 348.083286][T11336] hsr_slave_1: left promiscuous mode [ 348.089262][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.125101][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.154132][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.171433][T11336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.186704][T13687] Bluetooth: MGMT ver 1.23 [ 348.196366][T13687] __nla_validate_parse: 1 callbacks suppressed [ 348.196384][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 348.261328][T11336] veth1_macvtap: left promiscuous mode [ 348.275521][T11336] veth0_macvtap: left promiscuous mode [ 348.282047][T11336] veth1_vlan: left promiscuous mode [ 348.287781][T11336] veth0_vlan: left promiscuous mode [ 348.314471][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 348.336061][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 348.746741][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.759190][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.767509][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.780043][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.795824][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.093614][T11336] team0 (unregistering): Port device team_slave_1 removed [ 349.140045][T11336] team0 (unregistering): Port device team_slave_0 removed [ 349.532513][T13687] geneve2: entered promiscuous mode [ 349.581837][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 349.624864][T13691] lo speed is unknown, defaulting to 1000 [ 349.665231][T13691] hsr0 speed is unknown, defaulting to 1000 [ 349.666064][T13706] lo speed is unknown, defaulting to 1000 [ 349.712826][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 349.723428][T13706] hsr0 speed is unknown, defaulting to 1000 [ 349.737764][T13710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2027'. [ 350.388968][T13706] chnl_net:caif_netlink_parms(): no params data found [ 350.587735][T13735] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2031'. [ 350.597409][T13710] xt_hashlimit: size too large, truncated to 1048576 [ 350.692804][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'. [ 350.855081][ T5836] Bluetooth: hci2: command tx timeout [ 351.098593][T13745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2031'. [ 351.420450][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.458546][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.463187][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2035'. [ 351.478444][T13706] bridge_slave_0: entered allmulticast mode [ 351.499321][T13706] bridge_slave_0: entered promiscuous mode [ 351.541137][T13748] lo speed is unknown, defaulting to 1000 [ 351.544646][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.554471][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.595232][T13706] bridge_slave_1: entered allmulticast mode [ 351.603378][T13706] bridge_slave_1: entered promiscuous mode [ 351.687125][T13748] hsr0 speed is unknown, defaulting to 1000 [ 351.710554][T13764] netlink: 'syz.3.2035': attribute type 303 has an invalid length. [ 351.802087][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.848794][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.072389][T13706] team0: Port device team_slave_0 added [ 352.081805][ T30] audit: type=1800 audit(1748084616.372:7): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2036" name="memory.events" dev="tmpfs" ino=650 res=0 errno=0 [ 352.127207][T13775] lo speed is unknown, defaulting to 1000 [ 352.135266][T13775] hsr0 speed is unknown, defaulting to 1000 [ 352.262643][T13706] team0: Port device team_slave_1 added [ 352.401594][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.418336][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.474819][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.506953][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.514042][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.575765][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.890056][T13706] hsr_slave_0: entered promiscuous mode [ 352.928874][T13706] hsr_slave_1: entered promiscuous mode [ 352.935226][ T5836] Bluetooth: hci2: command tx timeout [ 353.175805][T13821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.329269][T13829] nbd: must specify a size in bytes for the device [ 353.340082][T13830] nbd: must specify a size in bytes for the device [ 353.867785][T13706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.886737][T13706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.906216][T13706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.924846][T13706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 354.223602][T13706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.344888][T13706] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.391205][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.398453][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.483157][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.490471][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.719519][T13855] tipc: Enabled bearer , priority 0 [ 354.898326][T13854] syzkaller0: entered promiscuous mode [ 354.903944][T13854] syzkaller0: entered allmulticast mode [ 354.935754][T13854] tipc: Resetting bearer [ 355.025846][ T5836] Bluetooth: hci2: command tx timeout [ 355.084671][T11336] tipc: Resetting bearer [ 355.106096][T13853] tipc: Resetting bearer [ 355.996645][T13888] __nla_validate_parse: 4 callbacks suppressed [ 355.996664][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 357.090132][T13853] tipc: Disabling bearer [ 357.096147][ T5836] Bluetooth: hci2: command tx timeout [ 357.128610][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.262104][T13706] veth0_vlan: entered promiscuous mode [ 357.351585][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'. [ 357.396543][T13901] gretap0: left allmulticast mode [ 357.405523][T13901] gretap0: left promiscuous mode [ 357.410747][T13901] bridge0: port 3(gretap0) entered disabled state [ 357.429818][T13901] bridge_slave_1: left promiscuous mode [ 357.436266][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.445963][T13901] bridge_slave_0: left allmulticast mode [ 357.451649][T13901] bridge_slave_0: left promiscuous mode [ 357.463553][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.630265][T13706] veth1_vlan: entered promiscuous mode [ 357.681213][T13905] vlan0: entered promiscuous mode [ 357.849582][T13706] veth0_macvtap: entered promiscuous mode [ 358.021168][T13706] veth1_macvtap: entered promiscuous mode [ 358.137262][T13920] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2075'. [ 358.169405][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.216836][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.261114][T13706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.273826][T13706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.293889][T13706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.338166][T13706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.608373][T13940] lo speed is unknown, defaulting to 1000 [ 358.676990][T13940] hsr0 speed is unknown, defaulting to 1000 [ 358.753350][T11332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.761791][T11332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.843473][T13935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2080'. [ 358.854897][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 358.904309][T11333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.922953][T11333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.220290][T13966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'. [ 359.756944][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 359.773600][T13987] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2092'. [ 360.163588][T13980] tipc: Disabling bearer [ 360.345635][T11333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.552033][T11333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.610967][T11333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.672258][T11333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.782757][T11333] bridge_slave_1: left allmulticast mode [ 360.790416][T11333] bridge_slave_1: left promiscuous mode [ 360.796742][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.807030][T11333] bridge_slave_0: left allmulticast mode [ 360.812686][T11333] bridge_slave_0: left promiscuous mode [ 360.818749][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.111242][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.122241][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.133151][T11333] bond0 (unregistering): Released all slaves [ 361.357767][T11333] hsr_slave_0: left promiscuous mode [ 361.363761][T11333] hsr_slave_1: left promiscuous mode [ 361.373300][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.381173][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.389440][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.397147][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.420409][T11333] veth1_macvtap: left promiscuous mode [ 361.426291][T11333] veth0_macvtap: left promiscuous mode [ 361.431875][T11333] veth1_vlan: left promiscuous mode [ 361.438576][T11333] veth0_vlan: left promiscuous mode [ 361.672025][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2095'. [ 361.682740][T14001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.810552][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 362.182677][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.194279][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.205774][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.216941][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.233918][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.574296][T11333] team0 (unregistering): Port device team_slave_1 removed [ 362.747831][T11333] team0 (unregistering): Port device team_slave_0 removed [ 363.169443][T14001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2095'. [ 363.179457][T14001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2095'. [ 363.214302][T14012] lo speed is unknown, defaulting to 1000 [ 363.230715][T14012] hsr0 speed is unknown, defaulting to 1000 [ 363.428011][T14024] netlink: 'syz.1.2098': attribute type 39 has an invalid length. [ 363.457306][ T5839] IPVS: starting estimator thread 0... [ 363.585058][T14028] IPVS: using max 27 ests per chain, 64800 per kthread [ 363.709222][T14040] netlink: 'syz.5.2101': attribute type 4 has an invalid length. [ 363.718881][T14041] netlink: 'syz.5.2101': attribute type 4 has an invalid length. [ 363.746829][T14012] chnl_net:caif_netlink_parms(): no params data found [ 363.973832][T14054] xt_hashlimit: size too large, truncated to 1048576 [ 364.087819][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.125495][T14012] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.142683][T14012] bridge_slave_0: entered allmulticast mode [ 364.166431][T14012] bridge_slave_0: entered promiscuous mode [ 364.289957][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.303455][T14012] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.311120][ T5840] Bluetooth: hci2: command tx timeout [ 364.323277][T14012] bridge_slave_1: entered allmulticast mode [ 364.335856][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.355877][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.363670][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.372093][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.380211][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.388854][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.397198][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.406081][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.412225][T14012] bridge_slave_1: entered promiscuous mode [ 364.413923][T14069] openvswitch: netlink: IP tunnel dst address not specified [ 364.641282][T14012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.681362][T14012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.703114][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'. [ 364.749325][T14079] netlink: 'syz.3.2111': attribute type 3 has an invalid length. [ 364.849821][T14012] team0: Port device team_slave_0 added [ 364.890685][T14012] team0: Port device team_slave_1 added [ 365.081591][T14012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.111598][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.147916][T14012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.222168][T14104] lo speed is unknown, defaulting to 1000 [ 365.237243][T14104] hsr0 speed is unknown, defaulting to 1000 [ 365.245181][T14012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.252403][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.290410][T14012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.347485][T14110] netlink: 'syz.1.2120': attribute type 2 has an invalid length. [ 365.555806][T14125] [ 365.558193][T14125] ====================================================== [ 365.565232][T14125] WARNING: possible circular locking dependency detected [ 365.572283][T14125] 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 Not tainted [ 365.579422][T14125] ------------------------------------------------------ [ 365.586461][T14125] syz.4.2125/14125 is trying to acquire lock: [ 365.592541][T14125] ffffffff8f453018 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 365.601726][T14125] [ 365.601726][T14125] but task is already holding lock: [ 365.609108][T14125] ffff888032f7b770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 365.618381][T14125] [ 365.618381][T14125] which lock already depends on the new lock. [ 365.618381][T14125] [ 365.628786][T14125] [ 365.628786][T14125] the existing dependency chain (in reverse order) is: [ 365.637808][T14125] [ 365.637808][T14125] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 365.645817][T14125] lock_acquire+0x120/0x360 [ 365.650857][T14125] _raw_spin_lock_bh+0x36/0x50 [ 365.656151][T14125] nr_rt_ioctl+0x193/0xd50 [ 365.661108][T14125] sock_do_ioctl+0xdc/0x300 [ 365.666151][T14125] sock_ioctl+0x576/0x790 [ 365.671013][T14125] __se_sys_ioctl+0xf9/0x170 [ 365.676136][T14125] do_syscall_64+0xf6/0x210 [ 365.681168][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.687588][T14125] [ 365.687588][T14125] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 365.695470][T14125] lock_acquire+0x120/0x360 [ 365.700506][T14125] _raw_spin_lock_bh+0x36/0x50 [ 365.705905][T14125] nr_rt_device_down+0xa9/0x720 [ 365.711274][T14125] nr_device_event+0x137/0x150 [ 365.716661][T14125] notifier_call_chain+0x1b6/0x3e0 [ 365.722316][T14125] __dev_notify_flags+0x18d/0x2e0 [ 365.727874][T14125] netif_change_flags+0xe8/0x1a0 [ 365.733340][T14125] dev_change_flags+0x130/0x260 [ 365.738716][T14125] dev_ioctl+0x7b4/0x1150 [ 365.743580][T14125] sock_do_ioctl+0x22c/0x300 [ 365.748693][T14125] sock_ioctl+0x576/0x790 [ 365.753543][T14125] __se_sys_ioctl+0xf9/0x170 [ 365.758658][T14125] do_syscall_64+0xf6/0x210 [ 365.763685][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.770189][T14125] [ 365.770189][T14125] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 365.778190][T14125] validate_chain+0xb9b/0x2140 [ 365.783478][T14125] __lock_acquire+0xaac/0xd20 [ 365.788697][T14125] lock_acquire+0x120/0x360 [ 365.793742][T14125] _raw_spin_lock_bh+0x36/0x50 [ 365.799032][T14125] nr_rt_ioctl+0x390/0xd50 [ 365.803972][T14125] sock_do_ioctl+0xdc/0x300 [ 365.809086][T14125] sock_ioctl+0x576/0x790 [ 365.813932][T14125] __se_sys_ioctl+0xf9/0x170 [ 365.819050][T14125] do_syscall_64+0xf6/0x210 [ 365.824080][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.830493][T14125] [ 365.830493][T14125] other info that might help us debug this: [ 365.830493][T14125] [ 365.840714][T14125] Chain exists of: [ 365.840714][T14125] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 365.840714][T14125] [ 365.854589][T14125] Possible unsafe locking scenario: [ 365.854589][T14125] [ 365.862030][T14125] CPU0 CPU1 [ 365.867387][T14125] ---- ---- [ 365.872746][T14125] lock(&nr_node->node_lock); [ 365.877512][T14125] lock(nr_node_list_lock); [ 365.884639][T14125] lock(&nr_node->node_lock); [ 365.891923][T14125] lock(nr_neigh_list_lock); [ 365.896605][T14125] [ 365.896605][T14125] *** DEADLOCK *** [ 365.896605][T14125] [ 365.904742][T14125] 2 locks held by syz.4.2125/14125: [ 365.910017][T14125] #0: ffffffff8f453078 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 365.919532][T14125] #1: ffff888032f7b770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 365.929225][T14125] [ 365.929225][T14125] stack backtrace: [ 365.935131][T14125] CPU: 1 UID: 0 PID: 14125 Comm: syz.4.2125 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 365.935154][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.935171][T14125] Call Trace: [ 365.935179][T14125] [ 365.935188][T14125] dump_stack_lvl+0x189/0x250 [ 365.935216][T14125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.935238][T14125] ? __pfx__printk+0x10/0x10 [ 365.935254][T14125] ? print_lock_name+0xde/0x100 [ 365.935270][T14125] print_circular_bug+0x2ee/0x310 [ 365.935289][T14125] check_noncircular+0x134/0x160 [ 365.935314][T14125] validate_chain+0xb9b/0x2140 [ 365.935339][T14125] __lock_acquire+0xaac/0xd20 [ 365.935363][T14125] ? nr_rt_ioctl+0x390/0xd50 [ 365.935379][T14125] lock_acquire+0x120/0x360 [ 365.935401][T14125] ? nr_rt_ioctl+0x390/0xd50 [ 365.935419][T14125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 365.935439][T14125] ? nr_rt_ioctl+0x390/0xd50 [ 365.935455][T14125] _raw_spin_lock_bh+0x36/0x50 [ 365.935479][T14125] ? nr_rt_ioctl+0x390/0xd50 [ 365.935495][T14125] nr_rt_ioctl+0x390/0xd50 [ 365.935516][T14125] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 365.935536][T14125] ? apparmor_capable+0x137/0x1b0 [ 365.935566][T14125] ? capable+0x89/0xe0 [ 365.935582][T14125] ? nr_ioctl+0x1b1/0x3b0 [ 365.935615][T14125] sock_do_ioctl+0xdc/0x300 [ 365.935635][T14125] ? __pfx_sock_do_ioctl+0x10/0x10 [ 365.935653][T14125] ? __lock_acquire+0xaac/0xd20 [ 365.935682][T14125] sock_ioctl+0x576/0x790 [ 365.935699][T14125] ? __pfx_sock_ioctl+0x10/0x10 [ 365.935717][T14125] ? __fget_files+0x3a0/0x420 [ 365.935739][T14125] ? __fget_files+0x2a/0x420 [ 365.935763][T14125] ? bpf_lsm_file_ioctl+0x9/0x20 [ 365.935785][T14125] ? __pfx_sock_ioctl+0x10/0x10 [ 365.935801][T14125] __se_sys_ioctl+0xf9/0x170 [ 365.935820][T14125] do_syscall_64+0xf6/0x210 [ 365.935839][T14125] ? clear_bhb_loop+0x60/0xb0 [ 365.935858][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.935874][T14125] RIP: 0033:0x7fc49078e969 [ 365.935890][T14125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.935905][T14125] RSP: 002b:00007fc491579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.935924][T14125] RAX: ffffffffffffffda RBX: 00007fc4909b5fa0 RCX: 00007fc49078e969 [ 365.935936][T14125] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007 [ 365.935947][T14125] RBP: 00007fc490810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 365.935957][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.935966][T14125] R13: 0000000000000000 R14: 00007fc4909b5fa0 R15: 00007ffd088514a8 [ 365.935984][T14125] [ 365.981166][T14012] hsr_slave_0: entered promiscuous mode [ 366.044390][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2118'. [ 366.048244][T14012] hsr_slave_1: entered promiscuous mode [ 366.375326][ T5840] Bluetooth: hci2: command tx timeout [ 366.558322][T14012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.567061][T14012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.585160][T14012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.594059][T14012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.640663][T14012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.657239][T14012] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.667797][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.674913][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.687845][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.695004][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.824310][T14012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.854853][T14012] veth0_vlan: entered promiscuous mode [ 366.864396][T14012] veth1_vlan: entered promiscuous mode [ 366.886207][T14012] veth0_macvtap: entered promiscuous mode [ 366.895554][T14012] veth1_macvtap: entered promiscuous mode [ 366.909504][T14012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.921334][T14012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.932545][T14012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.941389][T14012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.951157][T14012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.960068][T14012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.986882][T14012] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 367.010897][T11335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.012497][T14012] ieee80211 phy58: Selected rate control algorithm 'minstrel_ht' [ 367.027917][T11335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.047336][T11335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.055580][T11335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.106714][T11333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.780084][T11333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.840641][T11333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.902259][T11333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.987580][T11333] bridge_slave_1: left allmulticast mode [ 370.993281][T11333] bridge_slave_1: left promiscuous mode [ 370.999224][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.009874][T11333] bridge_slave_0: left allmulticast mode [ 371.017805][T11333] bridge_slave_0: left promiscuous mode [ 371.023523][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.173345][T11333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.186719][T11333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.196908][T11333] bond0 (unregistering): Released all slaves [ 371.417746][T11333] hsr_slave_0: left promiscuous mode [ 371.423658][T11333] hsr_slave_1: left promiscuous mode [ 371.429712][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.438593][T11333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.448899][T11333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.458018][T11333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.469825][T11333] veth1_macvtap: left promiscuous mode [ 371.477311][T11333] veth0_macvtap: left promiscuous mode [ 371.482923][T11333] veth1_vlan: left promiscuous mode [ 371.490770][T11333] veth0_vlan: left promiscuous mode [ 371.685669][T11333] team0 (unregistering): Port device team_slave_1 removed [ 371.725203][T11333] team0 (unregistering): Port device team_slave_0 removed