last executing test programs: 1m47.72837285s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 1m30.576850025s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 1m29.552600882s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m24.308242132s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m12.576686627s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 1m11.414345942s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m10.356021208s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 53.751787607s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 52.997433322s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 52.137344077s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 36.778174662s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 36.126816344s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 35.46524817s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 21.162148868s ago: executing program 1 (id=2489): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x22, &(0x7f0000000280)={@local, @empty, @void, {@x25={0x805, {0x2, 0x4, 0x23, "6e8c5eaf1443416a8745408e909c2d7f53"}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffdb, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) 20.951970033s ago: executing program 1 (id=2490): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000200)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x20000000, 0xc000}, 0xc000) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000004000000000100", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000100040063bad47c2fbf2948"], 0x48}}, 0x80) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r8, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000280)={r3, 0x2}, 0x8) 20.831289984s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 20.783602322s ago: executing program 1 (id=2492): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0xa, 0x4) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xd1, 0x0, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x13, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765e"]}]}, 0x28}], 0x1}, 0x300) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1e) 19.919801827s ago: executing program 1 (id=2494): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000800000600150005000000280016"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000800000600150005000000280016"], 0x4c}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020601080000000000000000000000400c000300686173683a69701b050001000700000005000500020000000900020073797a30000000000500040000a3f435ebc735572379010000000c0f078008000640000000002a1ef48049c539"], 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000020601080000000000000000000000400c000300686173683a69701b050001000700000005000500020000000900020073797a30000000000500040000a3f435ebc735572379010000000c0f078008000640000000002a1ef48049c539"], 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x8, 0x7f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x1, 0x1, 0xc}, "98c88d525d244429fa9b9b753a44fe113cddcad3540e69ec7ad32036b0caea9c28a38de92898b2d7c2984519ff5ce910e5dd211d9a0c5d1c9670005919"}}}}}}, 0x0) recvfrom(r6, &(0x7f0000001a40)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x88) openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRES16=r5], 0x10) 19.689277141s ago: executing program 1 (id=2495): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000240)=0xa, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3434}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 19.68223342s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18.43591053s ago: executing program 2 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="8bc8fe2a1b206a391bd0eea51150", @ANYBLOB="d0d1d8225ddc945768c04b8e49921cbeda46fc565096fddc2a63590c3021a4465f498cd09e7d0f75f17e0a7e0bac516f788fca372f3df29dbbd6e2f5ead6216349754c0e8574937b7bfe5f5cba03dce10e557a496071f9b0eb5e31556e106dceb916284331c6ef90702be5c8db93b636a3fba7177efb62e386f268b70ddb1cbc378984e5b5878a9601a25b51c60c67a0c50df6d5f19686752c9eb4c2b444a0665b5cfb9346ef6a05b07d4399e22856a3281385d263c01481a62c931d9274cfc190f4d817c09f42cdea1f0c92b5798daa7ed2b8dc1147318e02ddaddbf5027f35", @ANYBLOB="a784280a554e9148cba0e4e6bb8d755594a3b77b86ca4cbaedf691be57df54518e18812ac9d2b6b44433c8647baeacdf8c50a8400b6b6e7ab8881507c3ef9c83819e1b8cf901b2d86c26f48c8bf5211cb835337f8caae054ea712b0943eabc1e56b50745bf80501ad9509d906b0ae2311df15838c75c519b6b647d1ac94a7b5ceadf3a3f1c41", @ANYRESOCT=r0, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020800cb6bd428f7dd161600000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x380d6a02d22bf966) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="20003d0d150a0103000000000000400002000008aa09973e988fa48600000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) 17.195445715s ago: executing program 1 (id=2497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100039042bbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="0000000000000000200012800800010067726500140002800800140002000000060010004e2200000800040000"], 0x48}}, 0x0) 5.573870716s ago: executing program 0 (id=2527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5.402022327s ago: executing program 0 (id=2528): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) (async) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="a2", 0x1f}], 0x10}, 0x8010) close(r0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffb, 0x1, 0x2}, 0x8) (async) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x4000884, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/242, 0xf2, 0x0, &(0x7f0000000280)=""/212, 0xd4}, &(0x7f0000000080)=0x40) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) sendto$inet(r3, &(0x7f00000005c0)="d6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 32) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010041, 0x0) (rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) tee(r1, r2, 0x2, 0x2) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a10"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.182722661s ago: executing program 0 (id=2529): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a040000001200010000000001"], 0x64}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @host}, 0x10) shutdown(r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x70}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x15, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @generic={0xd, 0x4, 0xb, 0x1, 0xfffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0xef, &(0x7f0000000540)=""/239, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r8, 0x0, 0x1000, 0xe4, &(0x7f0000000640)="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", &(0x7f0000001640)=""/228, 0x8, 0x0, 0x1000, 0x7c, &(0x7f0000001740)="0efd08426729322e130071317c91371c4f50842059e952d7e8d8c4572b039fb13bcd954d54f14413bee0839978fa35b7a982a44bfb99af9d030b072fff8c07386fbdede7eefd5f4a8e1d9cae9b135e6a173800b9df0502108466b8ad30d07a1a0b992202faea1225cd15598b85a9c3c81fd4325288a9fb39fe8dc9fe1e4f2c7206b6386c174ea25ad24a75499b74ed89e62e86f99ec95d046bbbd021321d75ffebd70b9cebf91a7054846565bb48fa3bfa2503953970d9b08df9844d859f43ccc12da6517ed1359518f5b8967cd688ebe8c4adfa129c2e899a1068212ea8d054b530f280c6521eb1ba8050cdfff829ad9636b7e0583bf24e4a78921bbbb24a70243ac57475ebe79a59be05a4564c4f93fc9dcf3f59887837c521a4f385bf67308e0089dfda2bcea85375667e15fc6b77a581870925ca9a95f62545d56cd255a8b711b4f3da495b1031776a7a076e726320417b66b43345c51b4b7053ae608927526b7575aadb146366bba90afdfdd6db1ca7a91992aa945be0cf290a6e61d72747ecf1e35603af0f85e2f067e111763f52a33f271c2990f1575aa091a72b7f7c56371b43fffb2b64448334ee028725d8fa775abf08cea5ee1d29f668735af7f9b0f89b0db73688e428663ff3f73a61ce69202debfe6dd30020bfdec88cc769b732c35ae747787adc24e7e219bcab6c6dd77b66ed696c5302c9953d1aeb37b2e6f52a167bdf5b2e9a46ca8737907f1da6dc7374282bce06e3400d2332d85fca098dd9b009cfe4ebedae4308cb9d058c351296f1a8a6acc6d73fbf556c1bd0f12498ad4ebb13b1cd5620a4d480136588bb544eaaa31b173840b04f09a868017280612884e28fe76158c68c7cece5e57cd977d78cce5ffdb3fc3c2b12d50e9daf11a8b1f4fe0ad7be533b6469a204a41981aaeb38ed7c06a0b31b8c12eff3e849e5fc3f8b2d247c741e0ef4093ba4069696b456f1fb48010bafcafd3165bf7ca131711d7a55a91bf3730377b47b11362216cde34a23b7b3708671f2655d4223ad6785a28c4439a1c7a64a95097a3d7a5150e5b8bdf8b0a57ce598f409143731ab5845e21851e683dda8862ffbf862e672ac0cf8bf4fecb90cbc93cb180dd6d44bdfd383c4f2f961631fd9f8a4a008604ab2cd3bd4c3a6fe6e86fe166537746d5a42660417b7fbc55d81578f8d5564457e875a4f8da6f605ff17ceb2c08f335dd6acf51ac31f8e02b191feb5f360f4b8956e1e3167de6b071e267a6a8001ac4d150bda01b766fa2da60672a2a928d27914549230bb1ac8a56db4788039d575594cd0925fde1236d817d12a85071a5e664c692777a540616a418f6a7e47b79b2e2ee9022acb9cd65d64726b73072f639557bdd91b360dff3e76d3422d8123dde85e6a03bec7a02667c2f568615a466eb963ff0bc5c9a96eca921f00eb27b1a6bcf6a78701fcbdf3dc09c169cde20b9c5c0aa5d0a0a1201f8c71fad17d976e535adf23a4a7067786749d3523d2be0f4737a3b4ff006ec360cd6183dfb8c1306772187d7627221b3b20db926de02f21e2e0db31bdccf280244ec7271794a9788c162b73b170cb6d02259f46e256e9500e5103b31f6943efee95e6f29e21e7cbbfbfc22348ce3a37c356f5cc6a83361d07398327a1cba95d12c005e5c5c70fc5f9c39ead02e1ebcecb96fc8d584c014c3bfd15a11f3d02fa296f18c720342d6f1bd0e7ad92ab5a3527c2c2081be66b2d9d1808a6c08ef82a9a8a5aa09d7d4915cc12a6006fce1941e5be91b238acd085c7f66a08563bac43a6c71ade827b514e2fb89f5f3e96f2ee25e2e9a1130926ccb73c53abfd78fc45beff8bd3be9a33a2883e8e7bc24af54a3b1300757285f9a9a57670ac07efcbbd2af6fa0f2888300133f49f28568c45a8652773ac19e832ffaab9c2fd353420d3c0b806738676f566538d392014d61dd90401f64e56128d0c5efec3386b71c0b7260ee23311fa63c0255a30d736e45c3d5051b4c0eb42c1f02c0a71905e1c91e13531dcf3e3cfbaaa8a617ce92cb882a42370425c74521d740a774af8fd8f88e2d4cbaeca4018dc34a912aa0abce35d90fcdb01167c14952228b13e05dffa8ac53d46e93c729ce8177ab223e2a777f5f2584091cc4346a61b8fe16739302ae8e1e752720932718145df13c7fc67344ee21cbd9845638995afb47b22c6d7e4d75459677153205bc1c2fae52555d5c914d3a22372f647c6c99637e0fc6896f958f589b2e643a2f3a8d69203e0746bce90f224edec637182cf9fba96f4abed2036b373f74674974199d8bba0604aff31f114afca797041698291c35d3309c0b5f63d6675fcc7cbee81e0663e2268e072e8462bc4440506d00aabf7c80e30d8a5a7bc0bb2d59378ad7329624487e8b88137cc0210c34ad413f19d8b659339b51f38a6f3ea9759f11ecbaa8b36ebfc69c8fd8a07741290202969eb85adc5ca74ffd24b26e3cea03863e055e1ebd487d31a314d1c321353bfa8b9f051fedac5ad51d507b35d265794530b9fde2d8f691a1bf9b478e3e0cb5634bdbd43f4b5e63a692e78523585b97a90f9b17f9b29b5723119fe161b6f8d3a8b885eda038be5e4cdf4ae5dfcc30f7491db96a9dde06b36af3b3db31a641eef73786fccfc0b36b0181237b93fcb6edec2d1fe5759f63342e00f5b965c99597ebe0d51150e4c5ec2fb76af143b9e370a740b0ad052d8f654b600325066eb6e4dc5972656d7ea2957ab2f133c26d36c8e36d23ea097f065bd1e4d0de37f5fef7cabac1ee22542bd1cd854f88409844ac0ca7a452bc486a710d3f83ca8e938ee6c7f2a2aa84e6e566e29802499eaa7238b84ea8e45b684fbaed03d239cdaa3bae3f9530d5f537b33a365fb677ef926f6237a534451cde7077d30f6f878f5ba9baab1c7161629268cf9a3fece8026ae20e4336867d0edff71ca97f92b53534c01ce0fb22162bea108affcf75744ff58e22923a30311fee5335dd9c04cefeec907551aac6b78101710961f9122902524979071b8588393f9736bfefa2ef552842ef77372867a7a20cd17193468c207b0b9b5408008363a642127d7ce19d28631e6fed40b43eaccba6ff0acab89e437a98e61f59b2a2a374c56f7e89d5300298944ef5dd58cd49442de86f3d1c1042af4f730158368bf426f41ef0dec03c2fe79c6b4435c3ea25ecd475c06105fb2a5b104dded5f9068cab74ec95770abe8ddefaef4952fe15754e65da0568d48d6726e1b675623b651e73b33b4db32fd784243fa0a1417dea9e5079d27b6d7e9e2104facb9755b524c02258f55f62d054292b6ce4a4e1eee1495b773719ce2200e22f38465ae64940d37457523e14913895852188be213f402ecc3938533e174aa16465d5a61ba8b980779322c8fd4090570f17bcb4d2efb4d397a33dc9a764d647a0cffbff124f122a42f92ff31174a843295ea453e9e5b0bc22049ef1b862c169695a677d96bb521cb37f11f2bea5fa349569801da656826366dfc6e091f5693cb976707c05c2de6cbc784be964e681d9e8472b53d6699770ba0323d66bd003e6136843bc04d2c907b5522fd5d3960c59e13fec97514b66853f40efaf86aadd1bc4a7ee4c6d3d07947b9a37bee6371c73561eac6147505db94a5570b09d4b706fd8c04c4845942a2308c177020f37fd31bffbb2be49f04a1ba5894b9d51ac7efeab6415334dd63a499916644aebf7ffab2dcd77eb8bbc4e7886ae9da1e48c80caf4e7593de2765c1e9f441c37b2b596965b1f00e2278d1b4be9472d52a5d542fb390d5ae34b5ffe94cab44cbd6c6caa0b17cda0e721287b0c3adde8ef6885c4add14bf0de841b05af0f67e22af68761bdf9eebc12345e4c538dbcd10b04d7a85c8e0e60aba33e9fc20a9d9fb693815a818fa8fdb7946d6a70699df9ef2ff116fcd5839b236459dd3db2cc80a0c7f8f8670473459460338f84beb45cea9e71e976e2c75f4659f3eedb4a9ebf7974c6ad65b0139dcba53a864bb2540964daf689bbb2c91004a7c34484bd69465f80c97b57fc3414720c2fca17077e91e807fa625841fdca88a7508cf580922eb298103a5df98abd7831634b78af732bcd2f795f169ce432da16f0dac22bb1fc40d1bc10a50aa588aaabcd04ac9871bf79b650e69b9116b666a75c4d3da4eea690230a0e7e682da23cc23ca94a1c01ce1adf6d5ec9435e189720620bef538d0bfd80912b49df69fa221dd439c1d847bb10423138c613cf94d7baeddec3f6a085de4ba53ea7643ac3438b680237653857372b79c90b517b980006b687ad6989810b53d844305b89d7751925060f4251be4903895261c17be0ec4fb2403303c0a70b9088b67ee072e505acdc5745bb018f417eedf356ec308fa38e739732c40e4d7e4b5cd06202ee2cf66e3f33fe87e13fa22f84bf8eb03fe01954c5378f792744757e144443982e951bd41dd5bc367031a55d653c0ef5e7d71aa538f7b712e72202043becb52549458a3a64aa2517ac72898c422be97546edde4ed5f01d6e0f73cea1b382a68743c4f056f167f2c6e07c084ca208a9d28d60e002fc763250705cba12cf187c96bb49a4437eda829de12ee08a016c10312897ec9869e2d915f48f7dd5d8d783d514b1bc54c639c80b24033bb39ea067b4bf1e0e9379fcccebb1e5c393c574e0c8f252b93871b2c27b4278e9912876257c4c685b902ec41567247cb4d075375c407d8e253a9c15ddffe4dbbbe348d5348d411e88343c9e61e34ac822c2c97f72ffd9f82400f8e3f0c0bded7d6f5259b5f59e1191504b7cf6cb1881f7ab17fbc3f205d4505ce459e633c611e2e7579b371ae774ef0fb2e9205ae5e9b66bfacafc1293a37c453b84ba1b1c4c0d088df7af8e454dfd4d7ef9678e6dfbf353079a282d99c8f9fe18fd078c0fe78bb9040bd4a451dc7c50e3e6f884e593141886f00234800592534e7525a58c4d7c2361e5a550d99550952e3106448a3200ac9ab666c5c9d343b9ad068b4ad56e35cecc74689a9b7b590891f3deb6b1b43645b20d189556ebe03b3cc408dea9ccc520e29ec83ed189831b3461164f874ff98abc72458f766e762fd9f0ac6d1234bee6093b4b1bd545391319501c8e85b3175111f0396f4084a9e03664039a4a81e39c9bc4c0fe97e9feda98a64d8a41c94145a392a54fcd133ab6664abf48895195810d89bd3fe2e21412ad175da6dad1b27b9dd67bb9fffd11bb6708a421ea3768946f51a72ca23731efec6e48c8588a9759e8fffa9dbb4bac3c817d8148ce001b8802865a581db31dcf2598662ed07565a00d579403396da08a36902d68b68af0795485e5ea0baaaacb4b05880cd78e41b810271aeea653cfc54f4358a2c703ce42c8843bbdb3982229a9ba748ace941fe951630bbc6f9bd25a7084bacf32ba00d84e5bdf95f646fedcb17f24892b63df94495f25838875dd01f5c6fef77e67ca0ae6dca37e2762f6d012b30690ec801a97cd9d106fdd9199ff4ce16b3081c166b5f189a4f88d4f2823ed035fc5800e15b9117c9db3414122609d6b219ff33b5a79cbd91ef1a828a3598a8ba1e3c53e320ab859da2abe081cb0387b17327286c4fb40c253bcc888215e59c8ebeefa0d0a3203e2518114c6482ac3ed3ef6b5d5f9f9b39ee598af4c9be7b9884899cac5ab3373d688503c7e0ff2190bcc3c40b35ccd3b34628b78187d637356fb13527cf6fb444098798d77efd6400520a458d496cfafcfb5603c93914ebea6d1b69eba56c5ece0b1c576ad963b16a13684725a4d23e526075d88dbecc631691990624", &(0x7f0000002740)="840906fab98aa3d51e724a0c6a7974179eebfff18e91afb32fc0b79397f0464b15d927d517b1c93e69e0ddc0f125ed70c3637bbeb369a3bf32b981cf4b80728b30a1f0bd46d8a54f7f5d1f992553f0857d9bb6f4cd46c66d1a3aaa8effcb616ec115895502e488d4a36e8c41884243b460375bf7ff71b260045099cf", 0x0, 0x0, 0xfffffffc}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000120000000001000021450100", @ANYRES32=0x1, @ANYBLOB="030000000000b41fdfd6c5eb494a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000030000000b00"/24, @ANYRES32, @ANYBLOB], 0x50) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) 4.895773592s ago: executing program 0 (id=2530): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FITHAW(r0, 0xc0045878) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) socketpair(0x3, 0x5, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '\\,\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x78}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x680}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf9e}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc0}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x48044) r5 = socket(0x29, 0x80000, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40402, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000440)=r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r5) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x20, 0xd, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$F2FS_IOC_DEFRAGMENT(r8, 0xc010f508, &(0x7f00000005c0)={0x6, 0x16d}) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x9, 0x1, 0x5a, 0x2956018b530811f4, r2, 0xe540000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r8) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000700)={@loopback, @loopback, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000780)={0x0, @local, @broadcast}, &(0x7f00000007c0)=0xc) getsockopt$inet6_mreq(r5, 0x29, 0x28, &(0x7f0000000800)={@mcast2, 0x0}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x80, 0x1, @loopback, @mcast1, 0x20, 0x700, 0x5, 0xffff03b7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0xffffffff, 0x10000, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x66, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x12, [@broadcast, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000f80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000a00)={0x540, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "7d7798eea7b6d2950276100c02f88cef7984a962cdc0856f4a706a32c2e87d913415781f11c687457c3865c7049e1cea029c67d328fd05fb5603b6f93c1edcd2d0aafa87cd002457175aea839b4e148b475a5cf520ab8a7854a1fba43424bf4208512aa5eea9e6540338cf5476329ef4262313ff785ff2b08d59869cb32b96c634c6d47b1d5afd11fae7924b5d4d1b974df41eb5c876737b38bf664a3cc3934cdb5aee5a46ff9082ec2aea6f85d5c199e3c155c5ce17f62ba45968ac8850555edf1023ec6eb9106ae68f76a81d7604800f2e1ddb8b069c3392ce1e833b8367f5c11eeffbc39ab1ef0137b7b28524be7f77af92d169f3378e"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "04457b82f5da0c80ed6d34555d2c4c7a99c2f2b8b99c1eb8f17e9195142ee4c6d0ba5ae843dfe5ac624f3c5df10a6a866b865ee000fc5801df53ce762c3600ec1ecb30b326e62d57c2a32fb9b424afbaa20440330167c3823c621e1c009520efb9c1924b7938040e82f16eaacb7158a555438861dae48195567654866f98dcd5ecbdfc0348b64df7fccef88dad9a2dd90b22624bbf7fdf456042c5bef09a803044b63e7a9185f00ee2a98babc548775a88388a5c347147297386879058ae2635df57983c436ee06bb51c853366e0c115d8ab86bfb18f22fca56627e7b274c13f"}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "f75ae79941f3662775bfdfeb2246c88cd49ee86e686d9d8fd95188ee93d87353836a32a7eab22972faea3dd6ee46d3cde04dbfcc933c0e4402ca2f51aa002d7460b7e1b349abe137d0a16da457f686aeed26c0144ba2397dd41f9a19978f9dddc3f87124f4cb3adf745c2f60"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "0295eaa236d06b6effdee0ea78b61ccbcede124a4899f4933e890cffb0feeac3f75a4b6d47341baaca5e5895b5a60b47ba631a6a63e1ae5650064af77550ef40b7cf33809443"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[{!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '],}!\xf8&@}}:-\\])[{]\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-**\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x540}, 0x1, 0x0, 0x0, 0xc8000}, 0x4000000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000fc0)) sendmsg$kcm(r5, &(0x7f00000026c0)={&(0x7f0000001000)=@caif=@dgm={0x25, 0x8, 0x8d}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001080)="68026f95a39aa88e2f854e9133a59fe9e6277e08fafe7da6174954098a0c8badab739090bd74c199f623dcb40d61dc25a8f72a7de6d1a5930a126ff4b18f14298572e42ba0720a0d299c8ba633b5a013454f98a6a29edd6d5ec80cf5e2cdb97c4aadcca650e28282fcbf300770b7bd502a29c76dfe56cbafdf91bc54f00b08486265d026709a1e5616bb8eee260603729c41033e01a6c523da575300c41d90df8f83a13a7670310abdb9dc7251522a1c848405772cb2ae1cccec25abc127427cb2c5e5342b82104811800c3e16a2cf3f91593979dce49135abbb3eae13", 0xdd}, {&(0x7f0000001180)="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", 0xff}, {&(0x7f0000001280)="1216a20b42c9a6f834f4113d6f846d9773acced26c787d01b826d62e70401ba528640532728e103531cfb93e126a6991090f28add304eb7e638e5ef6bd2487180ef7843418c1ed48d8e618ef78355eb019c217da272666dea53c564734df07ab161bde2504d20320ddfd53f456f8e1e87b1d763e97ee94b262d0393298407eee182a7b9ff9d7", 0x86}, {&(0x7f0000001340)="389c069225c1aec977350e263dcaf153b6efe07f873f4495527fb00c00430576cb5d3b7c86ef2cdef2d4cd82351e2158f3fd9d589e36f5eed8d72a41a3be79d0e370234ee0a3b9278ee5ae6f1c22221b52901b27fc44", 0x56}, {&(0x7f00000013c0)="03261006cebe764944a2fb332cbb20cae3da0adc8e8e0dfe88a7ded0c4ebe1c6ba049813e7c1ca5261ca38b6a507c514bc672e1d21faf9f911a21cfe080fd2ea1dffdd293259730979004af5c5201c5516b34f3e7a35e1f3f6fbbbc5304ec6359238f6e484f7bc79312e364e7ec192ebdb156ac47d2bf6ec024def7ecb53e603df316e384c6f314aa01b6a68841341ff0317bbbbcf7a57b42eff57307aa2f356231edb073cd09fff9a24211c320faed4c774d191e6ffa4dd919566f3ad930f5417a1a08352efc0d9957f12839207e4b68247a20f457ead2f153963b06cfeb9e5ba20091ac63e59adaed51ad721bdd6e4447f487869c370378baebc7ea121f0b80e0b2f0c664e0470246ce7db01d97885dc0c4639c88dbad5a0229afd9438bd48b90ee6bc40d1fb952ea06bef93fc5101f93427863d977c4d8dfc1f5836924e961679c0444390bd5aa4c339bced212f7678270e6a980be758b481033ea790ad2bb014b021f789b17f89635ad67f866eac778f6428c0b052833f4b923ad590d734f61ddf11bcb11f082a71d15c153fffb4d54ba9ec3905960778105b860dac77473176a5cbf1014911f3406ac0c184b11b04f722c7859f5ffdf65749a83441063209df35bfdabee6bdcd09cbc5a3c756272f3fc80762f72b1721ca5e192ea923c3db8619a62f227c01236b324499e71c3024520f9dcc290f93e0471699c53ae851843e57ecfebffc0c3d1ed37e2d6b9826c63549fafeb904f351a4f3271f962bf736e80d8a3f3e5917111ca88929732b92153b4305de99c5f933863fa1e481d4282b3bd8e5ff0e7bec71dbdcc3125e2033448596e2665ee24e76ccc07e29838b329c892ddd280f542bfaafb42ff9c75b9105baf03eb00488392668341ec2614c28b10fa34bea8b03b44d780237419aa4939b253b000bb5aa31aa4770da6be8291db3b275db46ac0e1008c20620a62a018efb80b52000d2f4400cae059a0e88b94454fadba7be4219902b2ca6c769c62ce14873a4b2ead0aae90abc8796188aca35589d7715779441cc328b32e22c70a826da9642e92187d7aa007b9cade68d3e3f4f005a4b6e6c28a9b7016348a8730eafc555cf3eeca29c8ea2a41181113dc0b0c767b99be9be939a726327862e044cad3fd8f75208ed6d6e5074cd1588e359e6b31e560a44384773ce4e5e605fba6618a874b341a96f45079b2e5a7ee402162f3f7491fc306acf07ba5ea8c257a108673fe2c2f56be3e4f54d94ac4968b710149fec773110ac9ab6da9157c71b1362465cd895e0e366d891b16cd138c99031ba0d5b697e91c8104ff5e4035efc9b5ea244c21d0ee62d04c2910c01aeb15455b1a2aba2aca9b2517ea3678585207c3430d3b8239b5711c558dcbd667b5841fa23ff288460630ad8d55bdc199dd6183ea081028ab11a0d9cb9dc8e11408fa4b7da9c806133eb6a98cbeb6b3b5e3198a8423671c7dfebcd691e0100aa988aaea6188ffa14a9fcd25f6a986e69b5486765eff08f6e1b9315d5b464d17c563051c82734587f277584ee91da82b967fda4147d39c2bc233353cb27bae4e7239b470beb570061b200a67c83256fac88e97d28dc64896e8fb5355d20acae85c85882993e504c6d0234c4faf612f61ed6bc94492550e3f256cad5a5ce3d19333c49ef3b8e8135be95ef5f524a6d8e2fe397eac4753fa33ecfdd7316871cb5622de187cefa2b72a0461d3b59ff72463cfa760ce55b6c92ea52b032ec78e7d88647e76da5e64076040d265bc612d1def5a816fcd496493a2990160e3b831ccbb68586ff36f252f7ddd05e291da47ce3afb86a9133b25b51a06206e0aaa579f1054ae6eadcfc3d12188621045e954ba8c7145eb690ef8b33adff7aa7bb6a262005823f139dbd8d68a5e5afd4e1084097b4a9c7d978a2bd7642a0ae4d2eef0c7630a0f43be4637e930d2b8f5bfd82291e2d8f96aaf6d141263e4d549d341f2837f0bdc6a92ef0441e25574d48cfd084d434b4cda430d817479f75efa1334a6bdf0ca7ba167afc44a6ed378e1248731c9b7a93f6b008e403357667053566ed78c80c14e6ad1904e9d19f6e3aad7bd1e5c477baceeaef0eddee670b290231a7931f8fa4b286218447e3c4fafe4be9c7093f9fa15a4ab402bed657e873ffed777fa217bf3947b7e1f1b3b8ba58275e30671f2ab221e5a27ab57006c4fe62ecafb17d91600cc042d55efdfe4a15585e4e0cfe7626c71b1bb0b561ae7098e75d3a52b1231f5559da90171094100a537c174640bedb9b7eb31fbf1719bff34b8ebe9652d8444e7eb315231faa2d0b4618195a48d461399d7e1bd54572f9f8f97aff82d3b6b73e3dc285cc56d03a1fb408cd8d92ec39252b981e80b339b86d23fd34a2002a640595cc6531976e15fade330ecd2447094bce93b3be01ca208a5939035803bf16da029b5fe464e7770e82b88b5c2551f6920e8a7e8d576055a497cd277f6b8cd03d67293f5a4bf19bd023f9439db2f54c38fbab71673a398fcfa31926e13d7be99196d936377c6b4647c64a5a06af85aea9fdbdf7842f83962e6fae7ae6ca4c0b3aefdfceec55b6240057625ef5ed78086df21caf68494faf7d01d0462793465e946c015b26b96ed5cc5efa2e18485a3a1c29ef24ca40a0aa1f45d798e3fcc544dbd17006169de877e811f00ba2450a43d581310e66c382b10db6eb920b6093bb4c1599bb2deecc94fd568ec5a74ae7156ece2c4eb879554be2db1f2fed92142c4cc2e926872599e98d4e2c3dcb56aaf13d7d3889db73381d6329cd4085fdc53b4530321147cc2c597c88db6222859256c0d0d3dc8622b23c1543a1e1c24ce217a0c0fece9cb2afae9e736751fbb41f59756e404087fac0e03d036e6423a959af62b3f8f0185571c7a1181735c25bd07299997adc6cade4717baeb3c22213c46c5bc301a7c8249ebd43a940943e5e851bf62afdbdbc5460df2731fef57d85912a8f8f7764932c434efa66c9da85c634a0a8486ec0317da2e2d4b9d679d02f079382d30be1d783fbf9d27d763eb80dafe6297d4c25761d62e6dad5c1a18934a617031856900c650e97096c05f89182875bd667c64e1cdb5e647c5b91e177cb6a3d6e495e435e4d8a5f9e5ff3656fab6eb0aaffe1a83da1e48d351b0dc28fa39af870f1925ba986a143637b4328895a5ffed8c34b0757bac52453f6885e35d83dd1938256a032565dd2f11d102f73af86084339df7f81d66b1cd29ba70a52261824ee41d371d8f610babe71123c896ab3a57ef667b7f1e275fc21da1c6f398171aa7434f95e415325f2f3343a0fe77409567ae5418fff2979425411d1c0ffca2fc2831f695809adf0310220749ba773d1ca263b01df9ecdbc13f1148daa1701b0c637817fa63c9dc4e9a91e13dd2956deb1903fcb90115a19296881f85d090519e9d5094c387b2c41623d3c33b68e013c140a1fc7bfd95c148b99d9b32c8bd7e01bc7d8c2ec088bb02ac37689a929d20587675e6d2984fef7a9a575f8d66234f049811b05f8462618cd9e2527af089ae66f7aa200f91f2c37affa4f0e4e891c15ab14727e79f5244ec37be2bc2fa91dedac9fbfd10f1988a13fae104cfec288dcd2ca2c5f66a41bbff86bfed97360fd1856a227cbafe5101373e38cb1973a4ea5f8d5b008ae841d3cf184fc3d3ef5ccd7327b48117f80f3903a369515fd5cca8ba91679b4de41afd818b6bc63cd741f24a430c360f153c98e2d35718497450022337e1f2b1a340f955d2c084a4f05e873495fb15eeb54210e3f975ce136f0edc2397492e793b4af175dd3a91536bc8e210f13d3c7088ddc0b69943c32b13c202ccba381835aec1daa0ff162b339f3c07889643698f46aaa6e85e399ef5ad93165875b724044ac80f7c9271cb4b1e4111b19c7cd417b15a80cf3a260c7b0e3afb2ea88d0320c5f2dc4411cff479fd01078ec12dac19b555488ca1e0dc334fa135b5cf5fe032f5ca4e7409fa175bba9303887d1acd59d0788a8f41479c16816fbf5894835827535865377ef27b43af1994c7ebb21b85f68494290e80c5b7316329d6bb5d2e843d6ddc6815846c489ace2d2cfe2f6f836b4accbaab35dc6b5f48d4313e5033438e763844d9e47ad0e02f8a5a02ae5d61cfca90cb638487883d17793e77e5910a03f79140274d26cc9aaf9443d1fb621e6bd2ef16c6ea5691501eb50a42f7d2cd0b67d0d0e8909d8da240deb5306a4602228a8319c237f0dcb3aa386af0be3dcd5912e9417a4f77719b1b7e3f6c72603519fc6a9604a1f7abdb6fdfbf0231306bda8570b4a30d61656b220c3bc0a4f900c6873b95d1acf2cd377b02c40c4d5c6ca26067e4c41a8b7ed06009bc2bb6327872e544e8db69777d8f09a7abaa3d7a41cc32056461a3b28ca03fd6b702b482fa2a16d354ec6fd753d57074560f13a9aae84b70dbe72a43c049004df3d2a86e202cb771d7491a444861188b59dfc415c9c5174a537a98dd127b20ce4e63ab1b21948fbd668d950dee85ca8f17b5132935a3a399a91b375866d4fa9aa0e308fd89094cfb44a978acfc99336a35bb7d49563959546a728d172de34259081678f6e7f9a45ab42800ea11ddb47416a7232be9432bd055da56dcf13b3aeede66169cf31f6a06e2c74852e670774f15788aebab700b6247d0a6056364cd80d0ec4eb1c9399b4c09f8662885377dfeb663d8eaa7c291383aac0ce091f94f03990765dc93174948b62e63102901f6c88f635fba8d408261e76aa6a495ce90bb34188e452bac4cf14f9a6e2eb0c79b5e8f3415d548ecf65ae524e0e9d454ecff3573bb2d5f0020c822ccb36d93718ec61d53b2eb53ea6b3b8bd150760eeb6490f8649d1df6425f969b9b06bf6e823a8952c1bbd26e8a09c72c68f8e8bd081a926ac9c0991fca47cc9839d0ee89da0ec145fe119d2ae6e5a500c915b137bab66068551b00a4a106140fa05ef87676b783975849cc756e31f924a892e1ca31681e76b4f494ebb3d3e733da51df0a08a46966b3f710a0eaa0ba2e3fee04ed9614bb1110eaa9577e6f2239222737558229d7c3c8cf1bbd310a6c34aa85e3dac606332f20b9db0d2255aafa62ace9943c31b9f447453325b6009ab305a5d4ab34802624f1d384c479bb18669962428ff59e4fcd7548ea2fb12cf1a44cfbd389d2c3c71f243d169bd0288c3c9217ae114f57a0fb82d027cfbf68159c3d48224df37b3ae1c3963b6e493f5416e558ddf50883003b25deeeea2857b4084f4d935f9e58e18c1744b5fc756d5ea38c305cbe2d7c70a17e737b716b4b23b3c27da1279a17f293fe5c31b9e268ccee2b0d6e22404600302c7ae4d5cbeb599e987d6163a734f5e732637b51051ba876b9a6816794b07fc399de3a389f5d8cf26b22c8a404a3555c6fa18029edd5e563a6dcda9e21004a669e5a40d2b0c2c994b649552aa7db21ee3ccfb715618bce84359497c18f4a2cda524ca31e28f2ab75414f9e14cf2b00201ae438429fcce351fb588c451273a5aebfed7f04dfebf2f90c9ec5a74d767f3c1c271213bafd36ea0a75810b07c17a3ae81ed4e93d0853384972a9a76042f0a8615f733f19082e43ff4d713434cc0aae418e137be0ab16bebd89ee9c95c3c728c97b0a8b2729975e766dfe5afaece82591fc9d92f2c05273846604a19b2cb1e45cabc27ba2236de067201112a650255656d9b02c251de4ae4ea11c4996e14e74cd4a7127255286e4a557dbe39e3097b7a314c2055acc38017fa2539972272b499422fdf4805bf5b6d349bc92b2d5e9436dfcdc771", 0x1000}, {&(0x7f00000023c0)="e79580495548168af719f0ee1e8d4c279f3aebfcbd22b628a37f94515475ab06727175ec9299dc0d1cee73866f2003685d7105996c92881b4273b8522f359fb134000461259dd94b6995944ed63f215252043f447d1154a47fb27e4432e1721d17ffe4057113af0aaf4c", 0x6a}, {&(0x7f0000002440)="ee7f2b5d52306e5e91a4747fda485293fa3cb23e9c3f8a5c46ae10c71c6429d36f911b010f019e43ad5813c71a39abbb828cdd44a59f7d11eb20c1c52b8986dbb8efce49b328754094c2834c4747b81e3b7bfab28996e149de141f8ec8237f96b7924d9f71ca624dc972c7453ac24998ee96ac", 0x73}], 0x7, &(0x7f0000002540)=[{0x88, 0x112, 0x8, "2b96fc441cc508115e2c8a9bd0fa4593fa40fb834747146baa579d7af9fb6bedfec7111bbd78a44eb64b1852a6664cadd32636af765125700c812a4fdb35a4a30ffd16a0db87ef389a9515ab0091fc7c48f0291b89fc45e3a1e74f165a76562f8d8bd91f02aae6712a4443310da3bf5b03d96db6e756ea"}, {0xc8, 0xff, 0x100, "77607bfcf913e0542e7a7d144f9ea5d43f56337d610e94a622c35f714f62305c68c66191b297a0990e9e0cb228939f22e4ed697676aaa11ad6383c755b8ef12d859db64ffa298fce42b3791c5760eb7466744e9e7a709e4999437b3848a120bbee899dda2d0989f8377000e18947227d253d5a93be8a3cfe5ff6e375bc31637d1242083926734b56eab99fc0407c53cf43a467dfbadc7d715457f8b468cad8476e8459727a6d00bc0a15fcbdbccc48abfb2c821112"}], 0x150}, 0x41) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000002700)=0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002780)=@o_path={&(0x7f0000002740)='./file0\x00', r1, 0x4000, r6}, 0x18) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) 4.668740864s ago: executing program 0 (id=2531): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)="338b9d", 0x3}], 0x2d, 0x0, 0x0, 0x200040d0}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020", @ANYRES32], 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89ff, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.968821153s ago: executing program 4 (id=2256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x6400000000000000, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x64b7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.072378717s ago: executing program 3 (id=1941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xffffffff, 0x0, {0x2, 0x14, 0x20, 0x7, 0xff}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IIF={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6048000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=2532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 76.072901][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.295717][T14023] bridge_slave_0: entered allmulticast mode [ 376.304031][T14023] bridge_slave_0: entered promiscuous mode [ 376.323009][T14023] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.331044][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.338878][T14023] bridge_slave_1: entered allmulticast mode [ 376.346795][T14023] bridge_slave_1: entered promiscuous mode [ 376.419472][T14023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.456603][T14023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.468840][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 376.564038][T14023] team0: Port device team_slave_0 added [ 376.591296][T14023] team0: Port device team_slave_1 added [ 376.709106][T14023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.716631][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.746811][T14023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.760171][T14023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.767892][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.794370][T14023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.810418][T13897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.828006][T13897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.849632][T13897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.878741][T13897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.040045][T14023] hsr_slave_0: entered promiscuous mode [ 377.054005][T14023] hsr_slave_1: entered promiscuous mode [ 377.066086][T14023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.073683][T14023] Cannot create hsr debugfs directory [ 377.108562][T14087] netlink: zone id is out of range [ 377.142278][T14087] netlink: zone id is out of range [ 377.144988][T13909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.148190][T14087] netlink: zone id is out of range [ 377.171371][T14087] netlink: zone id is out of range [ 377.185053][T14087] netlink: zone id is out of range [ 377.190472][T14087] netlink: zone id is out of range [ 377.202199][T14087] netlink: zone id is out of range [ 377.208472][T14087] netlink: zone id is out of range [ 377.222452][T14087] netlink: zone id is out of range [ 377.222786][T13909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.244197][T14087] netlink: zone id is out of range [ 377.250473][T13909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.318962][T13909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.861496][T13897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.921314][T14099] syzkaller0: entered promiscuous mode [ 377.954744][ T5840] Bluetooth: hci3: command tx timeout [ 377.960309][T14099] syzkaller0: entered allmulticast mode [ 378.029332][T13897] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.048883][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.067145][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.074434][T13260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.138355][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.145596][T13260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.171617][T14109] pim6reg: entered allmulticast mode [ 378.233930][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.277266][T14023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.292812][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.300042][T13260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.313588][T14023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.340683][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.347890][T13255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.370822][T14023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.389314][T14023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.460704][T13897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.520880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.001509][T14127] FAULT_INJECTION: forcing a failure. [ 380.001509][T14127] name failslab, interval 1, probability 0, space 0, times 0 [ 380.027604][T14127] CPU: 0 UID: 0 PID: 14127 Comm: syz.0.2281 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 380.027636][T14127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.027649][T14127] Call Trace: [ 380.027657][T14127] [ 380.027666][T14127] dump_stack_lvl+0x189/0x250 [ 380.027704][T14127] ? __pfx____ratelimit+0x10/0x10 [ 380.027733][T14127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.027765][T14127] ? __pfx__printk+0x10/0x10 [ 380.027794][T14127] ? __pfx___might_resched+0x10/0x10 [ 380.027823][T14127] ? fs_reclaim_acquire+0x7d/0x100 [ 380.027853][T14127] should_fail_ex+0x414/0x560 [ 380.027885][T14127] should_failslab+0xa8/0x100 [ 380.027909][T14127] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 380.027931][T14127] ? __alloc_skb+0x112/0x2d0 [ 380.027958][T14127] __alloc_skb+0x112/0x2d0 [ 380.027986][T14127] ovs_dp_cmd_del+0x68/0x370 [ 380.028016][T14127] genl_family_rcv_msg_doit+0x212/0x300 [ 380.028053][T14127] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.028097][T14127] ? bpf_lsm_capable+0x9/0x20 [ 380.028115][T14127] ? security_capable+0x7e/0x2e0 [ 380.028149][T14127] genl_rcv_msg+0x60e/0x790 [ 380.028184][T14127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.028207][T14127] ? ref_tracker_free+0x63a/0x7d0 [ 380.028233][T14127] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 380.028262][T14127] ? __pfx_ref_tracker_free+0x10/0x10 [ 380.028302][T14127] netlink_rcv_skb+0x205/0x470 [ 380.028325][T14127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.028355][T14127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.028395][T14127] ? down_read+0x1ad/0x2e0 [ 380.028430][T14127] genl_rcv+0x28/0x40 [ 380.028463][T14127] netlink_unicast+0x758/0x8d0 [ 380.028507][T14127] netlink_sendmsg+0x805/0xb30 [ 380.028540][T14127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.028566][T14127] ? aa_sock_msg_perm+0x94/0x160 [ 380.028595][T14127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.028621][T14127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.028645][T14127] __sock_sendmsg+0x219/0x270 [ 380.028680][T14127] ____sys_sendmsg+0x505/0x830 [ 380.028713][T14127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.028750][T14127] ? import_iovec+0x74/0xa0 [ 380.028775][T14127] ___sys_sendmsg+0x21f/0x2a0 [ 380.028804][T14127] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.028873][T14127] ? __fget_files+0x2a/0x420 [ 380.028895][T14127] ? __fget_files+0x3a0/0x420 [ 380.028931][T14127] __x64_sys_sendmsg+0x19b/0x260 [ 380.028961][T14127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.028999][T14127] ? __pfx_ksys_write+0x10/0x10 [ 380.029015][T14127] ? rcu_is_watching+0x15/0xb0 [ 380.029054][T14127] ? do_syscall_64+0xbe/0x3b0 [ 380.029089][T14127] do_syscall_64+0xfa/0x3b0 [ 380.029117][T14127] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.029145][T14127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.029166][T14127] ? clear_bhb_loop+0x60/0xb0 [ 380.029191][T14127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.029211][T14127] RIP: 0033:0x7f050338e929 [ 380.029230][T14127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.029248][T14127] RSP: 002b:00007f050415c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.029270][T14127] RAX: ffffffffffffffda RBX: 00007f05035b5fa0 RCX: 00007f050338e929 [ 380.029285][T14127] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007 [ 380.029299][T14127] RBP: 00007f050415c090 R08: 0000000000000000 R09: 0000000000000000 [ 380.029311][T14127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.029323][T14127] R13: 0000000000000000 R14: 00007f05035b5fa0 R15: 00007ffe57e9dca8 [ 380.029357][T14127] [ 380.411287][ T5840] Bluetooth: hci3: command tx timeout [ 380.425795][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'. [ 380.583841][T14023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.608825][T14023] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.630749][T13255] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.637981][T13255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.672120][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.679344][T13255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.715382][T14023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.729203][T14023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.839753][T13897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.980553][T13897] veth0_vlan: entered promiscuous mode [ 381.051707][T13897] veth1_vlan: entered promiscuous mode [ 381.220780][T13897] veth0_macvtap: entered promiscuous mode [ 381.241043][T13909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.261513][T13897] veth1_macvtap: entered promiscuous mode [ 381.304263][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 381.333254][T14023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.358810][T13897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.381557][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2289'. [ 381.409786][T13897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.418052][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 381.505704][T13909] veth0_vlan: entered promiscuous mode [ 381.512231][T13897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.523242][T13897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.534288][T13897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.555065][T13897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.598441][T13909] veth1_vlan: entered promiscuous mode [ 381.801287][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.807613][T14168] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 381.810524][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.862036][T13909] veth0_macvtap: entered promiscuous mode [ 381.902863][T13909] veth1_macvtap: entered promiscuous mode [ 382.059514][T13909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.106201][T13256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.113420][T13909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.114129][T13256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.132841][T14180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2293'. [ 382.147914][T13909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.157054][T13909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.167718][T13909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.176566][T13909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.393089][T14023] veth0_vlan: entered promiscuous mode [ 382.456358][T14023] veth1_vlan: entered promiscuous mode [ 382.671345][T13251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.769629][T14196] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2297'. [ 382.779664][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.799423][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.832033][T13251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.845638][T14197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2297'. [ 382.884093][T14023] veth0_macvtap: entered promiscuous mode [ 382.960089][T13251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.990901][T14023] veth1_macvtap: entered promiscuous mode [ 383.026011][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.038769][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.062279][T13251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.091205][T14023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.114075][T14023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.132497][T14023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.154330][T14023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.163644][T14023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.172651][T14023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.308262][T13251] bridge_slave_1: left allmulticast mode [ 383.313943][T13251] bridge_slave_1: left promiscuous mode [ 383.322566][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.331998][T13251] bridge_slave_0: left allmulticast mode [ 383.338447][T13251] bridge_slave_0: left promiscuous mode [ 383.344169][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.830245][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2298'. [ 383.858578][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 383.892993][T13251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.912849][T13251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.925881][T13251] bond0 (unregistering): Released all slaves [ 383.996158][T13256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.004022][T13256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.109751][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.135632][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.202173][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.216553][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.225701][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.241644][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.254339][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.662713][T13251] hsr_slave_0: left promiscuous mode [ 384.670943][T13251] hsr_slave_1: left promiscuous mode [ 384.684729][T13251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.693116][T13251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.725154][T13251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.732597][T13251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.775842][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.786357][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.794221][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.807271][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.824098][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.846810][T13251] veth1_macvtap: left promiscuous mode [ 384.857566][T13251] veth0_macvtap: left promiscuous mode [ 384.863344][T13251] veth1_vlan: left promiscuous mode [ 384.870241][T13251] veth0_vlan: left promiscuous mode [ 385.613393][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.623141][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.632093][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.655597][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.663348][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.675060][T13251] team0 (unregistering): Port device team_slave_1 removed [ 385.718492][T13251] team0 (unregistering): Port device team_slave_0 removed [ 386.126231][T14219] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 386.132958][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 386.272590][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2305'. [ 386.354730][ T5840] Bluetooth: hci1: command tx timeout [ 386.689973][T14245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2308'. [ 386.699626][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 386.761784][T14248] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 386.764940][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 386.830335][T14248] bridge6: port 1(team0) entered blocking state [ 386.840903][T14248] bridge6: port 1(team0) entered disabled state [ 386.847888][T14248] team0: entered allmulticast mode [ 386.914828][ T5840] Bluetooth: hci2: command tx timeout [ 387.143219][T14208] chnl_net:caif_netlink_parms(): no params data found [ 387.304380][T14231] chnl_net:caif_netlink_parms(): no params data found [ 387.392873][T14223] chnl_net:caif_netlink_parms(): no params data found [ 387.530879][T13255] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.722491][ T5840] Bluetooth: hci3: command tx timeout [ 387.785526][T14274] xt_hashlimit: size too large, truncated to 1048576 [ 387.794946][T13255] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.065049][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 388.088740][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.146434][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.153730][T14208] bridge_slave_0: entered allmulticast mode [ 388.199413][T14208] bridge_slave_0: entered promiscuous mode [ 388.301204][T13255] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.332387][T14208] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.357963][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.366771][T14208] bridge_slave_1: entered allmulticast mode [ 388.375715][T14208] bridge_slave_1: entered promiscuous mode [ 388.436424][ T5840] Bluetooth: hci1: command tx timeout [ 388.598626][T13255] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.763917][T14231] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.778263][T14231] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.785796][T14231] bridge_slave_0: entered allmulticast mode [ 388.793697][T14231] bridge_slave_0: entered promiscuous mode [ 388.812516][T14208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.833443][T14231] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.861966][T14231] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.889603][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2317'. [ 388.899989][T14231] bridge_slave_1: entered allmulticast mode [ 388.908352][T14231] bridge_slave_1: entered promiscuous mode [ 388.946348][T14208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.994925][ T5840] Bluetooth: hci2: command tx timeout [ 389.006618][T14305] netlink: 'syz.1.2318': attribute type 21 has an invalid length. [ 389.018250][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2318'. [ 389.096349][T14231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.153729][T14208] team0: Port device team_slave_0 added [ 389.163056][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.170984][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.179236][T14223] bridge_slave_0: entered allmulticast mode [ 389.189425][T14223] bridge_slave_0: entered promiscuous mode [ 389.199851][T14231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.211452][T14308] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.240092][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 389.253064][T14208] team0: Port device team_slave_1 added [ 389.293991][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.308156][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.321201][T14223] bridge_slave_1: entered allmulticast mode [ 389.332692][T14223] bridge_slave_1: entered promiscuous mode [ 389.378184][T14308] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.417124][T14208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.424188][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.451936][T14208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.517498][T14231] team0: Port device team_slave_0 added [ 389.528018][T14231] team0: Port device team_slave_1 added [ 389.535311][T14208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.543390][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.570284][T14208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.608967][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.640003][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.684357][T14308] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.795770][ T5840] Bluetooth: hci3: command tx timeout [ 389.830198][T13255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.856400][T14223] team0: Port device team_slave_0 added [ 389.868551][T14308] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.903034][T14231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.910344][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.937260][T14231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.958576][T14231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.974604][T14231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.002856][T14231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.019713][T14208] hsr_slave_0: entered promiscuous mode [ 390.030381][T14208] hsr_slave_1: entered promiscuous mode [ 390.038436][T14208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.046832][T14208] Cannot create hsr debugfs directory [ 390.057776][T14223] team0: Port device team_slave_1 added [ 390.095000][T13255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.176332][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.196046][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.230312][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.243839][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.259603][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.286758][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.312151][T13255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.370132][T14231] hsr_slave_0: entered promiscuous mode [ 390.376850][T14231] hsr_slave_1: entered promiscuous mode [ 390.383114][T14231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.391095][T14231] Cannot create hsr debugfs directory [ 390.433196][T14308] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.461603][T13255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.514945][ T5840] Bluetooth: hci1: command tx timeout [ 390.545465][T14308] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.621247][T14308] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.658807][T14223] hsr_slave_0: entered promiscuous mode [ 390.665930][T14223] hsr_slave_1: entered promiscuous mode [ 390.672124][T14223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.681592][T14223] Cannot create hsr debugfs directory [ 390.693296][T14308] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.008294][T13255] bridge_slave_1: left allmulticast mode [ 391.014027][T13255] bridge_slave_1: left promiscuous mode [ 391.020527][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.031006][T13255] bridge_slave_0: left allmulticast mode [ 391.037302][T13255] bridge_slave_0: left promiscuous mode [ 391.043111][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.058055][T13255] bridge_slave_1: left allmulticast mode [ 391.063791][T13255] bridge_slave_1: left promiscuous mode [ 391.070070][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.085702][ T5840] Bluetooth: hci2: command tx timeout [ 391.094909][T13255] bridge_slave_0: left allmulticast mode [ 391.100593][T13255] bridge_slave_0: left promiscuous mode [ 391.113315][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.592788][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.604011][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.614950][T13255] bond0 (unregistering): Released all slaves [ 391.884777][ T5840] Bluetooth: hci3: command tx timeout [ 391.914688][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.926872][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.937128][T13255] bond0 (unregistering): Released all slaves [ 392.596639][ T5840] Bluetooth: hci1: command tx timeout [ 392.753562][T13255] hsr_slave_0: left promiscuous mode [ 392.780349][T13255] hsr_slave_1: left promiscuous mode [ 392.786813][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.794269][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.815287][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.822725][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.873417][T13255] hsr_slave_0: left promiscuous mode [ 392.880056][T13255] hsr_slave_1: left promiscuous mode [ 392.891436][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.900111][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.915744][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.923976][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.977730][T13255] veth1_macvtap: left promiscuous mode [ 392.983313][T13255] veth0_macvtap: left promiscuous mode [ 392.991885][T13255] veth1_vlan: left promiscuous mode [ 392.998571][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 393.000185][T13255] veth0_vlan: left promiscuous mode [ 393.016380][T13255] veth1_macvtap: left promiscuous mode [ 393.022039][T13255] veth0_macvtap: left promiscuous mode [ 393.028242][T13255] veth1_vlan: left promiscuous mode [ 393.034971][T13255] veth0_vlan: left promiscuous mode [ 393.155373][ T5840] Bluetooth: hci2: command tx timeout [ 393.593276][T13255] team0 (unregistering): Port device team_slave_1 removed [ 393.634263][T13255] team0 (unregistering): Port device team_slave_0 removed [ 393.959839][ T5840] Bluetooth: hci3: command tx timeout [ 394.502934][T13255] team0 (unregistering): Port device team_slave_1 removed [ 394.547448][T13255] team0 (unregistering): Port device team_slave_0 removed [ 394.960254][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 395.178843][T14363] sctp: [Deprecated]: syz.0.2335 (pid 14363) Use of int in max_burst socket option deprecated. [ 395.178843][T14363] Use struct sctp_assoc_value instead [ 395.300439][T14231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.360813][T14231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.376738][T14231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.429004][T14231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.735151][T14231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.780077][T14208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.813708][T14208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.838342][T14380] netlink: 'syz.1.2337': attribute type 10 has an invalid length. [ 395.848647][T14231] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.854891][T14380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2337'. [ 395.876363][T14208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.888082][T14208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.999521][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.006695][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.024087][T14383] FAULT_INJECTION: forcing a failure. [ 396.024087][T14383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.047311][T14383] CPU: 1 UID: 0 PID: 14383 Comm: syz.0.2338 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 396.047341][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.047354][T14383] Call Trace: [ 396.047362][T14383] [ 396.047371][T14383] dump_stack_lvl+0x189/0x250 [ 396.047408][T14383] ? __pfx____ratelimit+0x10/0x10 [ 396.047436][T14383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.047468][T14383] ? __pfx__printk+0x10/0x10 [ 396.047505][T14383] should_fail_ex+0x414/0x560 [ 396.047537][T14383] _copy_to_user+0x31/0xb0 [ 396.047560][T14383] simple_read_from_buffer+0xe1/0x170 [ 396.047587][T14383] proc_fail_nth_read+0x1df/0x250 [ 396.047616][T14383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.047645][T14383] ? rw_verify_area+0x258/0x650 [ 396.047675][T14383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.047702][T14383] vfs_read+0x200/0x980 [ 396.047739][T14383] ? __pfx___mutex_lock+0x10/0x10 [ 396.047769][T14383] ? __pfx_vfs_read+0x10/0x10 [ 396.047801][T14383] ? __fget_files+0x2a/0x420 [ 396.047829][T14383] ? __fget_files+0x3a0/0x420 [ 396.047849][T14383] ? __fget_files+0x2a/0x420 [ 396.047882][T14383] ksys_read+0x145/0x250 [ 396.047917][T14383] ? __pfx_ksys_read+0x10/0x10 [ 396.047944][T14383] ? rcu_is_watching+0x15/0xb0 [ 396.047983][T14383] ? do_syscall_64+0xbe/0x3b0 [ 396.048016][T14383] do_syscall_64+0xfa/0x3b0 [ 396.048043][T14383] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.048069][T14383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.048089][T14383] ? clear_bhb_loop+0x60/0xb0 [ 396.048114][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.048142][T14383] RIP: 0033:0x7f050338d33c [ 396.048160][T14383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 396.048182][T14383] RSP: 002b:00007f050415c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.048204][T14383] RAX: ffffffffffffffda RBX: 00007f05035b5fa0 RCX: 00007f050338d33c [ 396.048219][T14383] RDX: 000000000000000f RSI: 00007f050415c0a0 RDI: 0000000000000008 [ 396.048231][T14383] RBP: 00007f050415c090 R08: 0000000000000000 R09: 0000000000000000 [ 396.048244][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.048256][T14383] R13: 0000000000000000 R14: 00007f05035b5fa0 R15: 00007ffe57e9dca8 [ 396.048289][T14383] [ 396.373628][T14223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.391326][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.398535][T13260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.431626][T14223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.446859][T14223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.498713][T14231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.509936][T14231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.587380][T14223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.743155][T14397] netlink: 'syz.1.2341': attribute type 3 has an invalid length. [ 396.829893][T14407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2342'. [ 396.853340][T14406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2342'. [ 396.878349][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 397.000589][T14208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.019548][T14231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.086045][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.103796][T14412] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2344'. [ 397.118634][T14412] net_ratelimit: 5 callbacks suppressed [ 397.118651][T14412] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 397.159364][T14417] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.176941][T14208] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.225558][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.232774][T13256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.247242][T14415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 397.283729][T14415] netlink: 'syz.1.2344': attribute type 1 has an invalid length. [ 397.291786][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.299039][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.317930][T14415] netlink: 600 bytes leftover after parsing attributes in process `syz.1.2344'. [ 397.349481][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.411057][T14415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2344'. [ 397.444412][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.451586][T13256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.488675][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.495931][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.684132][T14435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.785724][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2347'. [ 397.838096][T14435] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 397.890408][T14435] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 398.214006][T14208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.257606][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.269582][T14231] veth0_vlan: entered promiscuous mode [ 398.373335][T14231] veth1_vlan: entered promiscuous mode [ 398.390794][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 398.429773][T14208] veth0_vlan: entered promiscuous mode [ 398.470548][T14223] veth0_vlan: entered promiscuous mode [ 398.493493][T14208] veth1_vlan: entered promiscuous mode [ 398.502642][T14223] veth1_vlan: entered promiscuous mode [ 398.559416][T14231] veth0_macvtap: entered promiscuous mode [ 398.604097][T14231] veth1_macvtap: entered promiscuous mode [ 398.629271][T14223] veth0_macvtap: entered promiscuous mode [ 398.646045][T14208] veth0_macvtap: entered promiscuous mode [ 398.660804][T14208] veth1_macvtap: entered promiscuous mode [ 398.682819][T14223] veth1_macvtap: entered promiscuous mode [ 398.703182][T14231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.732856][T14208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.764016][T14231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.788410][T14231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.799255][T14231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.810281][T14231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.819560][T14231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.842782][T14208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.855482][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.881534][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.905512][T14208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.915189][T14208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.923979][T14208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.933306][T14208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.947155][T14223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.956109][T14223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.965299][T14223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.973989][T14223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.240771][T14464] syzkaller0: entered promiscuous mode [ 399.246483][T14464] syzkaller0: entered allmulticast mode [ 400.796933][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.818198][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.871233][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.891467][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.904137][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.929889][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.047076][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.071897][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.102860][T13259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.114066][T13259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.316047][T13259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.350142][T14487] __nla_validate_parse: 3 callbacks suppressed [ 401.350164][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 401.363010][T13259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.488569][T13255] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.026337][T13255] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.331236][T13255] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.480918][T13255] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.601855][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.617702][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.627268][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.646354][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.654071][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.885529][T13255] bridge_slave_1: left allmulticast mode [ 402.894271][T13255] bridge_slave_1: left promiscuous mode [ 402.900293][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.921285][T13255] bridge_slave_0: left allmulticast mode [ 402.927107][T13255] bridge_slave_0: left promiscuous mode [ 402.932875][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.026750][T14503] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2361'. [ 403.324162][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.339793][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.348038][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.361181][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.369076][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.483031][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.494117][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.504981][T13255] bond0 (unregistering): Released all slaves [ 403.883899][T14496] chnl_net:caif_netlink_parms(): no params data found [ 403.926833][T14512] syzkaller1: entered promiscuous mode [ 403.932331][T14512] syzkaller1: entered allmulticast mode [ 403.941511][T14512] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 403.995492][T13255] hsr_slave_0: left promiscuous mode [ 404.011390][T13255] hsr_slave_1: left promiscuous mode [ 404.021933][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.043846][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.061554][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.081989][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.124130][T14514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 404.146789][T13255] veth1_macvtap: left promiscuous mode [ 404.152393][T13255] veth0_macvtap: left promiscuous mode [ 404.160122][T13255] veth1_vlan: left promiscuous mode [ 404.166038][T13255] veth0_vlan: left promiscuous mode [ 404.364086][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.372700][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.393131][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.405650][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.415010][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.680605][ T5840] Bluetooth: hci1: command tx timeout [ 404.891286][T13255] team0 (unregistering): Port device team_slave_1 removed [ 404.939507][T13255] team0 (unregistering): Port device team_slave_0 removed [ 405.419210][T14527] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.475044][ T5840] Bluetooth: hci2: command tx timeout [ 405.586857][T14527] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.704730][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.712999][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.720923][T14496] bridge_slave_0: entered allmulticast mode [ 405.729103][T14496] bridge_slave_0: entered promiscuous mode [ 405.742014][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.751116][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.758550][T14496] bridge_slave_1: entered allmulticast mode [ 405.766859][T14496] bridge_slave_1: entered promiscuous mode [ 405.826133][T14527] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.959877][T14527] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.010551][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.086896][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.196240][T14496] team0: Port device team_slave_0 added [ 406.202526][T14505] chnl_net:caif_netlink_parms(): no params data found [ 406.233554][T14496] team0: Port device team_slave_1 added [ 406.266767][T14527] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.348260][T14527] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.402794][T13255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.429951][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.437973][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.464544][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.483279][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.490404][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.521761][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.531935][ T5840] Bluetooth: hci3: command tx timeout [ 406.560928][T14527] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.608553][T14545] netlink: 'syz.0.2369': attribute type 1 has an invalid length. [ 406.614140][T13255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.618320][T14545] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 406.636104][T14545] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2369'. [ 406.755247][ T5840] Bluetooth: hci1: command tx timeout [ 406.762931][T14527] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.845402][T13255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.871513][T14496] hsr_slave_0: entered promiscuous mode [ 406.878812][T14496] hsr_slave_1: entered promiscuous mode [ 406.882406][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 406.892372][T14496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.901812][T14496] Cannot create hsr debugfs directory [ 407.002470][T13255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.141842][T14505] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.149872][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.158183][T14505] bridge_slave_0: entered allmulticast mode [ 407.166496][T14505] bridge_slave_0: entered promiscuous mode [ 407.175573][T14505] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.183080][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.190730][T14505] bridge_slave_1: entered allmulticast mode [ 407.199052][T14505] bridge_slave_1: entered promiscuous mode [ 407.329547][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.342544][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.381557][T14519] chnl_net:caif_netlink_parms(): no params data found [ 407.538242][T14505] team0: Port device team_slave_0 added [ 407.554561][ T5840] Bluetooth: hci2: command tx timeout [ 407.602883][T14505] team0: Port device team_slave_1 added [ 407.808127][T14580] IPVS: length: 4096 != 8 [ 407.840080][T13255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.840283][T14582] Bluetooth: MGMT ver 1.23 [ 408.017586][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.028163][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.032963][T14589] netlink: 'syz.1.2379': attribute type 16 has an invalid length. [ 408.054701][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.075708][T14589] netlink: 'syz.1.2379': attribute type 17 has an invalid length. [ 408.107577][T13255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.155312][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.162469][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.189181][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.260210][T14589] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.291211][T14589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.393617][T13255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.560197][T14606] netlink: 'syz.0.2382': attribute type 6 has an invalid length. [ 408.570196][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.577544][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.587434][T14519] bridge_slave_0: entered allmulticast mode [ 408.595426][ T5840] Bluetooth: hci3: command tx timeout [ 408.595613][T14519] bridge_slave_0: entered promiscuous mode [ 408.631870][T13255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.700801][T14607] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 408.714740][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.734920][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.754291][T14519] bridge_slave_1: entered allmulticast mode [ 408.777150][T14519] bridge_slave_1: entered promiscuous mode [ 408.822292][T14618] netlink: 'syz.1.2386': attribute type 30 has an invalid length. [ 408.842454][T14505] hsr_slave_0: entered promiscuous mode [ 408.850867][T14505] hsr_slave_1: entered promiscuous mode [ 408.852990][ T5840] Bluetooth: hci1: command tx timeout [ 408.862605][T14505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.870784][T14505] Cannot create hsr debugfs directory [ 408.878074][T14616] lo speed is unknown, defaulting to 1000 [ 408.906010][T14618] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 408.915740][T14618] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 408.946674][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.966423][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.025156][T14616] lo speed is unknown, defaulting to 1000 [ 409.169840][T14620] ipvlan0: entered promiscuous mode [ 409.220326][T14616] lo speed is unknown, defaulting to 1000 [ 409.238790][T14519] team0: Port device team_slave_0 added [ 409.286377][T14519] team0: Port device team_slave_1 added [ 409.295338][T14616] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 409.409184][T14616] lo speed is unknown, defaulting to 1000 [ 409.450960][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.458661][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.486894][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.503371][T14616] lo speed is unknown, defaulting to 1000 [ 409.532706][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.539860][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.566367][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.611853][T14496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.628807][T14496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.643235][T14616] lo speed is unknown, defaulting to 1000 [ 409.645131][ T5840] Bluetooth: hci2: command tx timeout [ 409.728208][T14496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.755730][T14496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.778634][T14616] lo speed is unknown, defaulting to 1000 [ 409.785175][T13255] bridge_slave_1: left allmulticast mode [ 409.790908][T13255] bridge_slave_1: left promiscuous mode [ 409.806680][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.818800][T13255] bridge_slave_0: left allmulticast mode [ 409.824753][T13255] bridge_slave_0: left promiscuous mode [ 409.830631][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.847463][T13255] bridge_slave_1: left allmulticast mode [ 409.853205][T13255] bridge_slave_1: left promiscuous mode [ 409.860726][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.871079][T13255] bridge_slave_0: left allmulticast mode [ 409.881015][T13255] bridge_slave_0: left promiscuous mode [ 409.886864][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.458684][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.476926][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.492986][T13255] bond0 (unregistering): Released all slaves [ 410.676520][ T5840] Bluetooth: hci3: command tx timeout [ 410.818484][T13255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.833449][T13255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.853056][T13255] bond0 (unregistering): Released all slaves [ 410.890712][T14616] lo speed is unknown, defaulting to 1000 [ 410.913392][T14519] hsr_slave_0: entered promiscuous mode [ 410.919359][ T5840] Bluetooth: hci1: command tx timeout [ 410.937142][T14519] hsr_slave_1: entered promiscuous mode [ 410.943644][T14519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.956918][T14519] Cannot create hsr debugfs directory [ 410.993857][T14616] lo speed is unknown, defaulting to 1000 [ 411.063984][T14616] lo speed is unknown, defaulting to 1000 [ 411.109774][T14616] lo speed is unknown, defaulting to 1000 [ 411.149954][T14616] lo speed is unknown, defaulting to 1000 [ 411.221150][T14616] lo speed is unknown, defaulting to 1000 [ 411.335584][T14645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2391'. [ 411.345944][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2391'. [ 411.715347][ T5840] Bluetooth: hci2: command tx timeout [ 411.734358][T13255] hsr_slave_0: left promiscuous mode [ 411.747583][T13255] hsr_slave_1: left promiscuous mode [ 411.760023][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.768472][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.785445][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.803106][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.829934][T13255] hsr_slave_0: left promiscuous mode [ 411.850309][T13255] hsr_slave_1: left promiscuous mode [ 411.867545][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.877229][T13255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.896674][T13255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.907376][T13255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.034809][T13255] veth1_macvtap: left promiscuous mode [ 412.040581][T13255] veth0_macvtap: left promiscuous mode [ 412.046242][T13255] veth1_vlan: left promiscuous mode [ 412.051603][T13255] veth0_vlan: left promiscuous mode [ 412.060374][T13255] veth1_macvtap: left promiscuous mode [ 412.066282][T13255] veth0_macvtap: left promiscuous mode [ 412.071988][T13255] veth1_vlan: left promiscuous mode [ 412.077566][T13255] veth0_vlan: left promiscuous mode [ 412.533481][T14661] netlink: 'syz.1.2395': attribute type 10 has an invalid length. [ 412.735851][T13255] team0 (unregistering): Port device team_slave_1 removed [ 412.758570][ T5840] Bluetooth: hci3: command tx timeout [ 412.783528][T13255] team0 (unregistering): Port device team_slave_0 removed [ 413.518808][T13255] team0 (unregistering): Port device team_slave_1 removed [ 413.562162][T13255] team0 (unregistering): Port device team_slave_0 removed [ 414.050603][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.061694][T14505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.091940][T14505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.145880][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 414.162665][T14505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 414.218359][T14505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.258733][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.307818][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.315077][T13257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.375564][T14680] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 414.407273][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.414537][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.428454][T14680] netlink: 'syz.1.2399': attribute type 4 has an invalid length. [ 414.700598][T14505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.835643][T14505] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.909544][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.916757][T13260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.970957][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.978202][T13260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.093780][T14698] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 415.117478][T14519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.178979][T14519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 415.200313][T14519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 415.214943][T14519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.331993][T14711] FAULT_INJECTION: forcing a failure. [ 415.331993][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.357769][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.376111][T14711] CPU: 0 UID: 0 PID: 14711 Comm: syz.1.2404 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 415.376141][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.376154][T14711] Call Trace: [ 415.376161][T14711] [ 415.376170][T14711] dump_stack_lvl+0x189/0x250 [ 415.376205][T14711] ? __pfx____ratelimit+0x10/0x10 [ 415.376233][T14711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.376265][T14711] ? __pfx__printk+0x10/0x10 [ 415.376288][T14711] ? __might_fault+0xb0/0x130 [ 415.376321][T14711] should_fail_ex+0x414/0x560 [ 415.376362][T14711] _copy_from_user+0x2d/0xb0 [ 415.376384][T14711] do_sock_getsockopt+0x1cd/0x650 [ 415.376413][T14711] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 415.376437][T14711] ? __pfx_do_syscall_64+0x10/0x10 [ 415.376466][T14711] ? __fget_files+0x3a0/0x420 [ 415.376487][T14711] ? __fget_files+0x2a/0x420 [ 415.376541][T14711] __x64_sys_getsockopt+0x1a5/0x250 [ 415.376563][T14711] ? __pfx_do_syscall_64+0x10/0x10 [ 415.376609][T14711] ? __pfx_do_syscall_64+0x10/0x10 [ 415.376642][T14711] do_syscall_64+0xfa/0x3b0 [ 415.376668][T14711] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.376694][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.376714][T14711] ? clear_bhb_loop+0x60/0xb0 [ 415.376739][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.376759][T14711] RIP: 0033:0x7fee6378e929 [ 415.376777][T14711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.376795][T14711] RSP: 002b:00007fee64576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 415.376816][T14711] RAX: ffffffffffffffda RBX: 00007fee639b5fa0 RCX: 00007fee6378e929 [ 415.376831][T14711] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 415.376843][T14711] RBP: 00007fee64576090 R08: 0000200000000240 R09: 0000000000000000 [ 415.376857][T14711] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 415.376870][T14711] R13: 0000000000000000 R14: 00007fee639b5fa0 R15: 00007ffe41eec788 [ 415.376902][T14711] [ 415.949900][T14716] pim6reg: entered allmulticast mode [ 416.020130][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.109982][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.169016][T14725] netlink: 'syz.0.2406': attribute type 5 has an invalid length. [ 416.205107][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 416.221398][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.228677][T13260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.324030][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.386004][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.393242][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.613510][T14505] veth0_vlan: entered promiscuous mode [ 416.671041][T14496] veth0_vlan: entered promiscuous mode [ 416.698958][T14505] veth1_vlan: entered promiscuous mode [ 416.723741][T14496] veth1_vlan: entered promiscuous mode [ 416.838485][T14496] veth0_macvtap: entered promiscuous mode [ 416.861500][T14505] veth0_macvtap: entered promiscuous mode [ 416.873319][T14496] veth1_macvtap: entered promiscuous mode [ 416.890108][T14505] veth1_macvtap: entered promiscuous mode [ 416.939566][T14745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2411'. [ 416.949614][T14745] tipc: Resetting bearer [ 416.957042][T14745] vlan0: entered promiscuous mode [ 416.988915][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.011471][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.053839][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.072057][T14747] ipt_REJECT: TCP_RESET invalid for non-tcp [ 417.074261][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.091086][T14496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.101740][T14496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.111041][T14496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.120361][T14496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.143241][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.177496][T14749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2413'. [ 417.191313][T14505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.203511][T14505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.213206][T14505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.223274][T14505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.276560][T14752] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2414'. [ 417.297145][T14752] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2414'. [ 417.433379][T14519] veth0_vlan: entered promiscuous mode [ 417.441153][T13256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.457222][T14754] FAULT_INJECTION: forcing a failure. [ 417.457222][T14754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.472194][T14519] veth1_vlan: entered promiscuous mode [ 417.477794][T13256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.488541][T14754] CPU: 0 UID: 0 PID: 14754 Comm: syz.1.2415 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 417.488571][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 417.488584][T14754] Call Trace: [ 417.488592][T14754] [ 417.488602][T14754] dump_stack_lvl+0x189/0x250 [ 417.488639][T14754] ? __pfx____ratelimit+0x10/0x10 [ 417.488668][T14754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.488701][T14754] ? __pfx__printk+0x10/0x10 [ 417.488725][T14754] ? __might_fault+0xb0/0x130 [ 417.488759][T14754] should_fail_ex+0x414/0x560 [ 417.488792][T14754] _copy_from_user+0x2d/0xb0 [ 417.488814][T14754] sctp_getsockopt_sctp_status+0xcf/0x9e0 [ 417.488848][T14754] ? __lock_acquire+0xab9/0xd20 [ 417.488878][T14754] ? __pfx_sctp_getsockopt_sctp_status+0x10/0x10 [ 417.488937][T14754] ? __local_bh_enable_ip+0x12d/0x1c0 [ 417.488968][T14754] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 417.489014][T14754] sctp_getsockopt+0x664/0xb60 [ 417.489041][T14754] do_sock_getsockopt+0x35d/0x650 [ 417.489070][T14754] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 417.489095][T14754] ? __pfx_do_syscall_64+0x10/0x10 [ 417.489137][T14754] ? __fget_files+0x3a0/0x420 [ 417.489159][T14754] ? __fget_files+0x2a/0x420 [ 417.489190][T14754] __x64_sys_getsockopt+0x1a5/0x250 [ 417.489214][T14754] ? __pfx_do_syscall_64+0x10/0x10 [ 417.489244][T14754] ? __pfx_do_syscall_64+0x10/0x10 [ 417.489278][T14754] do_syscall_64+0xfa/0x3b0 [ 417.489305][T14754] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.489331][T14754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.489352][T14754] ? clear_bhb_loop+0x60/0xb0 [ 417.489377][T14754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.489397][T14754] RIP: 0033:0x7fee6378e929 [ 417.489415][T14754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.489432][T14754] RSP: 002b:00007fee64576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 417.489453][T14754] RAX: ffffffffffffffda RBX: 00007fee639b5fa0 RCX: 00007fee6378e929 [ 417.489468][T14754] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 417.489480][T14754] RBP: 00007fee64576090 R08: 0000200000000240 R09: 0000000000000000 [ 417.489493][T14754] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 417.489505][T14754] R13: 0000000000000000 R14: 00007fee639b5fa0 R15: 00007ffe41eec788 [ 417.489538][T14754] [ 417.502575][T13260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.751015][T13260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.776956][T14519] veth0_macvtap: entered promiscuous mode [ 417.862561][T14519] veth1_macvtap: entered promiscuous mode [ 417.885975][T13260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.896814][T13260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.928627][T13255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.937449][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.975607][T13255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.988751][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.033704][T14519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.056810][T14519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.066496][T14519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.075438][T14519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.474219][T13254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.688358][T13254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.723162][T13260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.755388][T13260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.846492][T13254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.895770][T13229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.907202][T13229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.035935][T13254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.291378][T13254] bridge_slave_1: left allmulticast mode [ 419.297259][T13254] bridge_slave_1: left promiscuous mode [ 419.303052][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.314049][T13254] bridge_slave_0: left allmulticast mode [ 419.327410][T13254] bridge_slave_0: left promiscuous mode [ 419.333386][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.426608][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.435921][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.448404][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.465873][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.473532][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.484652][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.997883][T13254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.013370][T13254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.025766][T13254] bond0 (unregistering): Released all slaves [ 420.073098][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.081891][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.101228][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.111094][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.120602][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.135844][T14778] lo speed is unknown, defaulting to 1000 [ 420.227005][T14787] lo speed is unknown, defaulting to 1000 [ 420.391743][T13254] hsr_slave_0: left promiscuous mode [ 420.400264][T13254] hsr_slave_1: left promiscuous mode [ 420.409863][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.417411][T13254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.429059][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.437624][T13254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.462024][T13254] veth1_macvtap: left promiscuous mode [ 420.468607][T13254] veth0_macvtap: left promiscuous mode [ 420.474244][T13254] veth1_vlan: left promiscuous mode [ 420.480003][T13254] veth0_vlan: left promiscuous mode [ 420.865191][T14795] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 421.142277][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.157022][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.157265][T13254] team0 (unregistering): Port device team_slave_1 removed [ 421.165884][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.182787][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.194733][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.230522][T13254] team0 (unregistering): Port device team_slave_0 removed [ 421.555486][ T5840] Bluetooth: hci1: command tx timeout [ 421.870475][T14808] FAULT_INJECTION: forcing a failure. [ 421.870475][T14808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.892661][T14808] CPU: 1 UID: 0 PID: 14808 Comm: syz.0.2426 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 421.892694][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.892706][T14808] Call Trace: [ 421.892714][T14808] [ 421.892723][T14808] dump_stack_lvl+0x189/0x250 [ 421.892767][T14808] ? __pfx____ratelimit+0x10/0x10 [ 421.892796][T14808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.892828][T14808] ? __pfx__printk+0x10/0x10 [ 421.892865][T14808] should_fail_ex+0x414/0x560 [ 421.892897][T14808] _copy_to_user+0x31/0xb0 [ 421.892920][T14808] simple_read_from_buffer+0xe1/0x170 [ 421.892948][T14808] proc_fail_nth_read+0x1df/0x250 [ 421.892977][T14808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.893006][T14808] ? rw_verify_area+0x258/0x650 [ 421.893036][T14808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.893062][T14808] vfs_read+0x200/0x980 [ 421.893100][T14808] ? __pfx___mutex_lock+0x10/0x10 [ 421.893129][T14808] ? __pfx_vfs_read+0x10/0x10 [ 421.893163][T14808] ? __fget_files+0x2a/0x420 [ 421.893190][T14808] ? __fget_files+0x3a0/0x420 [ 421.893212][T14808] ? __fget_files+0x2a/0x420 [ 421.893245][T14808] ksys_read+0x145/0x250 [ 421.893278][T14808] ? __pfx_ksys_read+0x10/0x10 [ 421.893307][T14808] ? fput+0xa0/0xd0 [ 421.893337][T14808] ? do_syscall_64+0xbe/0x3b0 [ 421.893370][T14808] do_syscall_64+0xfa/0x3b0 [ 421.893398][T14808] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.893425][T14808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.893445][T14808] ? clear_bhb_loop+0x60/0xb0 [ 421.893470][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.893490][T14808] RIP: 0033:0x7f050338d33c [ 421.893510][T14808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.893527][T14808] RSP: 002b:00007f050415c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.893548][T14808] RAX: ffffffffffffffda RBX: 00007f05035b5fa0 RCX: 00007f050338d33c [ 421.893563][T14808] RDX: 000000000000000f RSI: 00007f050415c0a0 RDI: 0000000000000004 [ 421.893576][T14808] RBP: 00007f050415c090 R08: 0000000000000000 R09: 0000000000000000 [ 421.893588][T14808] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 421.893601][T14808] R13: 0000000000000000 R14: 00007f05035b5fa0 R15: 00007ffe57e9dca8 [ 421.893634][T14808] [ 422.134335][T14778] chnl_net:caif_netlink_parms(): no params data found [ 422.147554][T14801] lo speed is unknown, defaulting to 1000 [ 422.205236][ T5840] Bluetooth: hci2: command tx timeout [ 422.393883][T14787] chnl_net:caif_netlink_parms(): no params data found [ 422.603417][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.612758][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.620099][T14778] bridge_slave_0: entered allmulticast mode [ 422.628253][T14778] bridge_slave_0: entered promiscuous mode [ 422.637166][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.644356][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.651850][T14778] bridge_slave_1: entered allmulticast mode [ 422.660965][T14778] bridge_slave_1: entered promiscuous mode [ 422.782434][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.796180][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.001122][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.014918][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.022821][T14787] bridge_slave_0: entered allmulticast mode [ 423.051861][T14787] bridge_slave_0: entered promiscuous mode [ 423.091835][T14801] chnl_net:caif_netlink_parms(): no params data found [ 423.114947][T14787] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.122230][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.131762][T14787] bridge_slave_1: entered allmulticast mode [ 423.141049][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 423.142231][T14787] bridge_slave_1: entered promiscuous mode [ 423.166110][T14842] veth0: entered promiscuous mode [ 423.192146][T14778] team0: Port device team_slave_0 added [ 423.235690][ T5840] Bluetooth: hci3: command tx timeout [ 423.310275][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.355602][T14778] team0: Port device team_slave_1 added [ 423.480760][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.588948][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.596430][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.622565][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.633945][T14841] veth0: left promiscuous mode [ 423.645224][ T5840] Bluetooth: hci1: command tx timeout [ 423.721378][T13254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.740846][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.748765][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.774949][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.846897][T14863] netlink: 'syz.1.2437': attribute type 58 has an invalid length. [ 423.874579][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'. [ 423.907949][T14787] team0: Port device team_slave_0 added [ 423.957980][T13254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.068093][T14787] team0: Port device team_slave_1 added [ 424.118979][T13254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.143164][T14874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2440'. [ 424.212893][T14801] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.234596][T14801] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.241900][T14801] bridge_slave_0: entered allmulticast mode [ 424.263219][T14801] bridge_slave_0: entered promiscuous mode [ 424.275683][ T5840] Bluetooth: hci2: command tx timeout [ 424.278970][T14778] hsr_slave_0: entered promiscuous mode [ 424.305377][T14778] hsr_slave_1: entered promiscuous mode [ 424.311828][T14778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.331236][T14778] Cannot create hsr debugfs directory [ 424.407747][T14801] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.420433][T14801] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.428913][T14801] bridge_slave_1: entered allmulticast mode [ 424.441185][T14801] bridge_slave_1: entered promiscuous mode [ 424.481605][T13254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.506295][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.513275][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.541170][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.603528][T14881] netlink: 'syz.1.2442': attribute type 4 has an invalid length. [ 424.614999][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.622221][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.650741][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.739465][T14801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.766653][T14887] ipt_ECN: cannot use operation on non-tcp rule [ 424.788472][T14801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.883851][T14801] team0: Port device team_slave_0 added [ 424.949402][T14801] team0: Port device team_slave_1 added [ 424.988581][T14787] hsr_slave_0: entered promiscuous mode [ 425.006060][T14787] hsr_slave_1: entered promiscuous mode [ 425.012252][T14787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.044792][T14787] Cannot create hsr debugfs directory [ 425.106076][T14888] syzkaller0: entered allmulticast mode [ 425.259989][T14886] syzkaller0: left allmulticast mode [ 425.267180][T14801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.281927][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.314777][ T5840] Bluetooth: hci3: command tx timeout [ 425.321579][T14801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.342894][T14801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.350298][T14801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.377352][T14801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.492982][T13254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.511544][T14896] sctp: [Deprecated]: syz.1.2445 (pid 14896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.511544][T14896] Use struct sctp_sack_info instead [ 425.716312][ T5840] Bluetooth: hci1: command tx timeout [ 425.731980][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 425.738218][T14897] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 425.748476][T14894] netlink: 'syz.0.2446': attribute type 12 has an invalid length. [ 425.841508][T13254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.938454][T14801] hsr_slave_0: entered promiscuous mode [ 425.955442][T14801] hsr_slave_1: entered promiscuous mode [ 425.962040][T14801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.976701][T14801] Cannot create hsr debugfs directory [ 426.023270][T13254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.163967][T13254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.213524][T14900] lo speed is unknown, defaulting to 1000 [ 426.355005][ T5840] Bluetooth: hci2: command tx timeout [ 426.684028][T14922] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2452'. [ 426.716841][T14922] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2452'. [ 426.827008][T14778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.883131][T13254] bridge_slave_1: left allmulticast mode [ 426.889689][T13254] bridge_slave_1: left promiscuous mode [ 426.897373][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.908207][T13254] bridge_slave_0: left allmulticast mode [ 426.922606][T13254] bridge_slave_0: left promiscuous mode [ 426.928668][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.943381][T13254] bridge_slave_1: left allmulticast mode [ 426.951403][T13254] bridge_slave_1: left promiscuous mode [ 426.961299][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.974137][T13254] bridge_slave_0: left allmulticast mode [ 426.984358][T13254] bridge_slave_0: left promiscuous mode [ 426.992496][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.404857][ T5840] Bluetooth: hci3: command tx timeout [ 427.447434][T13254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.459340][T13254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.473991][T13254] bond0 (unregistering): Released all slaves [ 427.772986][T13254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.790208][T13254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.801599][T13254] bond0 (unregistering): Released all slaves [ 427.807128][ T5840] Bluetooth: hci1: command tx timeout [ 427.820697][T14778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.854364][T14778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.973466][T14778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.083841][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 428.093154][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 428.111838][T14953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2460'. [ 428.173393][T14960] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 428.184660][T14960] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 428.435668][ T5840] Bluetooth: hci2: command tx timeout [ 428.703261][T14979] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2466'. [ 428.719118][T14979] nbd: must specify at least one socket [ 428.733504][T13254] hsr_slave_0: left promiscuous mode [ 428.759912][T13254] hsr_slave_1: left promiscuous mode [ 428.778736][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.795763][T13254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.803956][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.814846][T13254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.850386][T13254] hsr_slave_0: left promiscuous mode [ 428.863442][T13254] hsr_slave_1: left promiscuous mode [ 428.876685][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.885800][T13254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.898321][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.906351][T13254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.962384][T13254] veth1_macvtap: left promiscuous mode [ 428.969593][T13254] veth0_macvtap: left promiscuous mode [ 428.978385][T13254] veth1_vlan: left promiscuous mode [ 428.983680][T13254] veth0_vlan: left promiscuous mode [ 428.991898][T13254] veth1_macvtap: left promiscuous mode [ 429.000651][T13254] veth0_macvtap: left promiscuous mode [ 429.008493][T13254] veth1_vlan: left promiscuous mode [ 429.013836][T13254] veth0_vlan: left promiscuous mode [ 429.489443][ T5840] Bluetooth: hci3: command tx timeout [ 429.598865][T13254] team0 (unregistering): Port device team_slave_1 removed [ 429.648872][T13254] team0 (unregistering): Port device team_slave_0 removed [ 430.351946][T13254] team0 (unregistering): Port device team_slave_1 removed [ 430.394271][T13254] team0 (unregistering): Port device team_slave_0 removed [ 430.818182][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.889409][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.935687][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.942907][T13257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.978529][T14993] netlink: 'syz.1.2470': attribute type 11 has an invalid length. [ 430.989887][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.997218][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.025730][T14994] syzkaller1: entered promiscuous mode [ 431.031699][T14994] syzkaller1: entered allmulticast mode [ 431.258889][T14787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.285825][T14787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.339860][T14787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.417147][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 431.446597][T14787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.462164][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 431.477355][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 431.597413][T14801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.636836][T14801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.692055][T14801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.752210][T14801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 431.937550][T14778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.023114][T14787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.219574][T14787] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.282260][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.289501][T13259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.340167][T13229] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.347386][T13229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.396918][T14801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.538265][T14801] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.573081][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.580337][T13254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.672138][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.679355][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.882690][T14778] veth0_vlan: entered promiscuous mode [ 432.931973][T14778] veth1_vlan: entered promiscuous mode [ 433.059985][T14778] veth0_macvtap: entered promiscuous mode [ 433.071186][T15053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2481'. [ 433.097477][T14778] veth1_macvtap: entered promiscuous mode [ 433.149346][T14778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.157866][T15053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2481'. [ 433.211136][T14778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.266259][T14778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.280051][T14778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.291674][T14778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.300795][T14778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.319264][T14787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.515418][T14787] veth0_vlan: entered promiscuous mode [ 433.575984][T14801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.609394][T14787] veth1_vlan: entered promiscuous mode [ 433.622215][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.635550][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.689914][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 433.735090][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 433.736224][T14787] veth0_macvtap: entered promiscuous mode [ 433.752157][T13256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.782133][T13256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.806539][T14787] veth1_macvtap: entered promiscuous mode [ 433.824280][T15074] netlink: 'syz.1.2486': attribute type 10 has an invalid length. [ 433.849953][T14801] veth0_vlan: entered promiscuous mode [ 433.904179][T14801] veth1_vlan: entered promiscuous mode [ 433.953930][T14787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.977453][T15080] lo speed is unknown, defaulting to 1000 [ 434.115962][T14787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.151253][T14787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.160975][T14787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.171387][T14787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.180246][T14787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.257552][T14801] veth0_macvtap: entered promiscuous mode [ 434.487480][T14801] veth1_macvtap: entered promiscuous mode [ 434.683695][T14801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.740462][T14801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.773810][T14801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.795487][T14801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.804763][T14801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.813475][T14801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.908057][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.923246][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.962199][T13252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.998908][T13256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.010116][T13256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.062797][T13252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.151704][T13252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.266462][T15098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2494'. [ 435.285553][T15099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2494'. [ 435.339328][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.363062][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.394335][T13252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.569490][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.582678][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.766105][T13252] bridge_slave_1: left allmulticast mode [ 435.771814][T13252] bridge_slave_1: left promiscuous mode [ 435.807228][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.816304][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.828588][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.836456][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.846546][T13252] bridge_slave_0: left allmulticast mode [ 435.852195][T13252] bridge_slave_0: left promiscuous mode [ 435.858922][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.867607][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.876682][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 436.232737][T13252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.246232][T13252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.257090][T13252] bond0 (unregistering): Released all slaves [ 436.363813][T15102] lo speed is unknown, defaulting to 1000 [ 436.647886][T13252] hsr_slave_0: left promiscuous mode [ 436.671445][T13252] hsr_slave_1: left promiscuous mode [ 436.701696][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.709717][T13252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.733729][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.768140][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.831692][T13252] veth1_macvtap: left promiscuous mode [ 436.840307][T13252] veth0_macvtap: left promiscuous mode [ 436.851297][T13252] veth1_vlan: left promiscuous mode [ 436.859355][T13252] veth0_vlan: left promiscuous mode [ 436.920934][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 437.001785][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.013722][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.022655][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.031139][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.040792][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.411370][T13252] team0 (unregistering): Port device team_slave_1 removed [ 437.450189][T13252] team0 (unregistering): Port device team_slave_0 removed [ 437.944061][T15112] lo speed is unknown, defaulting to 1000 [ 437.957274][ T51] Bluetooth: hci1: command tx timeout [ 438.019733][T15102] chnl_net:caif_netlink_parms(): no params data found [ 438.315860][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.323127][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.349004][T15102] bridge_slave_0: entered allmulticast mode [ 438.371133][T15102] bridge_slave_0: entered promiscuous mode [ 438.426536][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.433714][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.450444][T15102] bridge_slave_1: entered allmulticast mode [ 438.460042][T15102] bridge_slave_1: entered promiscuous mode [ 438.506648][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.515772][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.524709][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.533339][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.543180][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.552784][T15125] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2498'. [ 438.702897][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.716634][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.758875][T13252] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.978196][T15123] lo speed is unknown, defaulting to 1000 [ 438.986268][T13252] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.038202][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.041994][T15112] chnl_net:caif_netlink_parms(): no params data found [ 439.060336][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.069758][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.076876][ T5156] Bluetooth: hci2: command tx timeout [ 439.083856][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.091971][T15102] team0: Port device team_slave_0 added [ 439.101849][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 439.126767][T13252] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.158362][T15102] team0: Port device team_slave_1 added [ 439.256465][T13252] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.317491][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.335621][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.377135][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.408382][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.419560][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.446372][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.479132][T15135] lo speed is unknown, defaulting to 1000 [ 439.648672][T15102] hsr_slave_0: entered promiscuous mode [ 439.656024][T15102] hsr_slave_1: entered promiscuous mode [ 439.662409][T15102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.671185][T15102] Cannot create hsr debugfs directory [ 439.729996][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.738186][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.746109][T15112] bridge_slave_0: entered allmulticast mode [ 439.753779][T15112] bridge_slave_0: entered promiscuous mode [ 439.793787][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.801839][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.809121][T15112] bridge_slave_1: entered allmulticast mode [ 439.818466][T15112] bridge_slave_1: entered promiscuous mode [ 439.854939][T15152] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 439.961569][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.035633][ T5840] Bluetooth: hci1: command tx timeout [ 440.051087][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.168838][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.235632][T13252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.336327][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 440.345674][T15162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2505'. [ 440.380415][T13252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.387941][T15163] netlink: 'syz.0.2505': attribute type 2 has an invalid length. [ 440.406594][T15163] netlink: 'syz.0.2505': attribute type 8 has an invalid length. [ 440.418465][T15112] team0: Port device team_slave_0 added [ 440.419746][T15163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2505'. [ 440.430984][T15112] team0: Port device team_slave_1 added [ 440.510858][T15162] gtp1: entered promiscuous mode [ 440.518635][T15162] gtp1: entered allmulticast mode [ 440.550615][T13252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.595410][ T5840] Bluetooth: hci3: command tx timeout [ 440.609774][T15123] chnl_net:caif_netlink_parms(): no params data found [ 440.678486][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.685931][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.712319][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.734044][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.741984][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.768940][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.797776][T13252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.856406][T15135] chnl_net:caif_netlink_parms(): no params data found [ 441.063608][T15112] hsr_slave_0: entered promiscuous mode [ 441.075761][T15112] hsr_slave_1: entered promiscuous mode [ 441.084800][T15112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.101449][T15112] Cannot create hsr debugfs directory [ 441.124216][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 441.154764][ T51] Bluetooth: hci4: command tx timeout [ 441.161887][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2507'. [ 441.172315][ T51] Bluetooth: hci2: command tx timeout [ 441.292490][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.304972][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.312213][T15135] bridge_slave_0: entered allmulticast mode [ 441.325908][T15135] bridge_slave_0: entered promiscuous mode [ 441.432028][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.439867][T15135] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.454357][T15135] bridge_slave_1: entered allmulticast mode [ 441.462353][T15135] bridge_slave_1: entered promiscuous mode [ 441.492162][T15123] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.499639][T15123] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.512906][T15123] bridge_slave_0: entered allmulticast mode [ 441.520856][T15123] bridge_slave_0: entered promiscuous mode [ 441.532610][T15123] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.539824][T15123] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.547467][T15123] bridge_slave_1: entered allmulticast mode [ 441.557094][T15123] bridge_slave_1: entered promiscuous mode [ 441.606074][T15135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.662991][T15135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.726392][T15123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.774152][T15191] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 441.783387][T15191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2510'. [ 441.792913][T15191] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 441.840844][T15123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.902574][T13252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.998001][T15135] team0: Port device team_slave_0 added [ 442.109629][T13252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.123252][ T51] Bluetooth: hci1: command tx timeout [ 442.154228][T15135] team0: Port device team_slave_1 added [ 442.185506][T15123] team0: Port device team_slave_0 added [ 442.222443][T15135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.232244][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.259273][T15135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.273140][T15123] team0: Port device team_slave_1 added [ 442.319817][T13252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.366479][T15201] IPVS: persistence engine module ip_vs_pe_ not found [ 442.400949][T15135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.408796][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.435458][T15135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.479626][T13252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.501970][T15123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.509694][T15123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.541094][T15123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.554103][T15123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.561652][T15123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.588574][T15123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.600106][T15102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.641726][T15102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.675578][ T51] Bluetooth: hci3: command tx timeout [ 442.731573][T15102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.810084][T15135] hsr_slave_0: entered promiscuous mode [ 442.821880][T15135] hsr_slave_1: entered promiscuous mode [ 442.832311][T15135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.840260][T15135] Cannot create hsr debugfs directory [ 442.847343][T15102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.880469][T15123] hsr_slave_0: entered promiscuous mode [ 442.889409][T15123] hsr_slave_1: entered promiscuous mode [ 442.896240][T15123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.903910][T15123] Cannot create hsr debugfs directory [ 443.046466][T13252] bond0: left allmulticast mode [ 443.051526][T13252] bridge0: port 1(bond0) entered disabled state [ 443.078878][T13252] team0: left allmulticast mode [ 443.084276][T13252] bridge6: port 1(team0) entered disabled state [ 443.102339][T13252] bridge_slave_1: left allmulticast mode [ 443.108137][T13252] bridge_slave_1: left promiscuous mode [ 443.113924][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.127893][T13252] bridge_slave_0: left allmulticast mode [ 443.133648][T13252] bridge_slave_0: left promiscuous mode [ 443.141006][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.154097][T13252] bridge_slave_1: left allmulticast mode [ 443.160521][T13252] bridge_slave_1: left promiscuous mode [ 443.171885][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.181515][T13252] bridge_slave_0: left allmulticast mode [ 443.190955][T13252] bridge_slave_0: left promiscuous mode [ 443.198448][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.245013][ T51] Bluetooth: hci2: command tx timeout [ 443.246815][ T5840] Bluetooth: hci4: command tx timeout [ 443.862330][T15232] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 444.194639][ T5840] Bluetooth: hci1: command tx timeout [ 444.240667][T13252] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 444.253415][T13252] bond1 (unregistering): Released all slaves [ 444.281960][T13252] bond0 (unregistering): Released all slaves [ 444.298132][T13252] bond2 (unregistering): Released all slaves [ 444.315053][T13252] bond3 (unregistering): Released all slaves [ 444.620614][T13252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.632933][T13252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.643421][T13252] bond0 (unregistering): Released all slaves [ 444.757785][ T5840] Bluetooth: hci3: command tx timeout [ 444.930777][T13252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.943205][T13252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.953820][T13252] bond0 (unregistering): Released all slaves [ 445.018182][T15232] þ`Ì: entered promiscuous mode [ 445.183088][T13252] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 445.313724][T13252] tipc: Disabling bearer [ 445.321898][ T5840] Bluetooth: hci2: command tx timeout [ 445.327375][ T5840] Bluetooth: hci4: command tx timeout [ 445.341166][T13252] tipc: Left network mode [ 445.560024][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.591961][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.649862][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.657128][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.747260][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.754552][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.870222][T15112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.919047][T15112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.939599][T15112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.982419][T15112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.382001][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.440970][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.482489][T13229] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.489694][T13229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.511681][T13252] hsr_slave_0: left promiscuous mode [ 446.522388][T13252] hsr_slave_0: left promiscuous mode [ 446.529456][T13252] hsr_slave_1: left promiscuous mode [ 446.537644][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.545216][T13252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.553060][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.561992][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.573766][T13252] hsr_slave_0: left promiscuous mode [ 446.580242][T13252] hsr_slave_1: left promiscuous mode [ 446.586493][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.593917][T13252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.602195][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.609695][T13252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.667614][T13252] veth1_macvtap: left promiscuous mode [ 446.673222][T13252] veth0_macvtap: left promiscuous mode [ 446.679798][T13252] veth1_vlan: left promiscuous mode [ 446.691098][T13252] veth1_macvtap: left promiscuous mode [ 446.696994][T13252] veth0_macvtap: left promiscuous mode [ 446.702590][T13252] veth1_vlan: left promiscuous mode [ 446.708055][T13252] veth0_vlan: left promiscuous mode [ 446.715003][T13252] veth1_macvtap: left promiscuous mode [ 446.720567][T13252] veth0_macvtap: left promiscuous mode [ 446.727331][T13252] veth1_vlan: left promiscuous mode [ 446.732630][T13252] veth0_vlan: left promiscuous mode [ 446.834849][ T5840] Bluetooth: hci3: command tx timeout [ 446.922720][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2526'. [ 446.932551][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2526'. [ 446.985453][T15266] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 447.139412][T13252] pim6reg (unregistering): left allmulticast mode [ 447.203832][T13252] pimreg320 (unregistering): left allmulticast mode [ 447.225830][T13252] pimreg3 (unregistering): left allmulticast mode [ 447.404715][ T5840] Bluetooth: hci4: command tx timeout [ 448.272860][T13252] team0 (unregistering): Port device team_slave_1 removed [ 448.312965][T13252] team0 (unregistering): Port device team_slave_0 removed [ 449.013150][T13252] team0 (unregistering): Port device team_slave_1 removed [ 449.053441][T13252] team0 (unregistering): Port device team_slave_0 removed [ 449.442371][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.449532][T13259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.464872][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.623589][T15135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.648253][T15135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.720592][T15135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.796591][T15135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 450.015926][T15287] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 450.023787][T15287] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2529'. [ 450.341165][T15135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.410973][T15102] veth0_vlan: entered promiscuous mode [ 450.461432][T15135] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.485902][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.513064][T15102] veth1_vlan: entered promiscuous mode [ 450.530444][T15123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 450.541995][T15123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.593476][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.600667][T13259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.625412][T15295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.636746][T15123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 450.682635][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.689914][T13259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.720990][T15123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 450.881646][T15102] veth0_macvtap: entered promiscuous mode [ 450.919206][T15102] veth1_macvtap: entered promiscuous mode [ 450.928190][T15112] veth0_vlan: entered promiscuous mode [ 450.953159][T13252] IPVS: stop unused estimator thread 0... [ 451.003589][T15112] veth1_vlan: entered promiscuous mode [ 451.056133][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.109945][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.163162][T15102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.194314][T15102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.208520][T15102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.218266][T15102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.258578][T15112] veth0_macvtap: entered promiscuous mode [ 451.330071][T15123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.353845][T15112] veth1_macvtap: entered promiscuous mode [ 451.472930][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.487296][T15123] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.509686][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.525326][T13252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.533253][T13252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.583455][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.590725][T13257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.629148][T15112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.639774][T15112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.649599][T15112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.658552][T15112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.677385][T13254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.697031][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.704219][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.711755][T13254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.763299][T15135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.937665][T13257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.960180][T13257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.082289][T13259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.087614][T15135] veth0_vlan: entered promiscuous mode [ 452.120292][T13259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.274281][T13257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.354311][T15135] veth1_vlan: entered promiscuous mode [ 452.478929][T13257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.583389][T15123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.673216][T13257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.856417][T13257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.915977][T15135] veth0_macvtap: entered promiscuous mode [ 452.942965][T15135] veth1_macvtap: entered promiscuous mode [ 452.996910][T15123] veth0_vlan: entered promiscuous mode [ 453.023346][T15135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.050421][T15123] veth1_vlan: entered promiscuous mode [ 453.082871][T15135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.151171][T15123] veth0_macvtap: entered promiscuous mode [ 453.171308][T15135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.185687][T15135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.198720][T15135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.208634][T15135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.245787][T15123] veth1_macvtap: entered promiscuous mode [ 453.312235][T13257] bridge_slave_1: left allmulticast mode [ 453.334899][T13257] bridge_slave_1: left promiscuous mode [ 453.340834][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.367297][T13257] bridge_slave_0: left allmulticast mode [ 453.373064][T13257] bridge_slave_0: left promiscuous mode [ 453.395737][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.715659][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.739826][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.756447][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.779998][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.802000][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 454.075328][T13257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.095348][T13257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.117711][T13257] bond0 (unregistering): Released all slaves [ 454.289388][T15123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.309463][T15123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.456684][T15312] lo speed is unknown, defaulting to 1000 [ 454.465330][T15123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.474061][T15123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.485022][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.485340][T15123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.501019][T15123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.503216][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.518647][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.526872][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.536180][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.645959][T13229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.653815][T13229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.737523][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.758018][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.772848][T13257] hsr_slave_0: left promiscuous mode [ 454.782659][T13257] hsr_slave_1: left promiscuous mode [ 454.789256][T13257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.796788][T13257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.805590][T13257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.813012][T13257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.852239][T13257] veth1_macvtap: left promiscuous mode [ 454.860224][T13257] veth0_macvtap: left promiscuous mode [ 454.871238][T13257] veth1_vlan: left promiscuous mode [ 454.879034][T13257] veth0_vlan: left promiscuous mode [ 455.528607][T13257] team0 (unregistering): Port device team_slave_1 removed [ 455.597644][T13257] team0 (unregistering): Port device team_slave_0 removed [ 455.878751][ T5840] Bluetooth: hci1: command tx timeout [ 456.076833][T13254] ================================================================== [ 456.085034][T13254] BUG: KASAN: slab-use-after-free in __linkwatch_run_queue+0x5b9/0x7e0 [ 456.093479][T13254] Read of size 8 at addr ffff88806d5b2b90 by task kworker/u8:43/13254 [ 456.101641][T13254] [ 456.103974][T13254] CPU: 0 UID: 0 PID: 13254 Comm: kworker/u8:43 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 456.103999][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.104012][T13254] Workqueue: events_unbound linkwatch_event [ 456.104040][T13254] Call Trace: [ 456.104048][T13254] [ 456.104055][T13254] dump_stack_lvl+0x189/0x250 [ 456.104086][T13254] ? __virt_addr_valid+0x1c8/0x5c0 [ 456.104104][T13254] ? rcu_is_watching+0x15/0xb0 [ 456.104131][T13254] ? __kasan_check_byte+0x12/0x40 [ 456.104150][T13254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.104178][T13254] ? rcu_is_watching+0x15/0xb0 [ 456.104206][T13254] ? lock_release+0x4b/0x3e0 [ 456.104246][T13254] ? __virt_addr_valid+0x1c8/0x5c0 [ 456.104265][T13254] ? __virt_addr_valid+0x4a5/0x5c0 [ 456.104284][T13254] print_report+0xd2/0x2b0 [ 456.104308][T13254] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 456.104331][T13254] kasan_report+0x118/0x150 [ 456.104351][T13254] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 456.104382][T13254] __linkwatch_run_queue+0x5b9/0x7e0 [ 456.104414][T13254] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 456.104452][T13254] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.104474][T13254] ? process_scheduled_works+0x9ef/0x17b0 [ 456.104506][T13254] ? process_scheduled_works+0x9ef/0x17b0 [ 456.104535][T13254] linkwatch_event+0x4c/0x60 [ 456.104557][T13254] process_scheduled_works+0xae1/0x17b0 [ 456.104599][T13254] ? __pfx_process_scheduled_works+0x10/0x10 [ 456.104635][T13254] worker_thread+0x8a0/0xda0 [ 456.104677][T13254] kthread+0x70e/0x8a0 [ 456.104698][T13254] ? __pfx_worker_thread+0x10/0x10 [ 456.104726][T13254] ? __pfx_kthread+0x10/0x10 [ 456.104746][T13254] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.104769][T13254] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.104791][T13254] ? __pfx_kthread+0x10/0x10 [ 456.104812][T13254] ret_from_fork+0x3fc/0x770 [ 456.104839][T13254] ? __pfx_ret_from_fork+0x10/0x10 [ 456.104868][T13254] ? __switch_to_asm+0x39/0x70 [ 456.104886][T13254] ? __switch_to_asm+0x33/0x70 [ 456.104904][T13254] ? __pfx_kthread+0x10/0x10 [ 456.104924][T13254] ret_from_fork_asm+0x1a/0x30 [ 456.104951][T13254] [ 456.104958][T13254] [ 456.313966][T13254] Allocated by task 15102: [ 456.318461][T13254] kasan_save_track+0x3e/0x80 [ 456.323139][T13254] __kasan_kmalloc+0x93/0xb0 [ 456.327722][T13254] __kvmalloc_node_noprof+0x30d/0x5f0 [ 456.333092][T13254] alloc_netdev_mqs+0xa6/0x11e0 [ 456.337941][T13254] rtnl_create_link+0x31f/0xd10 [ 456.342809][T13254] rtnl_newlink_create+0x25c/0xb00 [ 456.347936][T13254] rtnl_newlink+0x16d6/0x1c70 [ 456.352606][T13254] rtnetlink_rcv_msg+0x7cf/0xb70 [ 456.357543][T13254] netlink_rcv_skb+0x205/0x470 [ 456.362310][T13254] netlink_unicast+0x758/0x8d0 [ 456.367075][T13254] netlink_sendmsg+0x805/0xb30 [ 456.371833][T13254] __sock_sendmsg+0x219/0x270 [ 456.376511][T13254] __sys_sendto+0x3bd/0x520 [ 456.381009][T13254] __x64_sys_sendto+0xde/0x100 [ 456.385767][T13254] do_syscall_64+0xfa/0x3b0 [ 456.390276][T13254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.396168][T13254] [ 456.398496][T13254] Freed by task 13257: [ 456.402557][T13254] kasan_save_track+0x3e/0x80 [ 456.407243][T13254] kasan_save_free_info+0x46/0x50 [ 456.412272][T13254] __kasan_slab_free+0x62/0x70 [ 456.417025][T13254] kfree+0x18e/0x440 [ 456.420917][T13254] device_release+0x9c/0x1c0 [ 456.425505][T13254] kobject_put+0x22b/0x480 [ 456.429932][T13254] netdev_run_todo+0xd2e/0xea0 [ 456.434696][T13254] default_device_exit_batch+0x81e/0x890 [ 456.440356][T13254] ops_undo_list+0x522/0x990 [ 456.444943][T13254] cleanup_net+0x4c5/0x800 [ 456.449367][T13254] process_scheduled_works+0xae1/0x17b0 [ 456.454911][T13254] worker_thread+0x8a0/0xda0 [ 456.459507][T13254] kthread+0x70e/0x8a0 [ 456.463575][T13254] ret_from_fork+0x3fc/0x770 [ 456.468164][T13254] ret_from_fork_asm+0x1a/0x30 [ 456.472929][T13254] [ 456.475250][T13254] The buggy address belongs to the object at ffff88806d5b2000 [ 456.475250][T13254] which belongs to the cache kmalloc-cg-4k of size 4096 [ 456.489569][T13254] The buggy address is located 2960 bytes inside of [ 456.489569][T13254] freed 4096-byte region [ffff88806d5b2000, ffff88806d5b3000) [ 456.503533][T13254] [ 456.505864][T13254] The buggy address belongs to the physical page: [ 456.512276][T13254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6d5b0 [ 456.521031][T13254] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 456.529520][T13254] memcg:ffff88803421ae01 [ 456.533745][T13254] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 456.541302][T13254] page_type: f5(slab) [ 456.545281][T13254] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 456.553855][T13254] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88803421ae01 [ 456.562434][T13254] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 456.571095][T13254] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88803421ae01 [ 456.579762][T13254] head: 00fff00000000003 ffffea0001b56c01 00000000ffffffff 00000000ffffffff [ 456.588430][T13254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 456.597089][T13254] page dumped because: kasan: bad access detected [ 456.603499][T13254] page_owner tracks the page as allocated [ 456.609207][T13254] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15112, tgid 15112 (syz-executor), ts 440576013295, free_ts 432458930302 [ 456.630905][T13254] post_alloc_hook+0x240/0x2a0 [ 456.635667][T13254] get_page_from_freelist+0x21e4/0x22c0 [ 456.641214][T13254] __alloc_frozen_pages_noprof+0x181/0x370 [ 456.647016][T13254] alloc_pages_mpol+0x232/0x4a0 [ 456.651857][T13254] allocate_slab+0x8a/0x3b0 [ 456.656357][T13254] ___slab_alloc+0xbfc/0x1480 [ 456.661030][T13254] __kmalloc_noprof+0x305/0x4f0 [ 456.665872][T13254] __register_sysctl_table+0x72/0x1340 [ 456.671326][T13254] __addrconf_sysctl_register+0x398/0x530 [ 456.677041][T13254] addrconf_sysctl_register+0x168/0x1c0 [ 456.682599][T13254] ipv6_add_dev+0xd46/0x1370 [ 456.687181][T13254] addrconf_notify+0x794/0x1010 [ 456.692030][T13254] notifier_call_chain+0x1b3/0x3e0 [ 456.697140][T13254] register_netdevice+0x1608/0x1ae0 [ 456.702334][T13254] veth_newlink+0x5cc/0xa50 [ 456.706831][T13254] rtnl_newlink_create+0x310/0xb00 [ 456.711936][T13254] page last free pid 15041 tgid 15041 stack trace: [ 456.718429][T13254] __free_frozen_pages+0xc71/0xe70 [ 456.723534][T13254] __slab_free+0x326/0x400 [ 456.727946][T13254] qlist_free_all+0x97/0x140 [ 456.732537][T13254] kasan_quarantine_reduce+0x148/0x160 [ 456.738000][T13254] __kasan_slab_alloc+0x22/0x80 [ 456.742842][T13254] __kmalloc_noprof+0x224/0x4f0 [ 456.747699][T13254] tomoyo_realpath_from_path+0xe3/0x5d0 [ 456.753247][T13254] tomoyo_path_perm+0x213/0x4b0 [ 456.758087][T13254] security_inode_getattr+0x12f/0x330 [ 456.763452][T13254] __x64_sys_newfstat+0xfc/0x200 [ 456.768386][T13254] do_syscall_64+0xfa/0x3b0 [ 456.772900][T13254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.778784][T13254] [ 456.781103][T13254] Memory state around the buggy address: [ 456.786725][T13254] ffff88806d5b2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.794780][T13254] ffff88806d5b2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.802843][T13254] >ffff88806d5b2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.810889][T13254] ^ [ 456.815472][T13254] ffff88806d5b2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 456.823530][T13254] ffff88806d5b2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 456.831581][T13254] ================================================================== [ 456.846207][ T5840] Bluetooth: hci2: command tx timeout [ 456.853373][T13254] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 456.860597][T13254] CPU: 0 UID: 0 PID: 13254 Comm: kworker/u8:43 Not tainted 6.16.0-rc1-syzkaller-00285-g3b5b1c428260 #0 PREEMPT(full) [ 456.872969][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.883029][T13254] Workqueue: events_unbound linkwatch_event [ 456.888941][T13254] Call Trace: [ 456.892230][T13254] [ 456.895164][T13254] dump_stack_lvl+0x99/0x250 [ 456.899788][T13254] ? __asan_memcpy+0x40/0x70 [ 456.904394][T13254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.909615][T13254] ? __pfx__printk+0x10/0x10 [ 456.914222][T13254] panic+0x2db/0x790 [ 456.918139][T13254] ? __pfx_panic+0x10/0x10 [ 456.922580][T13254] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 456.928481][T13254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 456.934822][T13254] ? print_memory_metadata+0x314/0x400 [ 456.940305][T13254] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 456.945776][T13254] check_panic_on_warn+0x89/0xb0 [ 456.950725][T13254] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 456.956198][T13254] end_report+0x78/0x160 [ 456.960467][T13254] kasan_report+0x129/0x150 [ 456.964973][T13254] ? __linkwatch_run_queue+0x5b9/0x7e0 [ 456.970449][T13254] __linkwatch_run_queue+0x5b9/0x7e0 [ 456.975748][T13254] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 456.981565][T13254] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.986769][T13254] ? process_scheduled_works+0x9ef/0x17b0 [ 456.992508][T13254] ? process_scheduled_works+0x9ef/0x17b0 [ 456.998238][T13254] linkwatch_event+0x4c/0x60 [ 457.002842][T13254] process_scheduled_works+0xae1/0x17b0 [ 457.008414][T13254] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.014426][T13254] worker_thread+0x8a0/0xda0 [ 457.019059][T13254] kthread+0x70e/0x8a0 [ 457.023139][T13254] ? __pfx_worker_thread+0x10/0x10 [ 457.028268][T13254] ? __pfx_kthread+0x10/0x10 [ 457.032862][T13254] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.038065][T13254] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.043266][T13254] ? __pfx_kthread+0x10/0x10 [ 457.047865][T13254] ret_from_fork+0x3fc/0x770 [ 457.052468][T13254] ? __pfx_ret_from_fork+0x10/0x10 [ 457.057595][T13254] ? __switch_to_asm+0x39/0x70 [ 457.062365][T13254] ? __switch_to_asm+0x33/0x70 [ 457.067129][T13254] ? __pfx_kthread+0x10/0x10 [ 457.071732][T13254] ret_from_fork_asm+0x1a/0x30 [ 457.076508][T13254] [ 457.079658][T13254] Kernel Offset: disabled [ 457.083978][T13254] Rebooting in 86400 seconds..