last executing test programs: 1m27.815587773s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 1m27.349030251s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 1m13.569858193s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 1m12.473884916s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 1m11.520880319s ago: executing program 4 (id=2105): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000008e04"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad0000009500f30f000000005b2736cad1153141a19cf01f3e58a7241e8b858f35459c3e81cf7e5e66a276ab32bac3b4d78b0bac54c787220b6f9fffffffff16efb3616d71346cb12324502d70256a9236defe037d2c0c9052aeb64970b7ee5e8010dca5cfcaa5a8f9b78d9ebc486b37a89a1524ad0480c751349d322cc7ae1e2674725e8bb625e5b7b214951d4f8101d6e398324490a94ab9f850d4512f03b00195f26551ba8733fbe1f89d9eed12f698cfd29830d3db9f37bc32f77bea3c4371"], &(0x7f0000000440)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m11.342130901s ago: executing program 4 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r1, &(0x7f0000000440)="a8246e41", 0x0}, 0x20) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="77b794afc8fcff5571c806243501ffdf62767088aa45dbb600610d5d80401d55f22685dfe956678d927a6f8c36d2227d25177a2640a63319ddcb0c709c6a47690c0b0b1b45d62c4dc4659add378625c3286bdd3b07837ccb3f3f9a5a1dc4945d8752e45ad14e828f972758ac9accffb58ccc1d67b8b56dc6deafd45c1dfcc35caf95833b5f30415d60e68a2e7f67e3ef85709434be00b3d24bb7a11ebe6695aaf0cd978594b89c6e1c6f8b30dc96fba585aaa8b208a44a6b4b67e97668f2d3625dac0ae55a2accdd8ea1c28d0fb30afabc814789cd2174d1e5", @ANYBLOB="df4800000000000000000c0000002c0003802800038014000180080001004000000005000200000000001000012bbe0002007369743000000000180001801400020073697430"], 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 1m11.298790544s ago: executing program 4 (id=2108): unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0xff}, 0x8) read(r0, &(0x7f0000000100)=""/41, 0x29) 58.048735554s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 56.045142223s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 55.052703621s ago: executing program 4 (id=2108): unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0xff}, 0x8) read(r0, &(0x7f0000000100)=""/41, 0x29) 39.981010249s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 39.30862848s ago: executing program 4 (id=2108): unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0xff}, 0x8) read(r0, &(0x7f0000000100)=""/41, 0x29) 36.916742249s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 22.153687551s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 21.577102452s ago: executing program 4 (id=2108): unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000000c0)=0x45) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0xff}, 0x8) read(r0, &(0x7f0000000100)=""/41, 0x29) 21.154596469s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 7.061658237s ago: executing program 1 (id=1298): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) (fail_nth: 1) r2 = accept4$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000240)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000e600"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='block_bio_remap\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) 5.480459593s ago: executing program 2 (id=1960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0x82000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x70, 0x0, 0x8, 0x3ff}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0xff39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f0000000540)=0x9c) 2.689770026s ago: executing program 3 (id=2316): unshare(0x40600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.584909864s ago: executing program 0 (id=2317): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socket(0x10, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x10, 0x0, 0xe7, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2, 0x43, 0x0, 0x6, 0x4, [{0x3, 0x5}, {0xc}, {0x6, 0x80000000}, {0x8, 0xffff0001}, {0x3, 0x2}]}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff, 0x0, @void, @value}, 0x28) 2.454060144s ago: executing program 3 (id=2318): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x5, 0x10001, 0x10009, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x5, 0x10001, 0x10009, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r0}, &(0x7f0000001780), &(0x7f00000017c0)='%-010d \x00'}, 0x20) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000080}, 0x20040040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="cc", 0x1}, {&(0x7f0000000040)="e2f4cf8d1649a57e95c5fd7a9b5c441f683d307849b70f", 0x17}, {&(0x7f0000000180)="9d43d90ebd93b5e5c2b02e3615c8c122e521c8fd1787cc85ce4b3ed854b179e64008a4fbe7fa5c3d7a6470b9e9dc5432716b81662712b7d564312ff7683c7832df68c2014a0b18ee78c7ea481cc637525f366f555a8f8287af8404f387bcbe04e9f3b4c189a8f9b1", 0x68}], 0x3}, 0xc001) (async) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="cc", 0x1}, {&(0x7f0000000040)="e2f4cf8d1649a57e95c5fd7a9b5c441f683d307849b70f", 0x17}, {&(0x7f0000000180)="9d43d90ebd93b5e5c2b02e3615c8c122e521c8fd1787cc85ce4b3ed854b179e64008a4fbe7fa5c3d7a6470b9e9dc5432716b81662712b7d564312ff7683c7832df68c2014a0b18ee78c7ea481cc637525f366f555a8f8287af8404f387bcbe04e9f3b4c189a8f9b1", 0x68}], 0x3}, 0xc001) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.453572819s ago: executing program 0 (id=2319): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a3200000000090001"], 0xe4}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0xc8, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x9c, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x5, 0x9, 0x7, 0x4, 0x9, 0x4, 0x6, 0xfffffffb, [{0x4, 0xfff, 0x9, 0x2}, {0x1, 0x8, 0x1, 0x6}, {0xb00, 0x0, 0x80000001, 0x6}, {0xff, 0xffff, 0x1, 0x7}, {0x4, 0x2, 0xf, 0xffffffeb}, {0x7, 0x1ff, 0xf8000000, 0x8}, {0x6, 0x1, 0xec8, 0x7}]}}, @TCA_U32_INDEV={0x14, 0x8, 'ip6gretap0\x00'}]}}]}, 0xc8}}, 0x4044040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000093c0002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001008316c4fb18f66dd4010081120800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) 2.320622183s ago: executing program 3 (id=2320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000782e000018010000786c6c25000000000020203a3f1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001000080850000001000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@initdev, @empty}, &(0x7f0000000280)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0xfe, 0x4, 0x1}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x8}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x596c, 0x500000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x46a2f000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f00000003c0), &(0x7f0000000740)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x110, 0x2}], 0x10}}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x50, 0x0, &(0x7f0000000100)) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1.6311311s ago: executing program 0 (id=2321): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x38}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r1, &(0x7f0000000200), &(0x7f0000001d40)=@tcp6=r0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 1.518467311s ago: executing program 3 (id=2322): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161002, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x191043, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x40003) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x3d, 0x9, 0x70bd2a, 0x0, {0x2}, [@typed={0x4}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}}, 0x8004) 1.454136414s ago: executing program 0 (id=2323): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x9, r3}, 0x38) readv(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd", 0x21) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}, 0x40) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0xfff, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) 1.272193359s ago: executing program 0 (id=2324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(0x0, r8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000013c0)) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x55502, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) sendmmsg$inet(r5, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340), 0x0) 1.177570255s ago: executing program 3 (id=2325): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c032e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb477ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad750f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c262fb637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf96283447366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce56902007f5d6a6270ff0f0f4c371029ca8489571b55841b06de003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0d0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a574"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000006480)=ANY=[@ANYBLOB="ec3700002500100029bd7000fedbdf254279715b657a2e3d8320bd0449ac4167a83660a09551113a23c45409d2f60b5e8714818d726d98d5ee0f9bbc88e63c4feb03ccf598c4e2e9e15ff73ea780364a173ff44b122693c05ed2af03bceb7a9c9a54133c1a26115857dd2020008f07baa2c9ef5f61352c5ed436584f025b531217cd0b6ac679bab0f40aafb6657008c81ca7edb12a1610a15353b3e20b1c0612231e48b41236a521e7e69f7ba476fa6862b8309739997243edbeba4dc298ec286f730fa53d9a157adc94e9237d045f0e5cb0d3fce7f416cf9eb0b2ed748567896843de8b58146da86d163eed8a85b74f36ce4244cc26bf81d24e21e471ed6ee7d2af23544ac7480151d6bed79014b3501e553f403172e966693b33465f1a153e956c21e764c805bfc6e28769dcfefed47b6f67cb1c9f35819b7506b5ac97f5aec247e87966b32784eafba8ecb85af66aec1f2f19945c866daf2c03dc01624ac5611e9e1f0d07a95d2852c5890e1ca6f4cb0e399b2905510b45c1b0052ac012907f32d1dc4c574dc15618d4113e7fd5a11664aee1f33fe751f077ace8a1280be668121db13b990cd5a751a56cea7df1fc418707419caa586f8e8a76742883523c5fc027d07788df22c7ae48aeccf9a65d59ed1087b83c9ea56fb5eff57175d2923272036b6a02b7b49e3a281ae3348490b22a2ca4a25aecebfb603321c756e05616265db412d40ded1e6fc3af311f8d673da44c7e36702581a999d70fb147b3dcd34e6e8d12503a690a63798285230aff3bd9ba069696d7a239595f1f101b55d437fa18107ef40c6e0c8b85fb047c619c95c2aba1bbd0ab03c6b52ca383aeb0f5b9e9e73db8d555dd87dd8896fd30958c3fd37903993b442c7ee6570e354f834f2b2baecfed3a4074d09acb82fb351e99a400bf434ae52d3bd0f2d55df87bcfc0a4e35946a6d529c8b0e7b55369d87323255d5d2fd8ce5a6aa857546257641a8c5155c32168ad03b04dafaa7603303ef4054e1f8806a4e7b4591ffe4a0a200bbd2b6458d60172ed93af1e6b55667a3def3a1f242e817ba30b07511d3336ea47a8aefadf3fdb487bd4d19bdbd797c2bf430e46bd974d8417fbacd8bc86481d47fddb4d4989184cea021692bd551311560f8da74b5582281fd91abd50ed07ecad72431964131a043e44b97846e9a4c76b8ba3793fe5373d76debc2d6ff7e97264334cb917f56804d1fcd9848dbcb836ffcf4bf82918afa13bbf19ba24e7b1126f2af960badecb9ffa0b0f054f330d3423ffbf93f6cb6e22bbdbead74f771af1e3e0e08d7a25f77269173679de8eb8eee5bbdfd4fdeea22c43d9f5b3c4b7b6b39dd541c47c6b37812c82bd6de0627efe59e59b8af0ec26bab94972fdb4d43616c1bd27d72b6cdf53653dcd2e313ccadfc12222d9464b16e9c3dd0b5b070d7d7260a60257d15fc88d514b5cadbe07b128e7882fb53c7ce934b8095e470f045be9ff1e03361734202da7deaaf487897fee7ba0eaebd501c6b7f15ab806882ecae6a388819012b5583adcbd1342d733218c7c609c6fbe076d06ef3aa4ec990e40851e81b2012d52b9442a944d80dda01677daa2d799384d658e867a95b1933f036c13d21dba863b68ea0a4622923ca90bbb12aa03b4665174a34134646e245f4f62085afad8a374c07a90c86670d254f47b8e79a28b2f36f6a2752fcc621d613c68e49fa4c611b5c3f80acab67d4ac1e84b40dda8bbc716a67badaa69147c15b2024e84104959dd27672f8ae43d80b00955b066bee61a75510d8e352fa28b29b79a9f65057b1fec213fb274c5c1af70e5f19586036086a92e22f8f9a2b00f166bcbb438ddf3d7a52aede505b808be133599de056c23be1dd807e100fea83f91a98aaca70542c2d674b44ba179245beea808d5dda8a6be9331fb45e40f31760e1d69342b5b7cae9a4fe8dac0d580c431d1ffc92dc86f987ad6d140d76c0a0625be5d74b5ef2123509a50909c0c5306a750597ca07a690f086487c3250472804495b92e55c468c78156b3e8fbadaa58c927bbeeacd439bddab136594df6d567bcc758afdb33ba81973ac79e4fb45a1ed5973c382f97cedfc156ffb72385da65fcd457763a3d639a93b6a187bdb0b8488949d6010d180615c800e342196134b49aa2ed3691f3380c12e7bb24c4af0e3044179d557f39026ac2196418a7288978652483c7d74a80cbbd2a5ba5b56683138e14c4b04fc2cee0fd5fe33657026dddf529f65705dc988f9e703e45ae2f2fe409706bacce804c8ed8c0389156fd8131d96009afd834790586218247a191cd38273604f164e198f898ce07f23908e5851f1ad01dcc63dfa4b9a77eafeacbf39485143afe5ea1c522e9088caa49a39481d18ef4e2fe308d1e67424144d767dca6a1d01219cbc4826f358745ed8de746b8984f463ca0ad018c771fdccba6cdd3767d33a1fa86746b07e626c042340048992241aa0e55e91d0a47ab6146d9b6c28371b8e6017aeea3b50f37f7d5eb2bd41898eb5231fbe5bb7ad54391aba98a3488a8163167d81d226e02b45deaf126cc6f6dadfc3cfa464bb72dba232fce24724b60b16560709312967139d8050ec9e398c5906249c0991bac07648e6e1a94821ee64ada5c15ecf70de1abfe747550bb589ca310d1b14aa038af1872ac5617acf117cbf68fb338bb2234a9197be952a1e3a3f2eb3ccf57b83d2385b40caa41c7f8bab8f8d68af022fc7dc1897fae920a853e0fc0e104a1649c979d532d236dfe832ada64d18aa4ef214f6388255408ddeac30b043e7447731dbe1d6206c30dac778a9718740410467c62485fb338b1d3f935dba757eaa798bca236b75d4f8707f0ea7cbe4a89bef9266fcf6e864b4c3606192ae63cc5e2b6250bc21ff28396849e4053dafe0535a3962c0c9cdfa17ef1f04f00c50c9a929ebaa9ca53ac9f4c45a107a9e52bd3c8260c0d2d7147b5a98a6f20b8289f9ed32da64c13c095b5c7126ce29b917061c6aee4adeba7a8cf4e491cc0d4806b504ef909f59cd0c2238381ff7039f9900bb3b46252143019d4e09012169b92cdda3303784d8f4ecfe26d652ff868a23bff9d37b69d06bc0b0e181ebc22b10ffeb3227fc06dbb0637aedd7714f6a9bb8f62502f3d5ccf2fa92ba49fd8e434893c0603a97642d2aa2ab721400521c8fc681f0c400bebc50f9b0ea893cb925ab4e4d7e4b4ff24e1f84a7f2c45580e6fda06f9b0ca81c42ee00000e309d97ede5ebc7b16dd6169b01445ed27f2d8d72c43b1004852ebac51b0acdac94f1ced868f7aac07c11ab609d743ac75f56f23f1fb4c81069a84e1690c87ade7e567e3b2b83a15f1d36eb76e744bfe782dfb2706baa28e42893ddd44e9acc18adfaa5835cc8d551d4184273e97503203d7f132f23b598873bdfbbe5287c2e9eff3eeac6c76f3d7566be21c7544ff3e472bf1c47cfc0260ecca75b225955c99c5062bc05ab163d51b4a3f1b2b74d7a091360507fc0e25ebaa30616c6b2f7c88693613b8067a6dd90289df55ce7c86c1d796b7a3dac43c74c125de1f5b4d947c5905e4f70d05ccc0d84a6390a0d2baddd5a04d848b313fd5fae132c1ae60a6dc89b18367cf51dfa75d4c621f175c046eff6734b3e2b0e8606a372dc4f1d5684ecb12b6e3dc6ab8f9736510090f5774ba8641d9b405fa948af284246216bd10f47f6f2a4bcb49e6f419c23cbb98c75b0fb4d8d0e3a1fd41f90e18423d26f5bf98357f46250e43808545679400fc376c42452920fd3234d2c2f8b36e90c31d39cf23f327f2f8ffd6ec262e66c611ff260e2f91fa97919849bcfd62790f8ebdf9a9c8b64ba9ec1b9ad68e93178873ba4b23ab31e9c651ca122a84fff72bc2d34426eaaef7d988675f73e4b425fd3c2e53ff0969a64cb29786208d64dbf386e8506652eaad5236a89e6f783a736d6d2b2f01e289fd4c9a49056af78ee76a4dace0d2fc92c3ff9489e46155bb4eedc8e50f83539ea72d235eb42fd79aa8324fc187a90ed74c683c1fb6eb0ae079ff6f1c8d8a8ed0347fe0458ac5397f51d618aa661c4d52d43468ead2783ff2a9055a603c3c3ad87d9a25d14296bf9b866b9c99c83f198e56ae415e7857d76f81f2526ce2e78a0e567369bf43c8d73014e5b0a91236926116a68dace0d983136a786807caaec4931718ee4480dc87ab0fd0d299ac0ef39675ac4fccad3b8f6b1ae884dabb72d6c4dd52648faadc5fcb705c71207cd60355891e93df20306c082636c2130547fddbe0e914e2efd231e0727884fe1842f2f71513c2a56fdc8c6f8151378527989144ae294e38098b3aedec9803c9c4f4080d4958fefe1f20b437a913df244d7208019abf0db9748e91b627ba1d446e79ba6656aea89037b6b9b6f077aed5835f3fc57b262d78937711e800d54d0499e69072c84285ad05620f9d10f2a8d3883bbd9bd65f65a8bfcd5971b35766013cc6edbe404cec0479a0e221bb9ec7a007c7a74d41395e2abfe38f053473c8babaaef941f132dd22b8b72ee839233d256398776b151ca12137d25ea875803578fc4a1eefdee261d4389a9fc466a8972ea861e6c37a16a990c5bb53d2a941dd4372f0f11deaeb95e415f044f4cb6c93dd63c1ff2353bb5266a119e3da99ea54fbe2293b25ced9e8eacf160197a68377ab0d47d4ed8fa6ab0c626c3f057f100e312ff04eddee9b45e90e981e517560534eed6f26f1d49b231028a320ab626ce6234a3720ffda22276d2d5943b7b464e9714477e260b308452eb1c51b94a97660ff3bd549ec18b1cfcce80cb184566d007d057b6f8ebf638b8a17fdf0f7075d9e89a584ce809a6ae949091588a85f7b3d7684906494eb63aaa034503a8b530a5f4f49159ff3b67e581415cac40905a48f5545497e2ec0d27767e7f23780be52cea341b0eb4ba07e07749977c407add0e072b536229b8a04b4a36bf735253002415f6ec2ef3d72bc7522e89d2bd5c4fbadbf2bfdfe479053abd9acec2058da7c16a614f52315cae168323f252c4e5301f11eaaa7bc523dbc1d69c757c11168791c24b900de499ade725848f2d85aed03ebcaa305b42c2f522aefc66e638fade780cf24f0c5b00f677a444194ab47e1247fec6a481201e9ef05163f5f39b52f386301b4376ff87476aeb40b3d349ce6e1fc8797cd19f81666ead95722f99e1d5937c4720d88b9e6bd61aaaacc349a0ae682ebfbae856840a8245ed89acbaf627dbfabef3ff6bb4293f4e257ed062b0302e0e3ae89db1a1ae4f6ec8c27b3c4de52a8293cd6bc477045807dc9f78f4772662556dfff4cc1ab0526c741f3e8785f14d11d38a2f562e877082d444e19f1c4f7a3482715103177d0e6340577a35f498db6676d243ef07a6e756491dbd45a7b17a1793f8b6138326b02a0059ecda2ce887aee68c8979b359f915603661b28b9ffa7c585a0c45960436f38149cc4819bca475dbb95229e18c53640e00a622ffc41c5e3912313196c62ce1b5d246f443135206216a66de1dad2dad52d41f6e039a7e470498824fe9e1f8311214a43b4adf5132b77e6aa07945b50f97176746ffe70a8243498ff5d540ace8a4dcb779707f109cd221bad608b671552b71b527f144bee0423d2a0aac488c1a5a77282b0a163011cb8f876f3cce9b0dff93eab0931dfcfaea4ab647babfbd0977abaee97a410efcbdbad7fe72c944f30dcc99b48f39c8a56ad9d37e0c693173d7d7ed96dfb2446ed5ec608c7afcfe5fcfec981a804d9e2fcb1ec53ffc3f1d65d57c85b93ad49bae32a2ad701b739e09c17c9a67b72affb30248b64219fe943fc4d39850192800800de00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c005f0004000000000000000400198004005b800000000135601ee1ac344c4071f8bfeded2cae0c5b85b5b0cfbbbf3fcb5aa6ca0800df0047504c00625d1817550eddeb2b4835a21a00000000fab4e0b0e5930624d426758abca24d345e56954080fb6c0bb2cacf1d5a8e2824ed6f48f8c580f81a9409270e31b6513d3aa4a52a0000007a27a45a000000000000ee2407800400c48006be17a3c61c6d970768a521ccd952f888857151362907bcef3e732c2c8207b0144bf53a852a060d8b05a12b36a7518567e3a7f3c7132fb4eea4cc9299e9072b61a501e380c7e656440af0d0997fa90baa9610cf7c6da0e1ea6380bd83d5d482ddd3485da23fbb6b848e3acd3c1d622a7b142d3547b8b3c7cb53410bab8c78b709b1c1e9b9d93fdc919bdab15df6bf8a27df14dd978ef7b4be241df1852f7614c370fa2700ec918f2785387f9e7de0b4e40dfeb9e5766839856b859b48c6f7321005f03b47f2f08992b003b394a1d1c7e4c4726810ac4f3534c9f7ce71c7bfa1b2042e5876c5241cb69e84425346b0343da421a7cc85b7efd5be0f2ec4eea30ff2057d8612d5857a273acbfa6143f1262bc08ddf2ac0476144b8c0f153163b1487d0ac553dff3b506cd5fabc07f74c7e5ca802c14db24eda8dcf0800e6", @ANYRES32, @ANYBLOB="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"], 0x37ec}], 0x1, 0x0, 0x0, 0x40}, 0x20040000) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 1.063357773s ago: executing program 3 (id=2326): syz_emit_ethernet(0x86e, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x838, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x104, '\x00', [@hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x10}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x14, 0x807, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030300000000050000000c000000a940c6b011891caa8af2ece7bdfd9b47296ccb86104fc8c990c8bcf70617d4369403c650b1e167422a8238fc331aceea6de7c922fa873ed30a44eab550c43afccf879f4c5427a9c2128e3df2e77cf0b803d38a48a1f036de0dd0aa37b17e06987c6aa366"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x34, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x1c, 0x0, 0x0, 0x1, [@nested={0x18, 0x131, 0x0, 0x1, [@typed={0x11, 0x11d, 0x0, 0x0, @str='}!#^#\\,/,)\'/\x00'}]}]}]}, 0x34}], 0x1}, 0x0) unshare(0x68040200) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) read(r6, &(0x7f0000000000)=""/170, 0xaa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x2a020480) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000040), 0x12) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x9, '\x00', 0x0, r8, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=2327): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x20000000) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket(0x15, 0x5, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000, @value}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x83, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x22044853) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffff08004503002c00000000002f90780000000000000000000088be0018907804000000000000000800000200"/58], 0x0) kernel console output (not intermixed with test programs): T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.612698][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.619878][T13997] bridge_slave_1: entered allmulticast mode [ 313.627540][T13997] bridge_slave_1: entered promiscuous mode [ 313.674748][T14033] lo speed is unknown, defaulting to 1000 [ 313.711002][T13997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.738970][T13997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.742094][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 313.903158][T13997] team0: Port device team_slave_0 added [ 313.909273][T14033] lo speed is unknown, defaulting to 1000 [ 313.966885][T13997] team0: Port device team_slave_1 added [ 314.116904][T13997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.124357][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.150415][T13997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.168486][T13997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.175961][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.203154][T13997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.294072][ T5851] Bluetooth: hci2: command tx timeout [ 314.349159][T13999] chnl_net:caif_netlink_parms(): no params data found [ 314.409698][T13997] hsr_slave_0: entered promiscuous mode [ 314.424501][T13997] hsr_slave_1: entered promiscuous mode [ 314.441419][T14053] netlink: 'syz.0.2116': attribute type 7 has an invalid length. [ 314.483458][ T9112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.597410][ T9112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.686848][T14059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2117'. [ 314.764273][ T9112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.924520][ T9112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.009892][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.017626][T13999] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.024902][T13999] bridge_slave_0: entered allmulticast mode [ 315.031869][T13999] bridge_slave_0: entered promiscuous mode [ 315.039927][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.047184][T13999] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.055481][T13999] bridge_slave_1: entered allmulticast mode [ 315.063930][T13999] bridge_slave_1: entered promiscuous mode [ 315.108948][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'. [ 315.172886][ T5851] Bluetooth: hci1: command tx timeout [ 315.197107][T14033] chnl_net:caif_netlink_parms(): no params data found [ 315.237517][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.252597][ T5851] Bluetooth: hci4: command tx timeout [ 315.306508][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.328491][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'. [ 315.444727][T14081] lo speed is unknown, defaulting to 1000 [ 315.485274][T13999] team0: Port device team_slave_0 added [ 315.491567][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 315.493950][T13999] team0: Port device team_slave_1 added [ 315.517533][ T9112] bridge_slave_1: left allmulticast mode [ 315.524060][ T9112] bridge_slave_1: left promiscuous mode [ 315.530263][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.539266][ T9112] bridge_slave_0: left allmulticast mode [ 315.552599][ T9112] bridge_slave_0: left promiscuous mode [ 315.558310][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.214826][ T9112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.225420][ T9112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.236697][ T9112] bond0 (unregistering): Released all slaves [ 316.276964][T14085] lo speed is unknown, defaulting to 1000 [ 316.287224][T14081] lo speed is unknown, defaulting to 1000 [ 316.362737][ T5851] Bluetooth: hci2: command tx timeout [ 316.397742][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.419010][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.453428][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.482501][T14033] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.489597][T14033] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.522810][T14033] bridge_slave_0: entered allmulticast mode [ 316.550132][T14033] bridge_slave_0: entered promiscuous mode [ 316.558655][T14033] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.589139][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.601920][T14033] bridge_slave_1: entered allmulticast mode [ 316.609367][T14033] bridge_slave_1: entered promiscuous mode [ 316.643416][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.650350][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.677641][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.703186][T14085] lo speed is unknown, defaulting to 1000 [ 316.765425][T14033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.833827][T14033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.934491][T13999] hsr_slave_0: entered promiscuous mode [ 316.940664][T13999] hsr_slave_1: entered promiscuous mode [ 316.970959][T13999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.979059][T13999] Cannot create hsr debugfs directory [ 317.080281][T14033] team0: Port device team_slave_0 added [ 317.107158][T13997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 317.130826][T14033] team0: Port device team_slave_1 added [ 317.241968][T13997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 317.252245][T13997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 317.255269][ T5851] Bluetooth: hci1: command tx timeout [ 317.282134][T13997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.305577][T14033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.325956][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.328512][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.362275][ T5851] Bluetooth: hci4: command tx timeout [ 317.382597][T14033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.421445][T14033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.428652][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.455109][T14033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.494161][ T9112] hsr_slave_0: left promiscuous mode [ 317.500046][ T9112] hsr_slave_1: left promiscuous mode [ 317.506585][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.514203][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.522125][ T9112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.529930][ T9112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.555980][ T9112] veth1_macvtap: left promiscuous mode [ 317.561474][ T9112] veth0_macvtap: left promiscuous mode [ 317.567109][ T9112] veth1_vlan: left promiscuous mode [ 317.572424][ T9112] veth0_vlan: left promiscuous mode [ 317.980321][ T9112] team0 (unregistering): Port device team_slave_1 removed [ 318.021813][ T9112] team0 (unregistering): Port device team_slave_0 removed [ 318.442594][ T5851] Bluetooth: hci2: command tx timeout [ 318.639795][T14033] hsr_slave_0: entered promiscuous mode [ 318.649005][T14033] hsr_slave_1: entered promiscuous mode [ 318.656271][T14033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.664063][T14033] Cannot create hsr debugfs directory [ 318.763181][T14109] lo speed is unknown, defaulting to 1000 [ 318.913024][T13997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.994002][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 319.019858][T13997] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.103289][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.110419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.132857][T14109] lo speed is unknown, defaulting to 1000 [ 319.180598][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.187764][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.322439][ T5851] Bluetooth: hci1: command tx timeout [ 319.358017][T14119] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 319.366208][T13999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.394708][T14033] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.404987][ T5851] Bluetooth: hci4: command tx timeout [ 319.410486][T14033] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.441889][T13999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.470955][T13999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.504462][T13999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.541982][T14033] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.558877][T14033] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.585004][T14125] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2133'. [ 319.655327][T14033] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.691073][T14033] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.759768][T14129] syzkaller0: entered promiscuous mode [ 319.765560][T14129] syzkaller0: entered allmulticast mode [ 319.787478][T14033] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.797682][T14033] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.522967][ T5851] Bluetooth: hci2: command tx timeout [ 321.954194][T13999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.999045][T13997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.041928][T13999] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.140267][T14033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.196350][T14033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.249583][T14033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.355878][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.363033][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.416150][T14033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.427946][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.435145][ T9113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.654682][T13997] veth0_vlan: entered promiscuous mode [ 322.711427][T14159] lo speed is unknown, defaulting to 1000 [ 322.751256][T13999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.792471][T13999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.978313][T13997] veth1_vlan: entered promiscuous mode [ 323.015413][T14033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.072256][T14033] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.115998][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.123263][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.175496][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.182645][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.242138][T13997] veth0_macvtap: entered promiscuous mode [ 323.284419][T13997] veth1_macvtap: entered promiscuous mode [ 323.358404][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.392412][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.419610][T13997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.450394][T13997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.482538][T13997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.509478][T13997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.550126][T14169] openvswitch: netlink: Actions may not be safe on all matching packets [ 323.558821][T14159] lo speed is unknown, defaulting to 1000 [ 323.595404][T13997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.622859][T13997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.642779][T13997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.651488][T13997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.691245][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.816401][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'. [ 323.878671][T14162] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 323.955491][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 324.017044][ T9116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.031791][ T9116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.103726][T13999] veth0_vlan: entered promiscuous mode [ 324.124073][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.149875][T13999] veth1_vlan: entered promiscuous mode [ 324.158404][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.252195][T14033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.270386][T14182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2142'. [ 324.411797][T13999] veth0_macvtap: entered promiscuous mode [ 324.477188][T14186] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.502808][T14186] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.548780][T13999] veth1_macvtap: entered promiscuous mode [ 324.665388][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2145'. [ 324.666668][T14186] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.691972][T14186] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.737682][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.776860][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.806956][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.839004][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.863801][T13999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.900142][T14186] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.926994][T14186] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.984801][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.003747][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.023208][T13999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.044327][T13999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.056266][T13999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.074282][T14186] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 325.085013][T14186] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 325.099726][T13999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.108844][T13999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.117860][T13999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.126661][T13999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.174876][ T3518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.273738][ T3518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.310098][T14186] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.318777][T14186] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.351641][T14186] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.360049][T14186] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.393921][ T3518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.412190][T14033] veth0_vlan: entered promiscuous mode [ 325.428080][T14186] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.437805][T14186] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.450060][T14033] veth1_vlan: entered promiscuous mode [ 325.478708][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.504974][T14186] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.513613][T14186] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.530732][ T9112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.558212][ T9112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.608579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.616947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.654054][T14033] veth0_macvtap: entered promiscuous mode [ 325.695266][T14033] veth1_macvtap: entered promiscuous mode [ 325.733486][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.761449][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.782491][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.792975][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.803503][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.814273][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.825469][T14033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.839018][ T3518] bridge_slave_1: left allmulticast mode [ 325.847021][ T3518] bridge_slave_1: left promiscuous mode [ 325.852804][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.878081][ T3518] bridge_slave_0: left allmulticast mode [ 325.884725][ T3518] bridge_slave_0: left promiscuous mode [ 325.890605][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.226968][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.238228][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.289293][ T3518] bond0 (unregistering): Released all slaves [ 326.318947][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.352480][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.372475][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.397334][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.412482][T14033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.432640][T14033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.454429][T14033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.485203][T14033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.506747][T14033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.522903][T14033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.542588][T14033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.614300][T14209] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 326.622451][T14209] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 326.673043][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.685342][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.702463][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.725803][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.733905][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.741326][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.844137][T14222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2151'. [ 326.999634][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 327.030207][T14215] lo speed is unknown, defaulting to 1000 [ 327.118772][ T3424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.149676][ T3424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.215566][ T9116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.233244][ T9116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.271749][T14215] lo speed is unknown, defaulting to 1000 [ 327.628027][ T3518] hsr_slave_0: left promiscuous mode [ 327.636148][ T3518] hsr_slave_1: left promiscuous mode [ 327.642174][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.650748][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.660363][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.679740][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.727425][ T3518] veth1_macvtap: left promiscuous mode [ 327.733272][ T3518] veth0_macvtap: left promiscuous mode [ 327.738943][ T3518] veth1_vlan: left promiscuous mode [ 327.745241][ T3518] veth0_vlan: left promiscuous mode [ 327.966497][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.977530][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.988018][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.997582][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.007229][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.015165][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.530649][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.540928][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.551458][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.565885][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.576566][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.585723][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.702973][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 328.746108][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 328.843848][ T5844] Bluetooth: hci1: command tx timeout [ 329.395677][T14235] lo speed is unknown, defaulting to 1000 [ 329.555206][T14244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2156'. [ 329.631331][ T5830] cgroup: fork rejected by pids controller in /syz3 [ 329.679428][T14215] chnl_net:caif_netlink_parms(): no params data found [ 329.784898][T14229] lo speed is unknown, defaulting to 1000 [ 329.808935][T14235] lo speed is unknown, defaulting to 1000 [ 330.012395][T14229] lo speed is unknown, defaulting to 1000 [ 330.052445][T14215] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.059751][T14215] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.067344][T14215] bridge_slave_0: entered allmulticast mode [ 330.079496][T14215] bridge_slave_0: entered promiscuous mode [ 330.087244][T14215] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.094483][T14215] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.101623][T14215] bridge_slave_1: entered allmulticast mode [ 330.108778][T14215] bridge_slave_1: entered promiscuous mode [ 330.124670][ T5844] Bluetooth: hci2: command tx timeout [ 330.216056][T14215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.248443][T14215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.347348][ T3518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.384038][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.398606][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.407786][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.421173][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.431859][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.447435][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.498387][ T3518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.515213][T14215] team0: Port device team_slave_0 added [ 330.537415][T14215] team0: Port device team_slave_1 added [ 330.655600][T14215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.663143][T14215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.689300][ T5851] Bluetooth: hci4: command tx timeout [ 330.695742][T14215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.710990][T14215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.718579][T14215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.744810][T14215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.791181][ T3518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.810808][T14235] chnl_net:caif_netlink_parms(): no params data found [ 330.823840][T14255] lo speed is unknown, defaulting to 1000 [ 330.836067][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 330.884986][ T3518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.922643][ T5851] Bluetooth: hci1: command tx timeout [ 331.070593][T14255] lo speed is unknown, defaulting to 1000 [ 331.113244][T14215] hsr_slave_0: entered promiscuous mode [ 331.119512][T14215] hsr_slave_1: entered promiscuous mode [ 331.139395][T14229] chnl_net:caif_netlink_parms(): no params data found [ 331.149699][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 331.281212][T14235] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.299319][T14235] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.306892][T14235] bridge_slave_0: entered allmulticast mode [ 331.314076][T14235] bridge_slave_0: entered promiscuous mode [ 331.385981][T14235] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.394911][T14235] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.403284][T14235] bridge_slave_1: entered allmulticast mode [ 331.410344][T14235] bridge_slave_1: entered promiscuous mode [ 331.518542][T14235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.523727][T14285] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 331.532584][T14286] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 331.579513][T14235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.657386][ T3518] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.798244][T14296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2167'. [ 331.827267][ T3518] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.861409][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.871994][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.886844][T14229] bridge_slave_0: entered allmulticast mode [ 331.894337][T14229] bridge_slave_0: entered promiscuous mode [ 331.974515][T14235] team0: Port device team_slave_0 added [ 332.006777][ T3518] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.023348][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.030446][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.037810][T14229] bridge_slave_1: entered allmulticast mode [ 332.045960][T14229] bridge_slave_1: entered promiscuous mode [ 332.067589][T14235] team0: Port device team_slave_1 added [ 332.155386][ T3518] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.199932][T14255] chnl_net:caif_netlink_parms(): no params data found [ 332.212708][ T5851] Bluetooth: hci2: command tx timeout [ 332.235941][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.246106][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.255239][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.264356][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.273669][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.282660][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 332.292749][T14235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.299713][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.326430][T14235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.340183][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.411305][T14235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.418681][T14235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.446135][T14235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.463693][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.493406][T14306] netlink: zone id is out of range [ 332.513422][T14306] netlink: zone id is out of range [ 332.518559][T14306] netlink: zone id is out of range [ 332.528582][T14306] netlink: zone id is out of range [ 332.532649][ T5851] Bluetooth: hci0: command tx timeout [ 332.543166][T14306] netlink: zone id is out of range [ 332.543181][T14306] netlink: zone id is out of range [ 332.543189][T14306] netlink: zone id is out of range [ 332.543199][T14306] netlink: zone id is out of range [ 332.543208][T14306] netlink: zone id is out of range [ 332.543217][T14306] netlink: zone id is out of range [ 332.638856][T14229] team0: Port device team_slave_0 added [ 332.680628][T14235] hsr_slave_0: entered promiscuous mode [ 332.688586][T14235] hsr_slave_1: entered promiscuous mode [ 332.694890][T14235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.702818][T14235] Cannot create hsr debugfs directory [ 332.744669][T14229] team0: Port device team_slave_1 added [ 332.768700][ T5851] Bluetooth: hci4: command tx timeout [ 332.858200][T14215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.916912][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.924461][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.951729][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.964198][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.971143][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.997382][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.008303][ T5851] Bluetooth: hci1: command tx timeout [ 333.014949][T14215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.042660][T14255] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.063065][T14255] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.070200][T14255] bridge_slave_0: entered allmulticast mode [ 333.077493][T14255] bridge_slave_0: entered promiscuous mode [ 333.103646][T14255] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.110742][T14255] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.118420][T14255] bridge_slave_1: entered allmulticast mode [ 333.125597][T14255] bridge_slave_1: entered promiscuous mode [ 333.147921][T14215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.156499][ T3518] bridge_slave_1: left allmulticast mode [ 333.162151][ T3518] bridge_slave_1: left promiscuous mode [ 333.170632][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.179952][ T3518] bridge_slave_0: left allmulticast mode [ 333.186217][ T3518] bridge_slave_0: left promiscuous mode [ 333.191897][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.203616][ T3518] bridge_slave_1: left allmulticast mode [ 333.209263][ T3518] bridge_slave_1: left promiscuous mode [ 333.215195][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.226587][ T3518] bridge_slave_0: left allmulticast mode [ 333.232250][ T3518] bridge_slave_0: left promiscuous mode [ 333.239546][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.939179][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.958198][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.968278][ T3518] bond0 (unregistering): Released all slaves [ 334.089145][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.099569][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.110184][ T3518] bond0 (unregistering): Released all slaves [ 334.160961][T14255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.182680][T14215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.282476][ T5851] Bluetooth: hci2: command tx timeout [ 334.345002][T14229] hsr_slave_0: entered promiscuous mode [ 334.351279][T14229] hsr_slave_1: entered promiscuous mode [ 334.360952][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.369401][T14229] Cannot create hsr debugfs directory [ 334.377297][T14255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.537153][T14255] team0: Port device team_slave_0 added [ 334.551232][T14255] team0: Port device team_slave_1 added [ 334.579235][T14341] netlink: 'syz.0.2176': attribute type 58 has an invalid length. [ 334.612729][ T5851] Bluetooth: hci0: command tx timeout [ 334.673364][T14343] __nla_validate_parse: 12 callbacks suppressed [ 334.673381][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 334.688757][T14343] nbd: illegal input index -381222912 [ 334.745375][T14255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.754493][T14255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.784255][T14255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.832523][T14255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.841639][T14255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.867803][T14255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.873921][ T5851] Bluetooth: hci4: command tx timeout [ 335.068268][T14255] hsr_slave_0: entered promiscuous mode [ 335.076038][T14255] hsr_slave_1: entered promiscuous mode [ 335.081934][T14255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.089916][T14255] Cannot create hsr debugfs directory [ 335.092728][ T5851] Bluetooth: hci1: command tx timeout [ 335.308644][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 335.420037][ T3518] hsr_slave_0: left promiscuous mode [ 335.435782][ T3518] hsr_slave_1: left promiscuous mode [ 335.443950][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.451367][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.459447][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.467134][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.481379][ T3518] hsr_slave_0: left promiscuous mode [ 335.491318][ T3518] hsr_slave_1: left promiscuous mode [ 335.497500][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.505107][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.513128][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.520509][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.567732][ T3518] veth1_macvtap: left promiscuous mode [ 335.573643][ T3518] veth0_macvtap: left promiscuous mode [ 335.579240][ T3518] veth1_vlan: left promiscuous mode [ 335.584700][ T3518] veth0_vlan: left promiscuous mode [ 335.591140][ T3518] veth1_macvtap: left promiscuous mode [ 335.596791][ T3518] veth0_macvtap: left promiscuous mode [ 335.602462][ T3518] veth1_vlan: left promiscuous mode [ 335.607792][ T3518] veth0_vlan: left promiscuous mode [ 336.143430][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 336.190280][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 336.374447][ T5851] Bluetooth: hci2: command tx timeout [ 336.697004][ T5851] Bluetooth: hci0: command tx timeout [ 336.920631][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 336.935578][ T5851] Bluetooth: hci4: command tx timeout [ 336.961008][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 337.358421][T14215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.474287][T14235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.493222][T14235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.583738][T14235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.609117][T14358] netlink: 'syz.0.2182': attribute type 58 has an invalid length. [ 337.644553][T14235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.696263][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 337.728783][T14215] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.756588][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.763721][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.838743][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.845891][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.950367][T14215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.961582][T14365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2184'. [ 337.972534][T14215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.127477][T14235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.170406][T14255] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.182547][T14255] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.198134][T14229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.211190][T14229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.224680][T14229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.243876][T14255] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.255178][T14255] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.270304][T14229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.301843][T14255] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.312820][T14255] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.333540][T14235] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.347803][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.354961][ T9113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.391901][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.399071][ T9113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.416489][T14255] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.428832][T14255] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.511517][T14215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.754183][ T3518] ip6gretap0 (unregistering): left allmulticast mode [ 338.765622][ T5851] Bluetooth: hci0: command tx timeout [ 338.878443][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 338.970689][ T3518] gretap0 (unregistering): left allmulticast mode [ 338.978182][ T3518] gretap0 (unregistering): left promiscuous mode [ 339.271646][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.283829][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.295077][ T3518] bond0 (unregistering): Released all slaves [ 339.415296][ T3518] bond1 (unregistering): Released all slaves [ 339.426928][ T3518] bond2 (unregistering): Released all slaves [ 339.438295][ T3518] bond3 (unregistering): Released all slaves [ 339.459929][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.587349][ T3518] : left promiscuous mode [ 339.628960][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.658817][T14387] net_ratelimit: 2094 callbacks suppressed [ 339.658832][T14387] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.684712][T14387] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 339.688818][T14215] veth0_vlan: entered promiscuous mode [ 339.710918][T14387] netlink: 'syz.0.2187': attribute type 8 has an invalid length. [ 339.728523][T14255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.739227][T14387] netlink: 109544 bytes leftover after parsing attributes in process `syz.0.2187'. [ 339.755278][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.762398][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.771473][T14255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.802179][T14255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.811482][T14255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.863659][T14235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.871861][T14215] veth1_vlan: entered promiscuous mode [ 339.888594][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.895713][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.155020][T14215] veth0_macvtap: entered promiscuous mode [ 340.175523][T14215] veth1_macvtap: entered promiscuous mode [ 340.286309][T14215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.297181][T14215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.323459][T14215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.384684][ T3518] hsr_slave_0: left promiscuous mode [ 340.390953][ T3518] hsr_slave_1: left promiscuous mode [ 340.403314][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.410765][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.432008][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.442625][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.476447][ T3518] dummy0: left allmulticast mode [ 340.481517][ T3518] dummy0: left promiscuous mode [ 340.487619][ T3518] veth1_macvtap: left promiscuous mode [ 340.493616][ T3518] veth0_macvtap: left promiscuous mode [ 340.499199][ T3518] veth1_vlan: left promiscuous mode [ 341.572205][ T5915] lo speed is unknown, defaulting to 1000 [ 341.591273][T14215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.598560][ T5915] infiniband syz2: ib_query_port failed (-19) [ 341.640936][T14235] veth0_vlan: entered promiscuous mode [ 341.667795][T14215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.689560][T14215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.711172][T14215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.728830][T14215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.751497][T14255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.775736][T14411] pim6reg1: entered promiscuous mode [ 341.781187][T14411] pim6reg1: entered allmulticast mode [ 341.815614][T14235] veth1_vlan: entered promiscuous mode [ 341.920933][T14235] veth0_macvtap: entered promiscuous mode [ 341.988987][T14255] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.011441][T14235] veth1_macvtap: entered promiscuous mode [ 342.031821][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.038968][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.096812][ T8363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.097082][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.111772][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.112603][ T8363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.178312][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.188524][T14235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.202241][T14235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.214088][T14235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.257716][T14235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.278665][T14235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.303718][T14235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.329775][T14235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.333635][ T9116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.347695][ T9116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.350007][T14235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.366572][T14235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.375437][T14235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.412222][ T3518] IPVS: stop unused estimator thread 0... [ 342.589109][ T8363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.589447][T14229] veth0_vlan: entered promiscuous mode [ 342.607782][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'. [ 342.621305][ T8363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.719681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.720507][T14229] veth1_vlan: entered promiscuous mode [ 342.743536][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.818871][T14255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.844691][T14229] veth0_macvtap: entered promiscuous mode [ 342.968084][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.120969][T14229] veth1_macvtap: entered promiscuous mode [ 343.148728][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.193601][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.210851][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.220778][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.231703][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.246302][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.279506][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.309364][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.332464][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.352547][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.363704][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.381237][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.394851][T14255] veth0_vlan: entered promiscuous mode [ 343.414781][T14255] veth1_vlan: entered promiscuous mode [ 343.454676][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.552744][T14229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.571715][T14229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.602531][T14229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.620668][T14229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.929514][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.943218][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.958607][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.983518][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.991746][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.002263][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.011307][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.023231][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.024291][T14440] bond0 (unregistering): Released all slaves [ 344.042022][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.053871][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.061911][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.070422][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.101012][T14255] veth0_macvtap: entered promiscuous mode [ 344.128245][T14255] veth1_macvtap: entered promiscuous mode [ 344.202074][T14446] lo speed is unknown, defaulting to 1000 [ 344.361816][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.388944][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.402253][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.417717][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.427721][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.440235][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.457790][T14255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.485121][ T9112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.517433][T14444] lo speed is unknown, defaulting to 1000 [ 344.551150][ T9112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.607168][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.624674][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.663472][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.692587][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.713762][T14255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.732588][T14255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.754797][T14255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.835151][ T12] bridge_slave_1: left allmulticast mode [ 344.840840][ T12] bridge_slave_1: left promiscuous mode [ 344.847923][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.859346][ T12] bridge_slave_0: left allmulticast mode [ 344.865590][ T12] bridge_slave_0: left promiscuous mode [ 344.871262][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.951129][T14458] nftables ruleset with unbound chain [ 345.310073][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.327915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.338512][ T12] bond0 (unregistering): Released all slaves [ 345.359747][T14454] team0: Refused to change device type [ 345.373411][T14255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.389834][T14255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.398823][T14255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.409147][T14255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.435454][ T9113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.466715][ T9113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.045637][ T5842] Bluetooth: hci1: command tx timeout [ 346.100235][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.116785][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.124715][ T5842] Bluetooth: hci4: command tx timeout [ 346.178676][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.203001][T14444] chnl_net:caif_netlink_parms(): no params data found [ 346.216674][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.228732][ T12] hsr_slave_0: left promiscuous mode [ 346.262553][ T12] hsr_slave_1: left promiscuous mode [ 346.268402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.276387][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.285568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.293259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.318783][ T12] veth1_macvtap: left promiscuous mode [ 346.324525][ T12] veth0_macvtap: left promiscuous mode [ 346.331167][ T12] veth1_vlan: left promiscuous mode [ 346.336542][ T12] veth0_vlan: left promiscuous mode [ 346.749591][ T12] team0 (unregistering): Port device team_slave_1 removed [ 346.830744][ T12] team0 (unregistering): Port device team_slave_0 removed [ 346.868240][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 346.884655][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2202'. [ 346.960515][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 347.186687][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.196736][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.217761][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.247319][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.255943][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.263315][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.567837][T14446] chnl_net:caif_netlink_parms(): no params data found [ 347.606921][T14489] lo speed is unknown, defaulting to 1000 [ 347.690324][T14500] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2203'. [ 347.824166][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2158'. [ 347.841386][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.857437][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.864762][T14444] bridge_slave_0: entered allmulticast mode [ 347.880941][T14444] bridge_slave_0: entered promiscuous mode [ 347.979035][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.987537][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.995076][T14444] bridge_slave_1: entered allmulticast mode [ 348.002087][T14444] bridge_slave_1: entered promiscuous mode [ 348.105733][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.125579][ T5839] Bluetooth: hci1: command tx timeout [ 348.141222][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 348.190247][T14518] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 348.201928][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.212456][ T5839] Bluetooth: hci4: command tx timeout [ 348.235776][T14515] ip6_vti0: entered promiscuous mode [ 348.241094][T14515] ip6_vti0: entered allmulticast mode [ 348.266549][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.274514][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.281754][T14446] bridge_slave_0: entered allmulticast mode [ 348.290208][T14446] bridge_slave_0: entered promiscuous mode [ 348.319395][T14520] bond0: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 348.342174][T14518] veth9: entered promiscuous mode [ 348.369938][T14518] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 348.378725][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.392506][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.405729][T14446] bridge_slave_1: entered allmulticast mode [ 348.412860][T14446] bridge_slave_1: entered promiscuous mode [ 348.451566][T14444] team0: Port device team_slave_0 added [ 348.476157][T14444] team0: Port device team_slave_1 added [ 348.514747][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.547976][T14527] openvswitch: netlink: Actions may not be safe on all matching packets [ 348.553970][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.639788][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.754033][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.787315][T14446] team0: Port device team_slave_0 added [ 348.813074][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.820038][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.854683][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.868144][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.875232][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.901874][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.945066][T14446] team0: Port device team_slave_1 added [ 348.982527][T14538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2210'. [ 349.006357][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.056504][T14489] chnl_net:caif_netlink_parms(): no params data found [ 349.087076][T14540] Cannot find set identified by id 0 to match [ 349.144930][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.175177][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.182146][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.211869][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.224637][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.231769][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.247354][T14542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2213'. [ 349.280694][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.282051][T14544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2212'. [ 349.322782][ T5839] Bluetooth: hci2: command tx timeout [ 349.342886][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 349.343880][T14444] hsr_slave_0: entered promiscuous mode [ 349.358497][T14444] hsr_slave_1: entered promiscuous mode [ 349.440298][T14547] xt_hashlimit: max too large, truncated to 1048576 [ 349.448206][T14547] No such timeout policy "syz1" [ 349.538603][T14446] hsr_slave_0: entered promiscuous mode [ 349.565673][T14446] hsr_slave_1: entered promiscuous mode [ 349.582440][T14446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.590022][T14446] Cannot create hsr debugfs directory [ 349.636997][T14557] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 349.645549][T14557] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 349.653667][T14557] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 349.666366][T14557] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 349.674448][T14557] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 349.682282][T14557] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 349.690301][T14557] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 349.699841][T14557] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 349.769556][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.777948][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.795909][T14489] bridge_slave_0: entered allmulticast mode [ 349.803357][T14489] bridge_slave_0: entered promiscuous mode [ 349.820757][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.828151][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.835908][T14489] bridge_slave_1: entered allmulticast mode [ 349.843470][T14489] bridge_slave_1: entered promiscuous mode [ 349.905891][T14564] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.914777][T14564] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.923575][T14564] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.932259][T14564] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.007831][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.074138][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.150270][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.185540][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.202949][ T5839] Bluetooth: hci1: command tx timeout [ 350.282641][ T5839] Bluetooth: hci4: command tx timeout [ 350.311394][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.419557][T14489] team0: Port device team_slave_0 added [ 350.445057][T14489] team0: Port device team_slave_1 added [ 350.515075][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.635862][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.643083][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.691068][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.785405][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.802786][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.828946][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.014958][T14489] hsr_slave_0: entered promiscuous mode [ 351.021295][T14489] hsr_slave_1: entered promiscuous mode [ 351.032931][T14489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.049781][T14489] Cannot create hsr debugfs directory [ 351.298219][ T12] bridge_slave_1: left allmulticast mode [ 351.312497][ T12] bridge_slave_1: left promiscuous mode [ 351.321977][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.342991][ T12] bridge_slave_0: left allmulticast mode [ 351.348655][ T12] bridge_slave_0: left promiscuous mode [ 351.368448][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.388479][ T12] bridge_slave_1: left allmulticast mode [ 351.394270][ T12] bridge_slave_1: left promiscuous mode [ 351.402570][ T5839] Bluetooth: hci2: command tx timeout [ 351.403915][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.430928][ T12] bridge_slave_0: left allmulticast mode [ 351.437381][ T12] bridge_slave_0: left promiscuous mode [ 351.452542][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.477397][T14597] Bluetooth: MGMT ver 1.23 [ 351.490228][T14598] xt_limit: Overflow, try lower: 262144/524288 [ 352.089274][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.100775][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.110782][ T12] bond0 (unregistering): Released all slaves [ 352.243160][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.254320][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.265328][ T12] bond0 (unregistering): Released all slaves [ 352.287018][ T5839] Bluetooth: hci1: command tx timeout [ 352.362556][ T5839] Bluetooth: hci4: command tx timeout [ 352.393601][T14602] __nla_validate_parse: 9 callbacks suppressed [ 352.393618][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 352.499838][T14605] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 352.508788][T14602] hsr0: entered promiscuous mode [ 352.514479][T14602] hsr0: entered allmulticast mode [ 352.519569][T14602] hsr_slave_0: entered allmulticast mode [ 352.526216][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 352.538391][T14602] hsr_slave_1: entered allmulticast mode [ 352.681935][T14609] lo speed is unknown, defaulting to 1000 [ 352.730354][T14611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2232'. [ 352.966379][T14446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.985895][T14446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.006599][T14446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.031868][T14446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.183072][T14444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.204854][T14444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.331833][T14444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.394713][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 353.404151][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2235'. [ 353.404760][T14444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.482747][ T5839] Bluetooth: hci2: command tx timeout [ 353.551059][T14619] geneve2: entered promiscuous mode [ 353.557517][T14619] geneve2: entered allmulticast mode [ 353.605829][ T12] hsr_slave_0: left promiscuous mode [ 353.612164][ T12] hsr_slave_1: left promiscuous mode [ 353.618148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.625781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.643819][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.651237][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.678160][ T12] hsr_slave_0: left promiscuous mode [ 353.689788][ T12] hsr_slave_1: left promiscuous mode [ 353.695794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.703745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.711936][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.719660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.787727][ T12] veth1_macvtap: left promiscuous mode [ 353.793280][ T12] veth0_macvtap: left promiscuous mode [ 353.798796][ T12] veth1_vlan: left promiscuous mode [ 353.805589][ T12] veth0_vlan: left promiscuous mode [ 353.812012][ T12] veth1_macvtap: left promiscuous mode [ 353.817867][ T12] veth0_macvtap: left promiscuous mode [ 353.824092][ T12] veth1_vlan: left promiscuous mode [ 353.829486][ T12] veth0_vlan: left promiscuous mode [ 354.331958][ T12] team0 (unregistering): Port device team_slave_1 removed [ 354.377658][ T12] team0 (unregistering): Port device team_slave_0 removed [ 354.838376][ T25] IPVS: starting estimator thread 0... [ 354.942642][T14633] IPVS: using max 23 ests per chain, 55200 per kthread [ 355.250651][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 355.378277][ T12] team0 (unregistering): Port device team_slave_1 removed [ 355.428392][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.565072][ T5839] Bluetooth: hci2: command tx timeout [ 355.949515][T14446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.118200][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.217945][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.225067][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.244662][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.251764][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.369562][T14489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.404205][T14489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.437936][T14489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.457529][T14489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.477657][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.535223][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.570998][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.578173][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.587931][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.595080][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.703497][T14446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.736643][T14444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.856185][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.904121][T14489] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.919310][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.926482][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.959363][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.966532][ T8363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.024623][T14489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.090444][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.145487][T14664] netlink: 'syz.0.2245': attribute type 58 has an invalid length. [ 357.257647][T14444] veth0_vlan: entered promiscuous mode [ 357.297382][T14666] lo speed is unknown, defaulting to 1000 [ 357.310425][T14446] veth0_vlan: entered promiscuous mode [ 357.335473][T14444] veth1_vlan: entered promiscuous mode [ 357.372204][T14446] veth1_vlan: entered promiscuous mode [ 357.422648][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.497776][T14446] veth0_macvtap: entered promiscuous mode [ 357.533702][T14444] veth0_macvtap: entered promiscuous mode [ 357.552180][T14444] veth1_macvtap: entered promiscuous mode [ 357.579168][T14446] veth1_macvtap: entered promiscuous mode [ 357.597855][T14489] veth0_vlan: entered promiscuous mode [ 357.620086][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.638522][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.668791][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.728474][T14489] veth1_vlan: entered promiscuous mode [ 357.778398][T14679] lo speed is unknown, defaulting to 1000 [ 357.779629][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.807523][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.828765][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.871669][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.894062][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.922731][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.942357][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.954047][T14446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.999428][T14669] netlink: 'syz.3.2246': attribute type 11 has an invalid length. [ 358.007515][T14669] netlink: 'syz.3.2246': attribute type 5 has an invalid length. [ 358.052202][T14444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.061576][T14444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.070523][T14444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.079363][T14444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.101221][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.112111][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.122046][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.133234][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.144132][T14446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.163202][T14446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.171934][T14446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.181257][T14446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.201554][T14446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.237193][T14489] veth0_macvtap: entered promiscuous mode [ 358.358922][T14489] veth1_macvtap: entered promiscuous mode [ 358.524844][T14690] openvswitch: netlink: Message has 8 unknown bytes. [ 358.553039][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.561859][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.606740][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.619260][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.663869][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.683471][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.698726][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.709361][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.721866][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.808326][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 358.873900][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.892192][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.912413][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.943221][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.962627][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.982735][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.105593][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.133654][T14698] vlan1: mtu greater than device maximum [ 359.256422][T14701] IPVS: Scheduler module ip_vs_@ not found [ 359.779030][T14489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.798576][T14489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.812724][T14489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.831977][T14489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.887274][ T9113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.899660][T14699] netlink: 'syz.0.2251': attribute type 12 has an invalid length. [ 359.922483][ T9113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.021090][ T9113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.069186][ T9113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.365974][ T9113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.388898][ T9113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.538611][ T3424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.587677][ T3424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.761642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.783481][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.795862][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 360.817139][T14718] ip6tnl3: entered promiscuous mode [ 361.029429][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060573c00: rx timeout, send abort [ 361.039550][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060572800: rx timeout, send abort [ 361.048003][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060573c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.062541][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060572800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.266573][ T8363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.375046][ T8363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.533939][ T8363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.640630][ T8363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.683758][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.702458][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.713262][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.725693][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.733376][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 361.740639][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.786629][T14730] lo speed is unknown, defaulting to 1000 [ 362.023294][ T8363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.089515][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.099011][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.108139][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.116926][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.126416][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 362.133911][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.154963][ T8363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.203917][T14734] lo speed is unknown, defaulting to 1000 [ 362.261604][ T8363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.408186][T14742] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2259'. [ 362.419756][ T8363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.506196][T14743] batadv_slave_1: entered allmulticast mode [ 362.597531][T14730] chnl_net:caif_netlink_parms(): no params data found [ 362.617881][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.627933][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.647560][T14748] syz.3.2261 uses old SIOCAX25GETINFO [ 362.649939][T14739] batadv_slave_1: left allmulticast mode [ 362.659047][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.666992][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.678871][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.686990][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.780469][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2262'. [ 362.827308][T14745] lo speed is unknown, defaulting to 1000 [ 363.017340][ T8363] bridge_slave_1: left allmulticast mode [ 363.023899][ T8363] bridge_slave_1: left promiscuous mode [ 363.029610][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.039159][ T8363] bridge_slave_0: left allmulticast mode [ 363.045552][ T8363] bridge_slave_0: left promiscuous mode [ 363.051197][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.062896][ T8363] bridge_slave_1: left allmulticast mode [ 363.068555][ T8363] bridge_slave_1: left promiscuous mode [ 363.072807][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2264'. [ 363.074352][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.092368][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2264'. [ 363.101967][ T8363] bridge_slave_0: left allmulticast mode [ 363.108243][ T8363] bridge_slave_0: left promiscuous mode [ 363.111375][T14765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2264'. [ 363.122651][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.806950][ T5839] Bluetooth: hci1: command tx timeout [ 363.830514][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.841308][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.853960][ T8363] bond0 (unregistering): Released all slaves [ 363.969202][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.979516][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.992147][ T8363] bond0 (unregistering): Released all slaves [ 364.036677][T14730] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.060898][T14730] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.072584][T14730] bridge_slave_0: entered allmulticast mode [ 364.079613][T14730] bridge_slave_0: entered promiscuous mode [ 364.088140][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.095765][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.103924][T14730] bridge_slave_1: entered allmulticast mode [ 364.111486][T14730] bridge_slave_1: entered promiscuous mode [ 364.215227][ T5839] Bluetooth: hci2: command tx timeout [ 364.250940][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.277703][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.310004][T14734] chnl_net:caif_netlink_parms(): no params data found [ 364.338743][T14730] team0: Port device team_slave_0 added [ 364.368498][T14730] team0: Port device team_slave_1 added [ 364.480924][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.490903][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.517080][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.563520][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.570502][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.616347][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.759907][T14730] hsr_slave_0: entered promiscuous mode [ 364.765773][ T5839] Bluetooth: hci4: command tx timeout [ 364.778065][T14730] hsr_slave_1: entered promiscuous mode [ 364.813094][T14730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.831792][T14730] Cannot create hsr debugfs directory [ 364.978620][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.999427][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.013514][T14734] bridge_slave_0: entered allmulticast mode [ 365.023964][T14734] bridge_slave_0: entered promiscuous mode [ 365.031863][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.056922][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.072501][T14734] bridge_slave_1: entered allmulticast mode [ 365.083724][T14734] bridge_slave_1: entered promiscuous mode [ 365.113933][T14745] chnl_net:caif_netlink_parms(): no params data found [ 365.228202][ T8363] hsr_slave_0: left promiscuous mode [ 365.292154][T14784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2267'. [ 365.306037][ T8363] hsr_slave_1: left promiscuous mode [ 365.316694][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.336359][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.359503][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.377332][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.391775][ T8363] hsr_slave_0: left promiscuous mode [ 365.402148][ T8363] hsr_slave_1: left promiscuous mode [ 365.411139][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.422751][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.431105][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.442277][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.515135][ T8363] veth1_macvtap: left promiscuous mode [ 365.520681][ T8363] veth0_macvtap: left promiscuous mode [ 365.530980][ T8363] veth1_vlan: left promiscuous mode [ 365.536539][ T8363] veth0_vlan: left promiscuous mode [ 365.542273][ T8363] veth1_macvtap: left promiscuous mode [ 365.547911][ T8363] veth0_macvtap: left promiscuous mode [ 365.553637][ T8363] veth1_vlan: left promiscuous mode [ 365.558937][ T8363] veth0_vlan: left promiscuous mode [ 365.884149][ T5839] Bluetooth: hci1: command tx timeout [ 366.108117][ T8363] team0 (unregistering): Port device team_slave_1 removed [ 366.152893][ T8363] team0 (unregistering): Port device team_slave_0 removed [ 366.283307][ T5839] Bluetooth: hci2: command tx timeout [ 366.844835][ T5839] Bluetooth: hci4: command tx timeout [ 366.958100][ T8363] team0 (unregistering): Port device team_slave_1 removed [ 367.002497][ T8363] team0 (unregistering): Port device team_slave_0 removed [ 367.433265][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.488916][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.556256][T14734] team0: Port device team_slave_0 added [ 367.620326][T14734] team0: Port device team_slave_1 added [ 367.681030][T14745] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.682491][T14803] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.693610][T14745] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.704116][T14745] bridge_slave_0: entered allmulticast mode [ 367.711085][T14745] bridge_slave_0: entered promiscuous mode [ 367.733446][T14745] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.740550][T14745] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.762149][T14745] bridge_slave_1: entered allmulticast mode [ 367.773230][T14745] bridge_slave_1: entered promiscuous mode [ 367.880143][T14804] netlink: 'syz.3.2269': attribute type 58 has an invalid length. [ 367.971577][ T5839] Bluetooth: hci1: command tx timeout [ 367.997577][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.006011][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.032432][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.060845][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 368.064837][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.081897][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.110023][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.154558][T14745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.362647][ T5839] Bluetooth: hci2: command tx timeout [ 368.596595][T14745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.659142][T14734] hsr_slave_0: entered promiscuous mode [ 368.667588][T14734] hsr_slave_1: entered promiscuous mode [ 368.897669][T14745] team0: Port device team_slave_0 added [ 368.915300][T14745] team0: Port device team_slave_1 added [ 368.921261][T14836] syzkaller1: entered promiscuous mode [ 368.933307][ T5839] Bluetooth: hci4: command tx timeout [ 368.942642][T14836] syzkaller1: entered allmulticast mode [ 369.080835][T14745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.088257][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.115051][T14745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.189096][T14745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.197575][T14745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.223914][T14745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.324854][T14858] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 369.450685][ T8363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.471905][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 369.481277][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 369.505873][T14745] hsr_slave_0: entered promiscuous mode [ 369.512129][T14745] hsr_slave_1: entered promiscuous mode [ 369.523190][T14745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.530843][T14745] Cannot create hsr debugfs directory [ 369.563206][ T8363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.661065][ T8363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.747497][ T8363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.794478][T14730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.823861][T14730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.901619][T14730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.920788][T14730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.930057][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 370.045997][ T5839] Bluetooth: hci1: command tx timeout [ 370.071022][T14873] netlink: 'syz.3.2282': attribute type 58 has an invalid length. [ 370.178163][ T8363] bridge_slave_1: left allmulticast mode [ 370.192582][ T8363] bridge_slave_1: left promiscuous mode [ 370.198350][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.239276][ T8363] bridge_slave_0: left allmulticast mode [ 370.245168][ T8363] bridge_slave_0: left promiscuous mode [ 370.250859][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.267756][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 370.443395][ T5839] Bluetooth: hci2: command tx timeout [ 370.616395][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.628223][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.641471][ T8363] bond0 (unregistering): Released all slaves [ 370.787726][T14890] openvswitch: netlink: Flow actions attr not present in new flow. [ 370.855872][T14730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.868927][T14894] FAULT_INJECTION: forcing a failure. [ 370.868927][T14894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.902748][T14894] CPU: 1 UID: 0 PID: 14894 Comm: syz.0.2288 Not tainted 6.14.0-rc3-syzkaller-00607-g5d6ba5ab8582 #0 [ 370.902771][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 370.902791][T14894] Call Trace: [ 370.902800][T14894] [ 370.902806][T14894] dump_stack_lvl+0x241/0x360 [ 370.902828][T14894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.902843][T14894] ? __pfx__printk+0x10/0x10 [ 370.902866][T14894] should_fail_ex+0x40a/0x550 [ 370.902888][T14894] _copy_to_user+0x31/0xb0 [ 370.902906][T14894] bpf_verifier_vlog+0x5dc/0x860 [ 370.902930][T14894] __btf_verifier_log+0xd5/0x120 [ 370.902950][T14894] ? bpf_verifier_vlog+0x32b/0x860 [ 370.902965][T14894] ? __pfx___btf_verifier_log+0x10/0x10 [ 370.902989][T14894] ? btf_parse_hdr+0x1e3/0x710 [ 370.903007][T14894] btf_parse_hdr+0x323/0x710 [ 370.903037][T14894] btf_new_fd+0x38b/0xca0 [ 370.903051][T14894] ? apparmor_capable+0x13b/0x1b0 [ 370.903075][T14894] ? __pfx_btf_new_fd+0x10/0x10 [ 370.903095][T14894] ? bpf_btf_load+0xcf/0x1a0 [ 370.903117][T14894] __sys_bpf+0x6f2/0x820 [ 370.903137][T14894] ? __pfx___sys_bpf+0x10/0x10 [ 370.903168][T14894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.903191][T14894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.903211][T14894] ? do_syscall_64+0x100/0x230 [ 370.903230][T14894] __x64_sys_bpf+0x7c/0x90 [ 370.903245][T14894] do_syscall_64+0xf3/0x230 [ 370.903261][T14894] ? clear_bhb_loop+0x35/0x90 [ 370.903282][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.903299][T14894] RIP: 0033:0x7f2e74d8d0a9 [ 370.903312][T14894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.903324][T14894] RSP: 002b:00007f2e75b15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.903340][T14894] RAX: ffffffffffffffda RBX: 00007f2e74fa5fa0 RCX: 00007f2e74d8d0a9 [ 370.903350][T14894] RDX: 0000000000000028 RSI: 0000400000000200 RDI: 0000000000000012 [ 370.903358][T14894] RBP: 00007f2e75b15090 R08: 0000000000000000 R09: 0000000000000000 [ 370.903366][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.903373][T14894] R13: 0000000000000001 R14: 00007f2e74fa5fa0 R15: 00007ffc5dc1d878 [ 370.903396][T14894] [ 371.151198][ T5839] Bluetooth: hci4: command tx timeout [ 371.166910][T14734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.225020][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 371.248343][T14734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.270050][T14734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.328577][T14899] bond4: entered promiscuous mode [ 371.336897][T14899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.501358][T14734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.555953][T14730] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.607507][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.614670][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.653609][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.660715][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.833335][ T8363] hsr_slave_0: left promiscuous mode [ 371.840610][ T8363] hsr_slave_1: left promiscuous mode [ 371.860036][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.867804][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.891621][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.908267][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.969560][ T8363] veth1_macvtap: left promiscuous mode [ 371.975180][ T8363] veth0_macvtap: left promiscuous mode [ 371.980769][ T8363] veth1_vlan: left promiscuous mode [ 371.987319][ T8363] veth0_vlan: left promiscuous mode [ 372.579921][ T8363] team0 (unregistering): Port device team_slave_1 removed [ 372.654861][ T8363] team0 (unregistering): Port device team_slave_0 removed [ 373.254789][T14745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.288437][T14745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.317082][T14745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.345190][T14745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.455910][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.510309][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.549549][ T3424] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.556707][ T3424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.586081][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.593291][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.622394][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2303'. [ 373.663532][T14745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.670322][T14950] netlink: 'syz.3.2303': attribute type 4 has an invalid length. [ 373.731286][T14734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.776036][T14745] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.818010][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.825184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.860259][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.867449][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.899856][T14730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.035039][T14730] veth0_vlan: entered promiscuous mode [ 374.076665][T14730] veth1_vlan: entered promiscuous mode [ 374.138228][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.161490][T14730] veth0_macvtap: entered promiscuous mode [ 374.214310][T14730] veth1_macvtap: entered promiscuous mode [ 374.245543][T14745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.270987][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.296146][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.313901][T14730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.349497][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.357581][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 374.369939][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.395547][T14730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.405768][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 374.433493][T14730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.442209][T14730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.482593][T14730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.491309][T14730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.533905][T14745] veth0_vlan: entered promiscuous mode [ 374.581611][T14745] veth1_vlan: entered promiscuous mode [ 374.650071][T14977] lo speed is unknown, defaulting to 1000 [ 374.714890][T14734] veth0_vlan: entered promiscuous mode [ 374.738814][T14745] veth0_macvtap: entered promiscuous mode [ 374.778272][T14734] veth1_vlan: entered promiscuous mode [ 374.816300][ T9112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.825325][T14745] veth1_macvtap: entered promiscuous mode [ 374.853280][ T9112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.940396][T14745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.963844][T14745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.986532][T14745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.012544][T14745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.034526][T14745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.049850][T14734] veth0_macvtap: entered promiscuous mode [ 375.096071][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.106563][T14745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.122636][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.150319][T14745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.170669][T14745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.191401][T14745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.204253][T14745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.229387][T14734] veth1_macvtap: entered promiscuous mode [ 375.261650][T14745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.302394][T14745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.311117][T14745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.325395][T14745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.385419][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.405195][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.424663][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.454723][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.472532][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.497763][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.519304][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.574174][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.600440][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.620748][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.641357][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.651829][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.662737][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.673890][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.715331][T14734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.756908][T14734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.775995][T14734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.794966][T14734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.947300][ T8363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.046910][ T9113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.104551][ T9113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.197634][ T8363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.398284][ T8363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.497500][ T8363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.516387][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.531307][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.550024][ T3424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.566393][ T3424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.629889][ T9113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.653003][ T9113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.854180][ T8363] bridge_slave_1: left allmulticast mode [ 376.859866][ T8363] bridge_slave_1: left promiscuous mode [ 376.868250][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.880114][ T8363] bridge_slave_0: left allmulticast mode [ 376.890640][ T8363] bridge_slave_0: left promiscuous mode [ 376.896737][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.372997][ T8363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.397253][ T8363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.438352][ T8363] bond0 (unregistering): Released all slaves [ 377.636072][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.648316][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.656528][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.664442][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.675730][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.693165][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.812267][T14999] lo speed is unknown, defaulting to 1000 [ 378.086651][T15005] lo speed is unknown, defaulting to 1000 [ 378.456658][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.475071][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.483287][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.505220][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.518431][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 378.526849][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.558944][ T8363] hsr_slave_0: left promiscuous mode [ 378.587353][ T8363] hsr_slave_1: left promiscuous mode [ 378.610390][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.631431][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.663769][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.679114][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.699378][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.712669][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.727831][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.735714][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.743330][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 378.750806][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.758535][ T8363] veth1_macvtap: left promiscuous mode [ 378.765574][ T8363] veth0_macvtap: left promiscuous mode [ 378.774836][ T8363] veth1_vlan: left promiscuous mode [ 378.776704][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.819766][ T8363] veth0_vlan: left promiscuous mode [ 378.896026][T15026] FAULT_INJECTION: forcing a failure. [ 378.896026][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.910263][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.0.2314 Not tainted 6.14.0-rc3-syzkaller-00607-g5d6ba5ab8582 #0 [ 378.910285][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 378.910295][T15026] Call Trace: [ 378.910300][T15026] [ 378.910307][T15026] dump_stack_lvl+0x241/0x360 [ 378.910332][T15026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.910351][T15026] ? __pfx__printk+0x10/0x10 [ 378.910381][T15026] should_fail_ex+0x40a/0x550 [ 378.910407][T15026] _copy_to_user+0x31/0xb0 [ 378.910429][T15026] bpf_verifier_vlog+0x31e/0x860 [ 378.910457][T15026] __btf_verifier_log+0xd5/0x120 [ 378.910480][T15026] ? bpf_verifier_vlog+0x32b/0x860 [ 378.910504][T15026] ? __pfx___btf_verifier_log+0x10/0x10 [ 378.910531][T15026] ? btf_parse_hdr+0x1e3/0x710 [ 378.910552][T15026] btf_parse_hdr+0x3a1/0x710 [ 378.910573][T15026] btf_new_fd+0x38b/0xca0 [ 378.910590][T15026] ? apparmor_capable+0x13b/0x1b0 [ 378.910615][T15026] ? __pfx_btf_new_fd+0x10/0x10 [ 378.910637][T15026] ? bpf_btf_load+0xcf/0x1a0 [ 378.910660][T15026] __sys_bpf+0x6f2/0x820 [ 378.910683][T15026] ? __pfx___sys_bpf+0x10/0x10 [ 378.910716][T15026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.910741][T15026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.910764][T15026] ? do_syscall_64+0x100/0x230 [ 378.910789][T15026] __x64_sys_bpf+0x7c/0x90 [ 378.910809][T15026] do_syscall_64+0xf3/0x230 [ 378.910828][T15026] ? clear_bhb_loop+0x35/0x90 [ 378.910851][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.910870][T15026] RIP: 0033:0x7f2e74d8d0a9 [ 378.910884][T15026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.910898][T15026] RSP: 002b:00007f2e75b15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.910916][T15026] RAX: ffffffffffffffda RBX: 00007f2e74fa5fa0 RCX: 00007f2e74d8d0a9 [ 378.910928][T15026] RDX: 0000000000000028 RSI: 0000400000000200 RDI: 0000000000000012 [ 378.910939][T15026] RBP: 00007f2e75b15090 R08: 0000000000000000 R09: 0000000000000000 [ 378.910949][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.910959][T15026] R13: 0000000000000001 R14: 00007f2e74fa5fa0 R15: 00007ffc5dc1d878 [ 378.910986][T15026] [ 379.206229][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 379.220516][T15028] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2315'. [ 379.234113][T15028] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 379.552732][ T8363] team0 (unregistering): Port device team_slave_1 removed [ 379.595531][ T8363] team0 (unregistering): Port device team_slave_0 removed [ 379.807654][ T5842] Bluetooth: hci1: command tx timeout [ 380.053226][T15028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.072191][T15029] bond5: (slave veth11): Enslaving as an active interface with a down link [ 380.085914][T15030] ip6erspan1: entered promiscuous mode [ 380.094915][T15030] bond5: (slave ip6erspan1): making interface the new active one [ 380.104451][T15030] bond5: (slave ip6erspan1): Enslaving as an active interface with an up link [ 380.130977][T14999] chnl_net:caif_netlink_parms(): no params data found [ 380.194701][T15019] lo speed is unknown, defaulting to 1000 [ 380.371621][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.379076][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.390260][T14999] bridge_slave_0: entered allmulticast mode [ 380.397319][T14999] bridge_slave_0: entered promiscuous mode [ 380.407090][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.419956][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.434528][T14999] bridge_slave_1: entered allmulticast mode [ 380.441477][T14999] bridge_slave_1: entered promiscuous mode [ 380.503475][T15015] lo speed is unknown, defaulting to 1000 [ 380.593568][T14999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.602806][ T5842] Bluetooth: hci2: command tx timeout [ 380.634897][T14999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.694549][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 380.704014][T15044] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 380.711808][T15044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'. [ 380.742170][T14999] team0: Port device team_slave_0 added [ 380.767288][T15046] lo speed is unknown, defaulting to 1000 [ 380.780297][T14999] team0: Port device team_slave_1 added [ 380.843741][ T5842] Bluetooth: hci4: command tx timeout [ 380.864660][T14999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.872798][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.899307][T14999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.911484][T14999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.918505][T14999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.944697][T14999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.008280][ T8363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.119851][ T8363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.256084][T14999] hsr_slave_0: entered promiscuous mode [ 381.272477][T14999] hsr_slave_1: entered promiscuous mode [ 381.278595][T14999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.293874][T14999] Cannot create hsr debugfs directory [ 381.344924][ T8363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.397809][T15062] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2322'. [ 381.451384][ T8363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.490041][T15061] dvmrp8: entered allmulticast mode [ 381.596652][T15019] chnl_net:caif_netlink_parms(): no params data found [ 381.722033][T15015] chnl_net:caif_netlink_parms(): no params data found [ 381.778782][T15073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2326'. [ 381.883207][ T5842] Bluetooth: hci1: command tx timeout [ 381.906743][ T8363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.992788][T15073] lo speed is unknown, defaulting to 1000 [ 382.034429][ T8363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.084397][T15019] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.102093][T15019] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.112826][T15019] bridge_slave_0: entered allmulticast mode [ 382.126617][T15019] bridge_slave_0: entered promiscuous mode [ 382.247885][ T8363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.264560][T15019] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.282738][T15019] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.295805][T15019] bridge_slave_1: entered allmulticast mode [ 382.313640][T15019] bridge_slave_1: entered promiscuous mode [ 382.409012][ T8363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.459516][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.468036][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.479739][T15015] bridge_slave_0: entered allmulticast mode [ 382.486926][T15015] bridge_slave_0: entered promiscuous mode [ 382.507322][T15019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.541819][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.559084][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.569309][T15015] bridge_slave_1: entered allmulticast mode [ 382.576618][T15015] bridge_slave_1: entered promiscuous mode [ 382.594415][T15019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.682237][T15015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.691400][ T5842] Bluetooth: hci2: command tx timeout [ 382.700901][T15015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.741701][T15019] team0: Port device team_slave_0 added [ 382.829141][T15015] team0: Port device team_slave_0 added [ 382.868865][T15019] team0: Port device team_slave_1 added [ 382.899972][T15015] team0: Port device team_slave_1 added [ 382.910288][T15085] lo: left promiscuous mode [ 382.920987][T15085] tunl0: left promiscuous mode [ 382.926487][ T5842] Bluetooth: hci4: command tx timeout [ 382.940836][T15085] gre0: left promiscuous mode [ 382.972457][T15085] gretap0: left promiscuous mode [ 382.984265][T15085] erspan0: left promiscuous mode [ 382.999062][T15085] ip_vti0: left promiscuous mode [ 383.010998][T15085] ip6_vti0: left promiscuous mode [ 383.020315][T15085] sit0: left promiscuous mode [ 383.036748][T15085] ip6tnl0: left promiscuous mode [ 383.093499][T15085] ip6gre0: left promiscuous mode [ 383.114220][T15085] syz_tun: left promiscuous mode [ 383.169180][T15085] vcan0: left promiscuous mode [ 383.190572][T15085] team0: left promiscuous mode [ 383.206141][T15085] dummy0: left promiscuous mode [ 383.220262][T15085] nlmon0: left promiscuous mode [ 383.231600][T15085] caif0: left promiscuous mode [ 383.240037][T15085] macvtap1: left promiscuous mode [ 383.245397][T15085] macvtap1: left allmulticast mode [ 383.250615][T15085] macvtap2: left promiscuous mode [ 383.255732][T15085] macvtap2: left allmulticast mode [ 383.261024][T15085] macvtap3: left promiscuous mode [ 383.266298][T15085] macvtap3: left allmulticast mode [ 383.271605][T15085] ip6tnl1: left promiscuous mode [ 383.276610][T15085] ip6tnl1: left allmulticast mode [ 383.281945][T15085] macvtap4: left promiscuous mode [ 383.287209][T15085] macvtap4: left allmulticast mode [ 383.292717][T15085] macvtap5: left promiscuous mode [ 383.297763][T15085] macvtap5: left allmulticast mode [ 383.317032][T15085] bond2: left allmulticast mode [ 383.321908][T15085] bond2: left promiscuous mode [ 383.340090][T15085] vlan3: left promiscuous mode [ 383.345044][T15085] vlan3: left allmulticast mode [ 383.369609][T15085] ip6gretap0: left allmulticast mode [ 383.377876][T15085] macsec1: left promiscuous mode [ 383.382930][T15085] macsec1: left allmulticast mode [ 383.399932][T15085] gtp1: left promiscuous mode [ 383.408937][T15085] gtp1: left allmulticast mode [ 383.440860][T15085] veth9: left promiscuous mode [ 383.449377][T15085] ip6tnl3: left promiscuous mode [ 383.459607][T15085] bond4: left promiscuous mode [ 383.542496][ T8363] bridge_slave_1: left allmulticast mode [ 383.558395][ T8363] bridge_slave_1: left promiscuous mode [ 383.576743][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.599367][ T8363] bridge_slave_0: left allmulticast mode [ 383.605470][ T8363] bridge_slave_0: left promiscuous mode [ 383.611306][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.638214][ T8363] bridge_slave_1: left allmulticast mode [ 383.646483][ T8363] bridge_slave_1: left promiscuous mode [ 383.661125][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.670260][ T8363] bridge_slave_0: left allmulticast mode [ 383.676426][ T8363] bridge_slave_0: left promiscuous mode [ 383.682204][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.882923][ C1] ================================================================== [ 383.891032][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x464/0x4a0 [ 383.898938][ C1] Read of size 2 at addr ffff88807ebc982a by task swapper/1/0 [ 383.906396][ C1] [ 383.908719][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc3-syzkaller-00607-g5d6ba5ab8582 #0 [ 383.908740][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 383.908752][ C1] Call Trace: [ 383.908759][ C1] [ 383.908768][ C1] dump_stack_lvl+0x241/0x360 [ 383.908793][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.908811][ C1] ? __pfx__printk+0x10/0x10 [ 383.908830][ C1] ? _printk+0xd5/0x120 [ 383.908846][ C1] ? __virt_addr_valid+0x183/0x530 [ 383.908863][ C1] ? __virt_addr_valid+0x183/0x530 [ 383.908880][ C1] print_report+0x16e/0x5b0 [ 383.908901][ C1] ? __virt_addr_valid+0x183/0x530 [ 383.908916][ C1] ? __virt_addr_valid+0x183/0x530 [ 383.908931][ C1] ? __virt_addr_valid+0x45f/0x530 [ 383.908947][ C1] ? __phys_addr+0xba/0x170 [ 383.908972][ C1] ? rose_timer_expiry+0x464/0x4a0 [ 383.908992][ C1] kasan_report+0x143/0x180 [ 383.909014][ C1] ? rose_timer_expiry+0x464/0x4a0 [ 383.909043][ C1] rose_timer_expiry+0x464/0x4a0 [ 383.909064][ C1] call_timer_fn+0x187/0x650 [ 383.909088][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909107][ C1] ? call_timer_fn+0xc0/0x650 [ 383.909130][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909150][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 383.909176][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909196][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909215][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.909253][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 383.909272][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 383.909292][ C1] __run_timer_base+0x66a/0x8e0 [ 383.909321][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 383.909347][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.909371][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 383.909395][ C1] run_timer_softirq+0xb7/0x170 [ 383.909419][ C1] handle_softirqs+0x2d4/0x9b0 [ 383.909443][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 383.909463][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 383.909484][ C1] ? irqtime_account_irq+0xd1/0x1d0 [ 383.909511][ C1] __irq_exit_rcu+0xf7/0x220 [ 383.909530][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 383.909553][ C1] irq_exit_rcu+0x9/0x30 [ 383.909571][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 383.909591][ C1] [ 383.909597][ C1] [ 383.909603][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.909628][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 383.909653][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 ef 81 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 383.909669][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 383.909687][ C1] RAX: ffff88801de80000 RBX: ffff8880212bc064 RCX: 000000000006d911 [ 383.909700][ C1] RDX: 0000000000000001 RSI: ffff8880212bc000 RDI: ffff8880212bc064 [ 383.909713][ C1] RBP: 000000000003aab8 R08: ffff8880b873799b R09: 1ffff110170e6f33 [ 383.909726][ C1] R10: dffffc0000000000 R11: ffffffff8c089010 R12: ffff88801d727800 [ 383.909740][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3377e0 [ 383.909754][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 383.909783][ C1] acpi_idle_enter+0xe4/0x140 [ 383.909808][ C1] cpuidle_enter_state+0x109/0x470 [ 383.909831][ C1] ? __pfx_menu_select+0x10/0x10 [ 383.909855][ C1] cpuidle_enter+0x5d/0xa0 [ 383.909874][ C1] do_idle+0x372/0x5c0 [ 383.909899][ C1] ? __pfx_do_idle+0x10/0x10 [ 383.909927][ C1] cpu_startup_entry+0x42/0x60 [ 383.909947][ C1] start_secondary+0x102/0x110 [ 383.909968][ C1] common_startup_64+0x13e/0x147 [ 383.909994][ C1] [ 383.910000][ C1] [ 383.982604][ T5842] Bluetooth: hci1: command tx timeout [ 383.984866][ C1] Allocated by task 14730: [ 383.984878][ C1] kasan_save_track+0x3f/0x80 [ 383.984899][ C1] __kasan_kmalloc+0x98/0xb0 [ 384.286285][ C1] __kmalloc_cache_noprof+0x243/0x390 [ 384.291674][ C1] __ipv6_dev_mc_inc+0x431/0xac0 [ 384.296626][ C1] ipv6_add_dev+0xe03/0x1220 [ 384.301223][ C1] addrconf_notify+0x6a7/0x1020 [ 384.306082][ C1] notifier_call_chain+0x1a5/0x3f0 [ 384.311201][ C1] register_netdevice+0x16b5/0x1b60 [ 384.316403][ C1] register_netdev+0x40/0x50 [ 384.321003][ C1] loopback_net_init+0x73/0x150 [ 384.325856][ C1] ops_init+0x349/0x5b0 [ 384.330014][ C1] setup_net+0x287/0x9e0 [ 384.334260][ C1] copy_net_ns+0x33f/0x570 [ 384.338679][ C1] create_new_namespaces+0x425/0x7b0 [ 384.343969][ C1] unshare_nsproxy_namespaces+0x124/0x180 [ 384.349699][ C1] ksys_unshare+0x57d/0xa70 [ 384.354205][ C1] __x64_sys_unshare+0x38/0x40 [ 384.358975][ C1] do_syscall_64+0xf3/0x230 [ 384.363485][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.369361][ C1] [ 384.371662][ C1] Freed by task 3518: [ 384.375629][ C1] kasan_save_track+0x3f/0x80 [ 384.380284][ C1] kasan_save_free_info+0x40/0x50 [ 384.385290][ C1] __kasan_slab_free+0x59/0x70 [ 384.390034][ C1] kmem_cache_free_bulk+0x2d8/0x530 [ 384.395215][ C1] kvfree_rcu_bulk+0xd3/0x1d0 [ 384.399880][ C1] kfree_rcu_monitor+0x20a/0x2a0 [ 384.404811][ C1] process_scheduled_works+0xabe/0x18e0 [ 384.410336][ C1] worker_thread+0x870/0xd30 [ 384.414908][ C1] kthread+0x7a9/0x920 [ 384.418959][ C1] ret_from_fork+0x4b/0x80 [ 384.423361][ C1] ret_from_fork_asm+0x1a/0x30 [ 384.428102][ C1] [ 384.430404][ C1] Last potentially related work creation: [ 384.436096][ C1] kasan_save_stack+0x3f/0x60 [ 384.440752][ C1] kasan_record_aux_stack+0xaa/0xc0 [ 384.445935][ C1] kvfree_call_rcu+0xa9/0x3e0 [ 384.450592][ C1] ipv6_mc_destroy_dev+0x3b6/0x580 [ 384.455686][ C1] addrconf_ifdown+0x1619/0x1b00 [ 384.460604][ C1] addrconf_notify+0x3cb/0x1020 [ 384.465434][ C1] notifier_call_chain+0x1a5/0x3f0 [ 384.470526][ C1] unregister_netdevice_many_notify+0x1179/0x2070 [ 384.476918][ C1] default_device_exit_batch+0x7ff/0x880 [ 384.482538][ C1] cleanup_net+0x8ad/0xd60 [ 384.486949][ C1] process_scheduled_works+0xabe/0x18e0 [ 384.492488][ C1] worker_thread+0x870/0xd30 [ 384.497066][ C1] kthread+0x7a9/0x920 [ 384.501123][ C1] ret_from_fork+0x4b/0x80 [ 384.505522][ C1] ret_from_fork_asm+0x1a/0x30 [ 384.510268][ C1] [ 384.512574][ C1] The buggy address belongs to the object at ffff88807ebc9800 [ 384.512574][ C1] which belongs to the cache kmalloc-512 of size 512 [ 384.526612][ C1] The buggy address is located 42 bytes inside of [ 384.526612][ C1] freed 512-byte region [ffff88807ebc9800, ffff88807ebc9a00) [ 384.540313][ C1] [ 384.542619][ C1] The buggy address belongs to the physical page: [ 384.549006][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ebcb800 pfn:0x7ebc8 [ 384.559054][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 384.567538][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 384.576035][ C1] page_type: f5(slab) [ 384.580006][ C1] raw: 00fff00000000240 ffff88801b041c80 ffffea0001c01b10 ffffea00009e3510 [ 384.588593][ C1] raw: ffff88807ebcb800 000000000010000f 00000000f5000000 0000000000000000 [ 384.597154][ C1] head: 00fff00000000240 ffff88801b041c80 ffffea0001c01b10 ffffea00009e3510 [ 384.605802][ C1] head: ffff88807ebcb800 000000000010000f 00000000f5000000 0000000000000000 [ 384.614451][ C1] head: 00fff00000000002 ffffea0001faf201 ffffffffffffffff 0000000000000000 [ 384.623099][ C1] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 384.631742][ C1] page dumped because: kasan: bad access detected [ 384.638135][ C1] page_owner tracks the page as allocated [ 384.643844][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u8:0), ts 65301328006, free_ts 65103735557 [ 384.664831][ C1] post_alloc_hook+0x1f4/0x240 [ 384.669579][ C1] get_page_from_freelist+0x365c/0x37a0 [ 384.675106][ C1] __alloc_frozen_pages_noprof+0x292/0x710 [ 384.680889][ C1] alloc_pages_mpol+0x311/0x660 [ 384.685734][ C1] allocate_slab+0x8f/0x3a0 [ 384.690230][ C1] ___slab_alloc+0xc27/0x14a0 [ 384.694896][ C1] __slab_alloc+0x58/0xa0 [ 384.699233][ C1] __kmalloc_cache_noprof+0x27b/0x390 [ 384.704586][ C1] __ipv6_dev_mc_inc+0x431/0xac0 [ 384.709514][ C1] addrconf_dad_work+0x44f/0x16a0 [ 384.714534][ C1] process_scheduled_works+0xabe/0x18e0 [ 384.720060][ C1] worker_thread+0x870/0xd30 [ 384.724632][ C1] kthread+0x7a9/0x920 [ 384.728691][ C1] ret_from_fork+0x4b/0x80 [ 384.733092][ C1] ret_from_fork_asm+0x1a/0x30 [ 384.737848][ C1] page last free pid 5835 tgid 5835 stack trace: [ 384.744150][ C1] free_frozen_pages+0xe0d/0x10e0 [ 384.749158][ C1] __put_partials+0x160/0x1c0 [ 384.753821][ C1] put_cpu_partial+0x17c/0x250 [ 384.758564][ C1] __slab_free+0x290/0x380 [ 384.762967][ C1] qlist_free_all+0x9a/0x140 [ 384.767543][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 384.772984][ C1] __kasan_slab_alloc+0x23/0x80 [ 384.777816][ C1] __kmalloc_cache_noprof+0x1d9/0x390 [ 384.783169][ C1] ref_tracker_alloc+0x14b/0x490 [ 384.788096][ C1] netdev_get_by_index+0x7a/0xb0 [ 384.793024][ C1] fib6_nh_init+0x1d8/0x2180 [ 384.797600][ C1] ip6_route_info_create+0x999/0x12b0 [ 384.802962][ C1] ip6_route_add+0x28/0x160 [ 384.807474][ C1] inet6_addr_add+0x7ed/0xe30 [ 384.812134][ C1] inet6_rtm_newaddr+0xa89/0xf10 [ 384.817052][ C1] rtnetlink_rcv_msg+0x791/0xcf0 [ 384.821976][ C1] [ 384.824288][ C1] Memory state around the buggy address: [ 384.829894][ C1] ffff88807ebc9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 384.837935][ C1] ffff88807ebc9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 384.845991][ C1] >ffff88807ebc9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.854042][ C1] ^ [ 384.859398][ C1] ffff88807ebc9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.867449][ C1] ffff88807ebc9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.875489][ C1] ================================================================== [ 384.883595][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 384.890788][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc3-syzkaller-00607-g5d6ba5ab8582 #0 [ 384.901095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.911133][ C1] Call Trace: [ 384.914397][ C1] [ 384.917222][ C1] dump_stack_lvl+0x241/0x360 [ 384.921884][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.927066][ C1] ? __pfx__printk+0x10/0x10 [ 384.931641][ C1] ? vscnprintf+0x5d/0x90 [ 384.935959][ C1] panic+0x349/0x880 [ 384.939841][ C1] ? check_panic_on_warn+0x21/0xb0 [ 384.944940][ C1] ? __pfx_panic+0x10/0x10 [ 384.949340][ C1] ? mark_lock+0x9a/0x360 [ 384.953653][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 384.959536][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 384.965414][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.971722][ C1] ? print_report+0x519/0x5b0 [ 384.976434][ C1] check_panic_on_warn+0x86/0xb0 [ 384.981357][ C1] ? rose_timer_expiry+0x464/0x4a0 [ 384.986452][ C1] end_report+0x77/0x160 [ 384.990680][ C1] kasan_report+0x154/0x180 [ 384.995166][ C1] ? rose_timer_expiry+0x464/0x4a0 [ 385.000260][ C1] rose_timer_expiry+0x464/0x4a0 [ 385.005181][ C1] call_timer_fn+0x187/0x650 [ 385.009755][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.015202][ C1] ? call_timer_fn+0xc0/0x650 [ 385.019871][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.025345][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 385.030454][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.035904][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.041376][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.046823][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.052001][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 385.057196][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 385.062659][ C1] __run_timer_base+0x66a/0x8e0 [ 385.067496][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 385.072851][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.079159][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 385.084344][ C1] run_timer_softirq+0xb7/0x170 [ 385.089181][ C1] handle_softirqs+0x2d4/0x9b0 [ 385.093939][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 385.098700][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 385.103976][ C1] ? irqtime_account_irq+0xd1/0x1d0 [ 385.109177][ C1] __irq_exit_rcu+0xf7/0x220 [ 385.113749][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 385.118930][ C1] irq_exit_rcu+0x9/0x30 [ 385.123154][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 385.128770][ C1] [ 385.131682][ C1] [ 385.134597][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.140560][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 385.145828][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 ef 81 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 385.165427][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 385.171506][ C1] RAX: ffff88801de80000 RBX: ffff8880212bc064 RCX: 000000000006d911 [ 385.179475][ C1] RDX: 0000000000000001 RSI: ffff8880212bc000 RDI: ffff8880212bc064 [ 385.187429][ C1] RBP: 000000000003aab8 R08: ffff8880b873799b R09: 1ffff110170e6f33 [ 385.195395][ C1] R10: dffffc0000000000 R11: ffffffff8c089010 R12: ffff88801d727800 [ 385.203348][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3377e0 [ 385.211303][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 385.216577][ C1] acpi_idle_enter+0xe4/0x140 [ 385.221238][ C1] cpuidle_enter_state+0x109/0x470 [ 385.226344][ C1] ? __pfx_menu_select+0x10/0x10 [ 385.231282][ C1] cpuidle_enter+0x5d/0xa0 [ 385.235682][ C1] do_idle+0x372/0x5c0 [ 385.239745][ C1] ? __pfx_do_idle+0x10/0x10 [ 385.244356][ C1] cpu_startup_entry+0x42/0x60 [ 385.249136][ C1] start_secondary+0x102/0x110 [ 385.253900][ C1] common_startup_64+0x13e/0x147 [ 385.258828][ C1] [ 385.262083][ C1] Kernel Offset: disabled [ 385.266408][ C1] Rebooting in 86400 seconds..