last executing test programs: 1m9.389644918s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 1m7.573439029s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) 57.708737577s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 56.143320509s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) 50.288293119s ago: executing program 1 (id=2453): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0200000006"], 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r8, &(0x7f0000000140), 0xfffffdef) 49.384318238s ago: executing program 1 (id=2459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd14}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x1b, 0x0, 0x52) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x29c5, 0x6, 0x0, 0x3574, 0xffffffff}}, {0x4}}]}]}, 0x6c}}, 0x4008000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x3, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x1000001, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x7, 0xfe09) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000000c0)=""/23, &(0x7f0000000080)=0x17) 49.151752164s ago: executing program 1 (id=2463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00000000000000000000000000000000000000000e708a3c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000026e8000061120c0000000008009e9c94bf13e809"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000000000000c0000007b1af80007010000f8ff00"/54], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8, @ANYRES16=r5, @ANYRESHEX=r2], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT=r7], 0x20) 43.44279477s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 43.031529214s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) 36.322535925s ago: executing program 1 (id=2463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00000000000000000000000000000000000000000e708a3c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000026e8000061120c0000000008009e9c94bf13e809"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000000000000c0000007b1af80007010000f8ff00"/54], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8, @ANYRES16=r5, @ANYRESHEX=r2], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT=r7], 0x20) 32.040796679s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 30.380227412s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) 24.218625962s ago: executing program 1 (id=2463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00000000000000000000000000000000000000000e708a3c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000026e8000061120c0000000008009e9c94bf13e809"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000000000000c0000007b1af80007010000f8ff00"/54], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8, @ANYRES16=r5, @ANYRESHEX=r2], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT=r7], 0x20) 17.77789316s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 15.649672406s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) 10.766904403s ago: executing program 1 (id=2463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000008000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff00000000000000000000000000000000000000000e708a3c00"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000026e8000061120c0000000008009e9c94bf13e809"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x3e) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000000000000c0000007b1af80007010000f8ff00"/54], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8, @ANYRES16=r5, @ANYRESHEX=r2], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT=r7], 0x20) 6.827671941s ago: executing program 2 (id=2621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4080) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b22, &(0x7f0000000040)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x20000000000000a, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r4, 0x2e}, 0x10) 6.60429285s ago: executing program 2 (id=2622): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x87, @local, 0x4e24, 0x2, 'nq\x00', 0x5, 0x5, 0x3f}, {@broadcast, 0x4e21, 0x1, 0x800, 0x9, 0x4}}, 0x44) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000001140)={0x73, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 'nq\x00', 0x9, 0x80000001, 0x2a}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001180)={@loopback, 0xfffffffb, 0x0, 0x0, 0x4, 0x0, 0x3f38}, &(0x7f00000011c0)=0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa8, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xcb7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xcb1c}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4402e1ca}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x50, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000}, 0x1) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r5, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001700)={0x0, @dev, @dev}, &(0x7f0000001740)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xbc, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x41}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001900), r6) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x74, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x74}}, 0x4000000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f0000001b40)={&(0x7f0000001a40), 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x40, r12, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x88d1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r10) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x2c, r13, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x50, 0x1409, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x84080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x4, 0xfe, &(0x7f0000002100)="a4bff81b", &(0x7f0000002140)=""/254, 0x20000000, 0x0, 0x4e, 0xa5, &(0x7f0000002240)="48494d381e75c108354de92a3a9ab18adb6c1abdec1ce89b1fc91a2cfc6984bef00978cf8955e30d6784a8d470c6c712188409e37cf8e3668e9977ae37439a20fc62b5504b1e415f994fc72cac57", &(0x7f00000022c0)="b65e6fabb4e477a425f1fd1b238a6e67b9e2cfc33d1f272e7d270e777de6e93ebbea07beb4c493311d71da70250e6108800128069160a69110b1e9987b471dfbd2f6001c0af10b64b451bb1e28d732a25b59a62a90869d48ba134b1a02c3dd555332da21efc82c02e8b9ebfb905feea758c24ff8544837bfa876a80690f643b661c3f82062aeb8beaa3ddeada782b01ad7d99ef25cf2bb4090186da9cb5bc2f9ce8b1ef2c3", 0x6, 0x0, 0x2}, 0x50) 6.444107921s ago: executing program 2 (id=2623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_extract_tcp_res(0x0, 0x7fff, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa86dd60f10200001c06fffc010000000000000000000000000001fe8000000400000000000000000000aa4e2000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6010000090780000000000002d675343"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000000) unshare(0x42000000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100033060000000008000080e0000002000000000000000000000000fe80000000000000000000000000002a00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000fc0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000005000000ffffffffffffffe8000000000000000000000000050000000000000000000000000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e750000290000000000000000000000000000000000000000000000000000000000000000000000000000000000003cd358840000000000007a74024166"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 5.048158926s ago: executing program 2 (id=2626): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002000000000000004536a18524066b050b90006b77723f7efed8dbebb6f2e2e70de1d673b7708a56c603d8dac1476711fcf4b396ce0b33d3b085fd5b605e460d5c3103810983fee6178ab7e5df329f2ad5aa649b30124b0ab70b5a13af6a53b72e5e1fdda0fe6829f392ef5e39ba36f4090678b3648c31fd2e14f63125028ac693d1486253be58476706f5d570d1a10005f158b43c81376f1be54f5c294cf54c983577fe5965106696bdc512a60be12986618871117dd5ddb27a53efeed0f8877ae3a205923d59", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r2, 0x2, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r1, &(0x7f0000000180)="c81e563a7e3400c933ebbb7db0d905b52de70f623dbfa9df24d06485c091896de05710dcc1f156e2f70745869afd6c251c7b54de9a9017194c845e337fbe0f6fcd1cda832af4518b30149a93a950dd9de3720656e45b5595e2efd634125e619dd202c64ad888fa0b341152438286a99ca7", 0x71) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x28, 0x805, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) 4.915789196s ago: executing program 2 (id=2628): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc61", 0xd7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d85", 0x4f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/87, 0x57}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7", 0xdd}], 0x2}}], 0x2, 0xc0) 4.802809155s ago: executing program 2 (id=2630): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.787384103s ago: executing program 4 (id=2632): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\x06gr\xcd:\"\x0f'}, 0x30) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r2, 0x12574000) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f40800036806", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x5a4, 0x16, 0xa01, 0x0, 0x0, {0xfe}, [@generic="b2ef370e7b827ca96c12127b0278d89c3f2bf3e962d9660cca71932fb6b22381124f465430717c31f9012fdc5f5f26ca10fb9ff64d6b403aba51507361e5c5f77952fb77ce57cb0d51c2d15d034a91950ec2f61d0f549d2a45187f7ce5effe408f57b0382a3f30b34d351eae3fb48e21b0b48e3afab6c6c36b453c452fcd812c582095bd874f56f368cd9cf48ea1f2981fc6d7fdfcaadb8cf1fcf3f5bfdcabd1304ea86e0d3593975a35af8817a37c0c6d3134d170676e57c3c72ecd0ec3d36be184d272dbcbd1d1076150339069725942a1514067b2e568beb7b906e47c40ce71f1", @nested={0x4ab, 0x132, 0x0, 0x1, [@typed={0xe, 0x4a, 0x0, 0x0, @str='syzkaller\x00'}, @typed={0x4, 0x138}, @generic="caa922c6f0d0288ee5db4f2260076ebc8cca70452b986bf563167d9962d8cbdb9b4b74b0cbf4463de0a94f31c915307d325b52dcfded7e99d18dcb600abdbd2459d0abc62192ac08250a30615468ab4bc7940ec147f8e4b6cab6862bb391227596496b353c5f41acb43e2c5f88514d412a551c", @nested={0x420, 0xaa, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r4}, @generic="259ccddd4f99643199aaf7898118a22eeede9d67e3e1ca946acdf4cb97c14f4edd27cb48ef3c8364788d4fa9ccfa5c49ed371b49a17b2a0bee59db09938680224cebc8ed22286af28421e2243eca7be9e4689fdf1bdfee98c9e7022f94bf2ad7a74cd693f50bf4a010fea919e596ec0dae654f2ff55c135deac48c93d6c42e198ec0eede2a269f0203c1c05d53bb43dc9032f60bf89207f0d6e073389a96d29eec74d77d51bd1568e6dd7aa23b296284450aaaed5f1fbce6ef31220af1407c0405835a5b41e58737d61003804c7d225aae508cbceb2a0d9309c06a7c9e429dac61af24e8293986ae21047d8d8fe8322d87f4ec5d79987cf6", @nested={0x50, 0x12f, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x6}, @generic="63a5da4c4440bd8ba7eb7f40f44eff1e2c46d5f0175e2bc402a353af65cb5a4a58001a60a406bb3b547d76dbbe30b5cebbeebc7c46fcddf5ba2b3c24eff37b8e8c192e8a"]}, @generic="2b2224ee0b441e401077accd140ab57421e7cf1780e0f1d6164eafdaf034dc46442aafed9fadca00149b91e9571eb7e3651f609b1e3c432474c4cf704776899a48c248f9a412fe14d7d26748915195bdda41fed112b61df943418e3df7cbb8c9c49c30d140d1d51a338ab728dc53479fa4541948dfa0cfce0c0cdacd75b6b953b1159252d8e1acdf99e8178b2cda4e35dda9ff5ad1bb7fcfae4bcb32", @nested={0x22f, 0xe6, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="6bf4693bbd3558f4bd84f734e384ff41bc9a80f07638f555bbad04992d61131a370f3c8c545ecda69aa4ab22f214a803298af6c6492666fc7b12b19cd683100d25920bb5ad9225f9155b5f3c491d158f496bdcb392", @generic="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", @generic="f59b6cc5eab592ee49ae5af3ee4628f7d27900a23e4c9aa81c5131faef81f2393937db9dad2afc9a3b91f7974c4241b6a06f64bcbd5485ffd1296ce1a9b4e9c33b8575fd5e646f5ad9bd3b130058f0292e12966ac6c7ea8ab2b67080850291a0937f3ce508a2114b1c99860fbf6061b412d1d319e62ac80f9e498c0190156609303fc1a54c4c3dc46e8ce44df2f3bec41c565419d05ccf56ee963583e3c376d9e86a3f015dec2aca825aa2eba27c121b02ab7ec7faade60822a967be3d6f73d20384d3d86e022a1decb3c562", @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x141}]}]}]}]}, 0x5a4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_batadv\x00', {0x2}, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000008000002"}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc080) 3.330161678s ago: executing program 4 (id=2633): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004d18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r3, 0x2e}, 0x10) 3.156356373s ago: executing program 4 (id=2634): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)={0x24, r2, 0x103, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x1d, 0x2, 0x6) socket(0x2a, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x4, 0x0, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=0x0, @ANYRESOCT=r3], 0x20) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000340)=""/200, 0xc8}, {&(0x7f0000000a80)=""/261, 0x105}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000001a80)=""/4119, 0x1017}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000600)=""/228, 0xe4}], 0x7}, 0x1}], 0x4, 0x40000030, 0x0) 3.063820641s ago: executing program 3 (id=1051): getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080), 0x4) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x80800) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vxcan1\x00', 0x0}) recvfrom(r0, &(0x7f0000000580)=""/189, 0xbd, 0x40000140, &(0x7f0000000680)=@can={0x1d, r1}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000700), 0x4) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000740)={'nr0\x00'}) (async) r3 = accept4(r2, &(0x7f0000000780)=@xdp, &(0x7f0000000800)=0x80, 0x800) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000840)=0x1, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000008c0)=0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000900), &(0x7f0000000940)=0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000ac0)='bbr\x00', 0x4) (async) write(r6, &(0x7f0000000b00)="ff88e09a4808dca09b475f469b6c5cf38900cd4c4037384999acee51c50336056a1e2be37cfd738c24975cd86ce2c0b76ac3762c6c9646c7a8b1d2db92c847c6308eef7187d392ae123ae3d8f44c", 0x4e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b80)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000d80)) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000e00)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) 890.716609ms ago: executing program 4 (id=2635): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000280)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x72}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES16, @ANYRES16, @ANYBLOB="fd67b1e5e0d14004131f195a5ff306995574cf3d37c32027800a9704b23f4c93184b317ebd660ee2dd63819dc281959bb889fc83dd7d214834752a6a5fe636cea1149045fd92fec741ee032608e5f966aa6fea99437325593f88fd6dc6074afeb343ac210a3d018498ee0ce676dcdcaea01bb981e2a78c2b3694660add660d70e1ce59df05f19ffcc56c5391b70c84e001195e192ccb602036484ea74383dfae38cba3688ca4b3521b4e7a19f7f01c5911fa4e96b7ecec0de29dcadc72c5a1d47cf5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x126, 0x0, &(0x7f00000009c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) unshare(0x20000400) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002900000004000000"], 0x10}, 0x48010) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="10002bbd7000fbdbdb250000000008000100", @ANYRES32=r6, @ANYBLOB="582cde83d9bc5204654caa3252cc8b254269b553c337ee24882092201b9ecb955d0bbee3f9301339315949aba49ca2a6d6253fee6e80d2d450e4ad47655f74df8ea0ba6a1f1766b1030000007aeb26110131b3ea8174f2ee00000000000000000000000025a0c17a5e575677b36ec620b2070441f66fa96737ebf0f8c1ae54104bdc37e80a897dc119d3961cd34f4f90c7d7b540d6cedae6282b83f26ca951aa34bee5144630cebb811d1eeb9f2f03980db7db2e4b7be45891c43f47db4c99c0615555d810ec6b3843747642cd0976a83eb25542c72aebbf"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x2404c890) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x20) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000000000000004001e8040000000", 0x24) (async) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) 801.438045ms ago: executing program 4 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800470000300000000000069078ac141400ac1e0001070805000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="32000000907800004165878f22ae712e57429ced40e3021353ce0904ab23914ab61a34a2407e8e79b3a82e1f93f19e5a76cf1daf6f6a2c5869db53f555d49bec4ee8c9b29e26af06f78c9c2bd436fbb47b4e6d9b92f4ac2ba7e0a491285d79da96881f4ca4eff6fcf1a2cd72cde18bd223fcbd0800b24ff7e71eb2ab25d24b9bc4e19a126c"], 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)={'veth1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000140)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0xfffffff3, 0x57, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4008804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x80, 0x80, 0x2, 0x40, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000000500)=""/50, 0x54, 0x32, 0x1, 0x4, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000009102003dfc000000000000ff7f00009500000000e8ff00000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xfffffff8, 0x77, &(0x7f0000000400)=""/119, 0x41100, 0x10, '\x00', r11, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x4, 0x3, 0xf1be}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x5, 0x9, 0x8}, {0x3, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x4, 0x4}, {0x0, 0x3, 0x2, 0x8}, {0x2, 0x5, 0x5}, {0x0, 0x1, 0x6, 0xc}, {0x3, 0x4, 0x2}, {0x4, 0x5, 0x0, 0xb}, {0x2, 0x1, 0xc, 0x3}, {0x3, 0x2, 0x1}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0) accept4(r9, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012000000000000000006610000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0) 132.509688ms ago: executing program 4 (id=2637): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001580)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000440)) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="09000700f715aaaaaaaaaa0086dd6000e1ff00083a00fe80000000000030e100000000000003fe8000000000000000000000000000aa810090786e24f8"], 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async, rerun: 64) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) (rerun: 64) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000)="1b197da385761c85", 0x0}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000081) 0s ago: executing program 0 (id=2042): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000fbffffff00"/20, @ANYRES32, @ANYBLOB="00000000000612b99900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) kernel console output (not intermixed with test programs): .2296'. [ 309.839920][T14286] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 309.850372][ T6398] hsr_slave_0: left promiscuous mode [ 309.856489][ T6398] hsr_slave_1: left promiscuous mode [ 309.862251][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.869881][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.878737][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.886526][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.910523][ T6398] veth1_macvtap: left promiscuous mode [ 309.917421][ T6398] veth0_macvtap: left promiscuous mode [ 309.923034][ T6398] veth1_vlan: left promiscuous mode [ 309.928456][ T6398] veth0_vlan: left promiscuous mode [ 310.413893][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 310.435464][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.442669][ T5837] Bluetooth: hci0: command tx timeout [ 310.469916][ T6398] team0 (unregistering): Port device team_slave_0 removed [ 310.844627][T14283] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 310.859909][T14286] bridge0: port 2(macvlan0) entered blocking state [ 310.876457][T14286] bridge0: port 2(macvlan0) entered disabled state [ 310.883514][T14286] macvlan0: entered allmulticast mode [ 310.902819][T14286] macvlan0: left allmulticast mode [ 311.076190][ T5837] Bluetooth: hci3: command tx timeout [ 311.125173][T14306] pim6reg0: tun_chr_ioctl cmd 35111 [ 311.404603][T14236] chnl_net:caif_netlink_parms(): no params data found [ 311.475367][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.651815][ T6398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.722172][T14253] chnl_net:caif_netlink_parms(): no params data found [ 311.753129][T14332] netlink: 'syz.4.2307': attribute type 11 has an invalid length. [ 311.772032][T14332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2307'. [ 311.890118][ T6398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.924783][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 311.969315][T14236] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.984171][T14341] netlink: 'syz.2.2309': attribute type 8 has an invalid length. [ 311.985819][T14236] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.012545][T14236] bridge_slave_0: entered allmulticast mode [ 312.027943][T14343] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2310'. [ 312.039341][T14236] bridge_slave_0: entered promiscuous mode [ 312.052524][T14236] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.060002][T14236] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.072666][T14236] bridge_slave_1: entered allmulticast mode [ 312.092167][T14236] bridge_slave_1: entered promiscuous mode [ 312.129489][ T6398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.172576][T14347] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 312.292964][ T6398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.359110][T14236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.430703][T14236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.466854][T14353] SET target dimension over the limit! [ 312.514709][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.515362][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.522648][ T5837] Bluetooth: hci0: command tx timeout [ 312.534566][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.542114][T14253] bridge_slave_0: entered allmulticast mode [ 312.551018][T14253] bridge_slave_0: entered promiscuous mode [ 312.561300][T14353] team0: Port device geneve0 removed [ 312.569128][T14353] bond0: (slave wlan1): Releasing backup interface [ 312.577319][T14353] bond5: (slave gretap2): Releasing active interface [ 312.599331][T14236] team0: Port device team_slave_0 added [ 312.610209][T14236] team0: Port device team_slave_1 added [ 312.616511][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.623827][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.631680][T14253] bridge_slave_1: entered allmulticast mode [ 312.639095][T14253] bridge_slave_1: entered promiscuous mode [ 312.652721][T14366] pim6reg0: tun_chr_ioctl cmd 35111 [ 312.701250][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.741638][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.761932][T14236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.769448][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.798620][T14236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.824699][T14236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.832183][T14236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.858321][T14236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.899172][T14253] team0: Port device team_slave_0 added [ 312.907415][ T6398] bridge_slave_1: left allmulticast mode [ 312.913110][ T6398] bridge_slave_1: left promiscuous mode [ 312.920534][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.938272][ T6398] bridge_slave_0: left allmulticast mode [ 312.944056][ T6398] bridge_slave_0: left promiscuous mode [ 312.950027][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.161590][ T5837] Bluetooth: hci3: command tx timeout [ 313.339322][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.351178][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.361455][ T6398] bond0 (unregistering): Released all slaves [ 313.377554][T14253] team0: Port device team_slave_1 added [ 313.555408][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.573430][T14236] hsr_slave_0: entered promiscuous mode [ 313.585058][T14236] hsr_slave_1: entered promiscuous mode [ 313.599252][T14236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.609109][T14236] Cannot create hsr debugfs directory [ 313.617248][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.617353][T14391] netlink: 'syz.4.2321': attribute type 5 has an invalid length. [ 313.632151][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.659527][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.706733][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.713769][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.757047][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.761167][T14397] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 313.808473][T14394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 313.969958][T14253] hsr_slave_0: entered promiscuous mode [ 313.979206][T14253] hsr_slave_1: entered promiscuous mode [ 313.986199][T14253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.994031][T14253] Cannot create hsr debugfs directory [ 314.068950][ T6398] hsr_slave_0: left promiscuous mode [ 314.084878][ T6398] hsr_slave_1: left promiscuous mode [ 314.091063][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.099447][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.112676][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.127637][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.181486][ T6398] veth1_macvtap: left promiscuous mode [ 314.196816][ T6398] veth0_macvtap: left promiscuous mode [ 314.206113][ T6398] veth1_vlan: left promiscuous mode [ 314.211566][ T6398] veth0_vlan: left promiscuous mode [ 314.595407][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.607849][ T5837] Bluetooth: hci0: command tx timeout [ 314.682425][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 314.723710][ T6398] team0 (unregistering): Port device team_slave_0 removed [ 315.235664][ T5837] Bluetooth: hci3: command tx timeout [ 315.354424][T14420] pim6reg0: tun_chr_ioctl cmd 35111 [ 315.547664][T14430] tipc: Enabling of bearer rejected, media not registered [ 315.635490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.733762][T14437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2334'. [ 315.748913][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 315.760905][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2334'. [ 315.979512][T14236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.993468][T14236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.003296][T14236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.024666][T14236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.087885][T14253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.103742][T14253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.119235][T14253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.135582][T14253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.300282][T14236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.337855][T14236] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.353959][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.361140][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.386781][T14253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.415100][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.422242][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.675361][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.676409][ T5837] Bluetooth: hci0: command tx timeout [ 316.689769][T14253] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.728740][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.735976][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.774093][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.781306][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.849155][T14463] lo speed is unknown, defaulting to 1000 [ 316.926496][T14463] lo speed is unknown, defaulting to 1000 [ 316.948126][T14253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.025176][T14470] pim6reg0: tun_chr_ioctl cmd 35111 [ 317.231231][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'. [ 317.316281][ T5837] Bluetooth: hci3: command tx timeout [ 317.434430][T14236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.511002][T14236] veth0_vlan: entered promiscuous mode [ 317.524921][T14463] xt_CT: No such helper "pptp" [ 317.552781][T14236] veth1_vlan: entered promiscuous mode [ 317.619429][T14253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.677538][T14236] veth0_macvtap: entered promiscuous mode [ 317.715575][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.716392][T14236] veth1_macvtap: entered promiscuous mode [ 317.781448][T14253] veth0_vlan: entered promiscuous mode [ 317.792259][T14236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.818682][T14253] veth1_vlan: entered promiscuous mode [ 317.833471][T14236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.864382][T14236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.879547][T14236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.889875][T14236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.894574][T14498] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 317.901583][T14236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.928497][T14498] netlink: 'syz.4.2341': attribute type 2 has an invalid length. [ 317.944213][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2341'. [ 317.973849][T14253] veth0_macvtap: entered promiscuous mode [ 317.986734][T14253] veth1_macvtap: entered promiscuous mode [ 318.022276][T14253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.059271][T14253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.074087][T14253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.111233][T14253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.131682][T14253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.168804][T14253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.321772][T14253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.339457][T14253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.357069][T14253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.366224][T14253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.448370][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.466408][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.610943][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.635812][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.678522][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.694847][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2354'. [ 318.702871][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.774222][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.797399][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.962135][T14521] syzkaller0: entered promiscuous mode [ 318.967965][T14521] syzkaller0: entered allmulticast mode [ 318.976148][T14523] pim6reg0: tun_chr_ioctl cmd 35111 [ 320.663202][ T9900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.751310][ T9900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.142992][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.151791][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.161343][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.170462][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.179698][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.208054][T14532] lo speed is unknown, defaulting to 1000 [ 321.214649][T14532] lo speed is unknown, defaulting to 1000 [ 321.336586][T14532] chnl_net:caif_netlink_parms(): no params data found [ 321.406330][T14532] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.413496][T14532] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.421176][T14532] bridge_slave_0: entered allmulticast mode [ 321.429887][T14532] bridge_slave_0: entered promiscuous mode [ 321.439774][T14532] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.447383][T14532] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.454582][T14532] bridge_slave_1: entered allmulticast mode [ 321.461639][T14532] bridge_slave_1: entered promiscuous mode [ 321.603543][ T9900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.773248][ T9900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.784308][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2360'. [ 321.831808][T14532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.883008][T14532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.005159][T14532] team0: Port device team_slave_0 added [ 322.036813][T14532] team0: Port device team_slave_1 added [ 322.039911][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.053569][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.061961][T14564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 322.075868][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.088561][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.097499][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 322.135571][T14532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.142538][T14532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.183791][T14532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.210662][T14532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.227002][T14532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.261689][T14532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.479612][T14532] hsr_slave_0: entered promiscuous mode [ 322.501451][T14532] hsr_slave_1: entered promiscuous mode [ 322.512742][T14532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.513193][T14578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'. [ 322.521303][T14532] Cannot create hsr debugfs directory [ 322.670378][T14565] lo speed is unknown, defaulting to 1000 [ 322.711523][T14565] lo speed is unknown, defaulting to 1000 [ 322.734507][ T9900] bridge_slave_1: left allmulticast mode [ 322.751651][ T9900] bridge_slave_1: left promiscuous mode [ 322.770732][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.816543][ T9900] bridge_slave_0: left allmulticast mode [ 322.822407][ T9900] bridge_slave_0: left promiscuous mode [ 322.828333][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.236284][ T5837] Bluetooth: hci0: command tx timeout [ 323.313981][ T9900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.333537][ T9900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.349610][ T9900] bond0 (unregistering): Released all slaves [ 323.452930][T14596] pim6reg0: tun_chr_ioctl cmd 35111 [ 323.617450][T14615] sctp: [Deprecated]: syz.1.2376 (pid 14615) Use of int in maxseg socket option. [ 323.617450][T14615] Use struct sctp_assoc_value instead [ 323.714762][T14617] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 323.729989][T14617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2377'. [ 323.785421][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 323.849056][ T9900] hsr_slave_0: left promiscuous mode [ 323.855243][ T9900] hsr_slave_1: left promiscuous mode [ 323.870094][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.895834][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.905697][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.913136][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.942883][ T9900] veth1_macvtap: left promiscuous mode [ 323.948698][ T9900] veth0_macvtap: left promiscuous mode [ 323.954312][ T9900] veth1_vlan: left promiscuous mode [ 323.959870][ T9900] veth0_vlan: left promiscuous mode [ 324.205703][ T5837] Bluetooth: hci3: command tx timeout [ 324.383745][ T9900] team0 (unregistering): Port device team_slave_1 removed [ 324.422615][ T9900] team0 (unregistering): Port device team_slave_0 removed [ 324.920185][T14636] netlink: 'syz.4.2385': attribute type 8 has an invalid length. [ 325.197357][T14642] tipc: Enabling of bearer rejected, already enabled [ 325.206946][T14645] pim6reg0: tun_chr_ioctl cmd 35111 [ 325.259769][T14565] chnl_net:caif_netlink_parms(): no params data found [ 325.315449][ T5837] Bluetooth: hci0: command tx timeout [ 325.456389][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.463518][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.482358][T14565] bridge_slave_0: entered allmulticast mode [ 325.490671][T14565] bridge_slave_0: entered promiscuous mode [ 325.532118][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.539646][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.547167][T14565] bridge_slave_1: entered allmulticast mode [ 325.554249][T14565] bridge_slave_1: entered promiscuous mode [ 325.608947][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.633303][T14532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.651371][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.661655][T14532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.691817][T14532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.724016][T14565] team0: Port device team_slave_0 added [ 325.777400][ T6398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.811036][T14532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.832945][T14565] team0: Port device team_slave_1 added [ 325.903495][ T6398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.996227][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.003255][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.035233][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.074614][ T6398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.093960][T14674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2391'. [ 326.104200][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.111376][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.137571][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.177793][ T6398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.271194][T14565] hsr_slave_0: entered promiscuous mode [ 326.283176][ T5837] Bluetooth: hci3: command tx timeout [ 326.290453][T14565] hsr_slave_1: entered promiscuous mode [ 326.297157][T14565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.304725][T14565] Cannot create hsr debugfs directory [ 326.386209][T14682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 326.395653][T14682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2394'. [ 326.404726][T14682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2394'. [ 326.485062][ T6398] bridge_slave_1: left allmulticast mode [ 326.492987][ T6398] bridge_slave_1: left promiscuous mode [ 326.499464][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.510494][ T6398] bridge_slave_0: left allmulticast mode [ 326.516549][ T6398] bridge_slave_0: left promiscuous mode [ 326.522383][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.898991][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.910424][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.920580][ T6398] bond0 (unregistering): Released all slaves [ 327.109032][T14693] pim6reg0: tun_chr_ioctl cmd 35111 [ 327.162255][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 327.190148][T14532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.218541][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 327.401540][ T6398] hsr_slave_0: left promiscuous mode [ 327.407552][ T5837] Bluetooth: hci0: command tx timeout [ 327.430172][ T6398] hsr_slave_1: left promiscuous mode [ 327.437255][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.446106][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.458980][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.471636][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.498164][ T6398] veth1_macvtap: left promiscuous mode [ 327.503824][ T6398] veth0_macvtap: left promiscuous mode [ 327.509594][ T6398] veth1_vlan: left promiscuous mode [ 327.514991][ T6398] veth0_vlan: left promiscuous mode [ 327.646216][T14718] netlink: 'syz.2.2404': attribute type 4 has an invalid length. [ 327.702025][T14719] netlink: 'syz.2.2404': attribute type 4 has an invalid length. [ 327.957251][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 328.000881][ T6398] team0 (unregistering): Port device team_slave_0 removed [ 328.359734][ T5837] Bluetooth: hci3: command tx timeout [ 328.511195][T14532] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.593144][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.600361][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.610302][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.617512][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.898496][T14565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.927868][T14565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.958718][T14565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.980048][T14565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.129065][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.183929][T14532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.206338][T14565] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.216131][T14753] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 329.224235][T14753] NCSI netlink: No device for ifindex 0 [ 329.240681][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.247958][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.270165][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.277429][ T6398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.317819][T14755] netlink: 'syz.4.2414': attribute type 1 has an invalid length. [ 329.410733][T14755] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 329.443064][T14565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.477282][ T5837] Bluetooth: hci0: command tx timeout [ 329.543819][T14532] veth0_vlan: entered promiscuous mode [ 329.595550][T14532] veth1_vlan: entered promiscuous mode [ 329.688476][T14532] veth0_macvtap: entered promiscuous mode [ 329.708998][T14532] veth1_macvtap: entered promiscuous mode [ 329.747600][T14532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.791942][T14532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.810061][T14766] pim6reg0: tun_chr_ioctl cmd 35111 [ 329.839970][T14532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.860072][T14532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.891858][T14532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.908917][T14532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.018593][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.133026][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.164581][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.229541][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.242726][T14565] veth0_vlan: entered promiscuous mode [ 330.257362][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.309386][T14565] veth1_vlan: entered promiscuous mode [ 330.358763][T14776] lo speed is unknown, defaulting to 1000 [ 330.399443][T14776] lo speed is unknown, defaulting to 1000 [ 330.408620][T14565] veth0_macvtap: entered promiscuous mode [ 330.435909][ T5837] Bluetooth: hci3: command tx timeout [ 330.457968][T14565] veth1_macvtap: entered promiscuous mode [ 330.481953][T14785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2420'. [ 330.650968][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 330.696539][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.707781][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.719252][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.730262][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.740820][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.752976][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.977573][T14565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.020465][T14565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.039786][T14565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.048940][T14565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.276074][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.284189][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.310853][ T6398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.320261][ T6398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.343479][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.484462][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.572003][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.659528][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.883545][ T12] bridge_slave_1: left allmulticast mode [ 331.889871][ T12] bridge_slave_1: left promiscuous mode [ 331.895844][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.904723][ T12] bridge_slave_0: left allmulticast mode [ 331.911991][ T12] bridge_slave_0: left promiscuous mode [ 331.917854][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.207700][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.219959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.231120][ T12] bond0 (unregistering): Released all slaves [ 332.574455][ T12] hsr_slave_0: left promiscuous mode [ 332.581211][ T12] hsr_slave_1: left promiscuous mode [ 332.588805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.596579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.604967][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.614833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.636263][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.650068][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.655971][ T12] veth1_macvtap: left promiscuous mode [ 332.659698][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.662573][ T12] veth0_macvtap: left promiscuous mode [ 332.674940][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.675942][ T12] veth1_vlan: left promiscuous mode [ 332.682980][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.687571][ T12] veth0_vlan: left promiscuous mode [ 333.087503][T14812] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2425'. [ 333.124602][T14813] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2425'. [ 333.232807][ T12] team0 (unregistering): Port device team_slave_1 removed [ 333.319248][ T12] team0 (unregistering): Port device team_slave_0 removed [ 333.486256][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.495617][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.505826][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.518365][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.526777][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.851718][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 333.861289][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 333.956577][T14823] lo speed is unknown, defaulting to 1000 [ 333.964681][T14820] lo speed is unknown, defaulting to 1000 [ 333.971524][T14823] lo speed is unknown, defaulting to 1000 [ 333.991512][T14804] lo speed is unknown, defaulting to 1000 [ 333.992178][T14820] lo speed is unknown, defaulting to 1000 [ 334.048181][T14804] lo speed is unknown, defaulting to 1000 [ 334.524521][T14804] chnl_net:caif_netlink_parms(): no params data found [ 334.551392][T14823] chnl_net:caif_netlink_parms(): no params data found [ 334.651156][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.672134][T14853] netlink: 'syz.2.2433': attribute type 8 has an invalid length. [ 334.706006][T14850] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 334.713782][T14850] netlink: 'syz.4.2432': attribute type 2 has an invalid length. [ 334.726208][T14850] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 334.734053][T14850] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.2432'. [ 334.756576][ T5845] Bluetooth: hci0: command tx timeout [ 334.833797][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.928846][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.023187][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 335.051007][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.066848][T14804] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.076487][T14804] bridge_slave_0: entered allmulticast mode [ 335.098672][T14804] bridge_slave_0: entered promiscuous mode [ 335.107261][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.124616][T14804] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.132166][T14804] bridge_slave_1: entered allmulticast mode [ 335.140998][T14804] bridge_slave_1: entered promiscuous mode [ 335.168472][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.183748][T14823] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.191999][T14823] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.201308][T14823] bridge_slave_0: entered allmulticast mode [ 335.210384][T14823] bridge_slave_0: entered promiscuous mode [ 335.241233][T14823] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.253403][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.265059][T14823] bridge_slave_1: entered allmulticast mode [ 335.278996][T14823] bridge_slave_1: entered promiscuous mode [ 335.328955][T14804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.359635][T14823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.412161][T14804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.492157][T14823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.555893][ T5845] Bluetooth: hci3: command tx timeout [ 335.572345][T14804] team0: Port device team_slave_0 added [ 335.595848][T14823] team0: Port device team_slave_0 added [ 335.607708][T14804] team0: Port device team_slave_1 added [ 335.642517][T14823] team0: Port device team_slave_1 added [ 335.736026][T14823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.743006][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.770158][T14823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.789746][T14804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.803001][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.829636][T14804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.842414][T14804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.850225][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.877074][T14804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.907062][T14823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.914314][T14823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.941108][T14823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.994533][T14888] lo speed is unknown, defaulting to 1000 [ 336.020456][ T12] bridge_slave_1: left allmulticast mode [ 336.026885][ T12] bridge_slave_1: left promiscuous mode [ 336.032701][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.046947][ T12] bridge_slave_0: left allmulticast mode [ 336.052936][ T12] bridge_slave_0: left promiscuous mode [ 336.059665][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.471432][T14898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2443'. [ 336.534909][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.556086][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.568310][ T12] bond0 (unregistering): Released all slaves [ 336.594820][T14888] lo speed is unknown, defaulting to 1000 [ 336.602325][T14823] hsr_slave_0: entered promiscuous mode [ 336.613130][T14823] hsr_slave_1: entered promiscuous mode [ 336.623370][T14823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.643036][T14823] Cannot create hsr debugfs directory [ 336.824504][T14804] hsr_slave_0: entered promiscuous mode [ 336.831626][T14804] hsr_slave_1: entered promiscuous mode [ 336.837399][ T5845] Bluetooth: hci0: command tx timeout [ 336.843614][T14804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.851288][T14804] Cannot create hsr debugfs directory [ 336.941923][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2447'. [ 337.033065][ T12] hsr_slave_0: left promiscuous mode [ 337.039213][ T12] hsr_slave_1: left promiscuous mode [ 337.045125][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.053420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.062525][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.070655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.092735][ T12] veth1_macvtap: left promiscuous mode [ 337.098498][ T12] veth0_macvtap: left promiscuous mode [ 337.104110][ T12] veth1_vlan: left promiscuous mode [ 337.109649][ T12] veth0_vlan: left promiscuous mode [ 337.582111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 337.623935][ T12] team0 (unregistering): Port device team_slave_0 removed [ 337.646566][ T5845] Bluetooth: hci3: command tx timeout [ 338.126458][T14915] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 338.134847][T14915] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 338.143208][T14915] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 338.151853][T14915] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 338.542771][T14936] ip6gre1: entered promiscuous mode [ 338.555661][T14936] netlink: 'syz.2.2456': attribute type 21 has an invalid length. [ 338.622065][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 338.644559][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 338.653876][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 338.663320][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 338.677334][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2457'. [ 338.915737][ T5845] Bluetooth: hci0: command tx timeout [ 338.963111][T14823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.973835][T14823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.986004][T14823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.009549][T14823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.064462][T14804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.077707][T14804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.103914][T14804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 339.135042][T14804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.422088][ T6398] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 339.499258][T14823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.520478][ T6398] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 339.573634][T14804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.617280][T14823] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.632535][ T6398] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 339.712518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.719910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.728622][ T5845] Bluetooth: hci3: command tx timeout [ 339.769898][T14804] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.789882][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.797132][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.823534][ T6398] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 339.903263][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.910498][ T9900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.940445][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.947652][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.234393][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.246699][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.255048][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.264588][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.275227][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.995428][ T5837] Bluetooth: hci0: command tx timeout [ 341.188187][ T6398] bond0 (unregistering): Released all slaves [ 341.282198][T14989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2471'. [ 341.386418][ T6398] bond1 (unregistering): Released all slaves [ 341.412377][ T6398] bond2 (unregistering): Released all slaves [ 341.532100][ T6398] bond3 (unregistering): Released all slaves [ 341.549589][ T6398] bond4 (unregistering): Released all slaves [ 341.566662][ T6398] bond5 (unregistering): Released all slaves [ 341.649678][T14823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.706616][T14970] lo speed is unknown, defaulting to 1000 [ 341.719406][ T6398] : left promiscuous mode [ 341.761020][T15009] Bluetooth: MGMT ver 1.23 [ 341.769691][T14970] lo speed is unknown, defaulting to 1000 [ 341.776106][T14804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.795725][ T5837] Bluetooth: hci3: command tx timeout [ 341.822454][ T6398] tipc: Disabling bearer [ 341.843674][ T6398] tipc: Left network mode [ 342.104591][T14823] veth0_vlan: entered promiscuous mode [ 342.124340][T14804] veth0_vlan: entered promiscuous mode [ 342.187293][T14804] veth1_vlan: entered promiscuous mode [ 342.194628][T14970] chnl_net:caif_netlink_parms(): no params data found [ 342.217618][T14823] veth1_vlan: entered promiscuous mode [ 342.289151][ T6398] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode [ 342.357644][ T5837] Bluetooth: hci2: command tx timeout [ 342.427572][T14970] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.439367][T14970] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.448342][T14970] bridge_slave_0: entered allmulticast mode [ 342.456536][T14970] bridge_slave_0: entered promiscuous mode [ 342.477375][ T6398] hsr_slave_0: left promiscuous mode [ 342.483220][ T6398] hsr_slave_1: left promiscuous mode [ 343.076609][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 343.260346][T14804] veth0_macvtap: entered promiscuous mode [ 343.270445][T14970] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.280318][T14970] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.292683][T14970] bridge_slave_1: entered allmulticast mode [ 343.299854][T14970] bridge_slave_1: entered promiscuous mode [ 343.306456][ T10] lo speed is unknown, defaulting to 1000 [ 343.315714][ T10] infiniband syz1: ib_query_port failed (-19) [ 343.342694][T14804] veth1_macvtap: entered promiscuous mode [ 343.350619][T14823] veth0_macvtap: entered promiscuous mode [ 343.379295][T14823] veth1_macvtap: entered promiscuous mode [ 343.403223][T14970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.428128][T14970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.523197][T14970] team0: Port device team_slave_0 added [ 343.560813][T14804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.588951][T14970] team0: Port device team_slave_1 added [ 343.658093][T14970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.665092][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.695184][T14970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.709726][T14804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.725567][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 343.734579][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 343.760184][T14970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.775410][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.808818][T14970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.828734][T14804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.844533][T14804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.867473][T14804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.867507][T15048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2489'. [ 343.876764][T14804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.903354][T14823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.917078][T14823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.932567][T14823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.088866][T14970] hsr_slave_0: entered promiscuous mode [ 344.097080][T14970] hsr_slave_1: entered promiscuous mode [ 344.103488][T14970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.113420][T14970] Cannot create hsr debugfs directory [ 344.121423][T14823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.133330][T14823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.150966][T14823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.159934][T15063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 344.182289][ T6398] IPVS: stop unused estimator thread 0... [ 344.223252][T14823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.238233][T14823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.247244][T14823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.257932][T14823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.368619][T15062] lo speed is unknown, defaulting to 1000 [ 344.437801][ T5837] Bluetooth: hci2: command tx timeout [ 344.557208][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.565080][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.608382][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.645465][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.798386][ T6398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.817511][ T6398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.858683][ T6398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.874334][ T6398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.074303][T14970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.087110][T14970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.099498][T14970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.146486][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.179685][T14970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.250531][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.347358][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.500481][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.525469][T14970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.566025][T14970] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.584989][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.592205][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.634849][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.642054][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.743128][ T62] bridge_slave_1: left allmulticast mode [ 345.750768][ T62] bridge_slave_1: left promiscuous mode [ 345.757159][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.767172][ T62] bridge_slave_0: left allmulticast mode [ 345.772847][ T62] bridge_slave_0: left promiscuous mode [ 345.779551][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.839905][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.850959][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.860204][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.871577][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.885565][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.127089][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.137982][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.147871][ T62] bond0 (unregistering): Released all slaves [ 346.209176][T15073] lo speed is unknown, defaulting to 1000 [ 346.516043][ T5837] Bluetooth: hci2: command tx timeout [ 346.658890][T15094] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 346.684939][T15094] netlink: 'syz.4.2499': attribute type 3 has an invalid length. [ 346.723727][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 346.740583][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.740839][ T62] hsr_slave_0: left promiscuous mode [ 346.758401][ T62] hsr_slave_1: left promiscuous mode [ 346.759790][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.778158][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.778981][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.799103][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.801836][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.815166][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.818069][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.830029][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.859240][ T62] veth1_macvtap: left promiscuous mode [ 346.864800][ T62] veth0_macvtap: left promiscuous mode [ 346.870498][ T62] veth1_vlan: left promiscuous mode [ 346.876208][ T62] veth0_vlan: left promiscuous mode [ 347.203026][T15100] netlink: 'syz.2.2500': attribute type 33 has an invalid length. [ 347.216782][T15100] sctp: [Deprecated]: syz.2.2500 (pid 15100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.216782][T15100] Use struct sctp_sack_info instead [ 347.322472][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 347.331825][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 347.340956][T15102] netlink: 'syz.2.2501': attribute type 7 has an invalid length. [ 347.362255][ T62] team0 (unregistering): Port device team_slave_1 removed [ 347.405127][ T62] team0 (unregistering): Port device team_slave_0 removed [ 347.814694][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.832083][T15073] chnl_net:caif_netlink_parms(): no params data found [ 347.955411][T15096] lo speed is unknown, defaulting to 1000 [ 347.956016][ T5837] Bluetooth: hci0: command tx timeout [ 347.989114][T15104] tap0: tun_chr_ioctl cmd 1074025677 [ 347.994615][T15104] tap0: linktype set to 769 [ 348.049704][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.057111][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.065015][T15073] bridge_slave_0: entered allmulticast mode [ 348.072665][T15073] bridge_slave_0: entered promiscuous mode [ 348.103868][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.111255][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.121700][T15073] bridge_slave_1: entered allmulticast mode [ 348.129009][T15073] bridge_slave_1: entered promiscuous mode [ 348.179083][T15073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.224674][T15073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.310877][T15073] team0: Port device team_slave_0 added [ 348.323629][T15073] team0: Port device team_slave_1 added [ 348.384612][T15073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.392090][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.419286][T15073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.456751][T14970] veth0_vlan: entered promiscuous mode [ 348.463317][T15073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.471613][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.498625][T15073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.600652][ T5837] Bluetooth: hci2: command tx timeout [ 348.612907][ T9900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.636967][T15073] hsr_slave_0: entered promiscuous mode [ 348.643215][T15073] hsr_slave_1: entered promiscuous mode [ 348.649485][T15073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.658465][T15073] Cannot create hsr debugfs directory [ 348.664427][T14970] veth1_vlan: entered promiscuous mode [ 348.682723][T15096] chnl_net:caif_netlink_parms(): no params data found [ 348.724704][ T9900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.848505][ T9900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.915865][ T5837] Bluetooth: hci3: command tx timeout [ 348.934910][ T9900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.976902][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.984842][T15096] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.993803][T15096] bridge_slave_0: entered allmulticast mode [ 349.003924][T15096] bridge_slave_0: entered promiscuous mode [ 349.024773][T15096] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.032779][T15096] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.041141][T15096] bridge_slave_1: entered allmulticast mode [ 349.049883][T15096] bridge_slave_1: entered promiscuous mode [ 349.115840][T15096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.125653][T14970] veth0_macvtap: entered promiscuous mode [ 349.138341][T15096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.212038][T14970] veth1_macvtap: entered promiscuous mode [ 349.270881][T15096] team0: Port device team_slave_0 added [ 349.280791][T15096] team0: Port device team_slave_1 added [ 349.369735][T15096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.377471][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.407656][T15096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.439795][T15096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.447782][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.474191][T15096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.485815][ T9900] bridge_slave_1: left allmulticast mode [ 349.491579][ T9900] bridge_slave_1: left promiscuous mode [ 349.502930][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.513427][ T9900] bridge_slave_0: left allmulticast mode [ 349.519502][ T9900] bridge_slave_0: left promiscuous mode [ 349.525534][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.935177][ T9900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.947491][ T9900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.958244][ T9900] bond0 (unregistering): Released all slaves [ 350.035783][ T5837] Bluetooth: hci0: command tx timeout [ 350.086952][T15096] hsr_slave_0: entered promiscuous mode [ 350.094480][T15096] hsr_slave_1: entered promiscuous mode [ 350.101398][T15096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.111996][T15096] Cannot create hsr debugfs directory [ 350.156710][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.169375][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.181566][T14970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.240365][T15145] Bluetooth: MGMT ver 1.23 [ 350.257451][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.269651][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.281550][T14970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.344609][T14970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.353564][T14970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.363800][T14970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.372650][T14970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.430160][ T9900] hsr_slave_0: left promiscuous mode [ 350.442965][ T9900] hsr_slave_1: left promiscuous mode [ 350.450690][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.459665][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.468169][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.475795][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.501023][ T9900] veth1_macvtap: left promiscuous mode [ 350.506826][ T9900] veth0_macvtap: left promiscuous mode [ 350.512421][ T9900] veth1_vlan: left promiscuous mode [ 350.517943][ T9900] veth0_vlan: left promiscuous mode [ 350.824570][T15158] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2516'. [ 350.999254][ T5845] Bluetooth: hci3: command tx timeout [ 351.073668][ T9900] team0 (unregistering): Port device team_slave_1 removed [ 351.113068][ T9900] team0 (unregistering): Port device team_slave_0 removed [ 351.573854][T15073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.638773][T15073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.659334][T15073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.676858][T15073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.813677][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.832056][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.886713][ T6398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.896433][ T6398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.932075][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.958673][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.973771][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.980944][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.026031][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.033168][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.115611][ T5845] Bluetooth: hci0: command tx timeout [ 352.181278][T15096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.199777][T15096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.211012][T15096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.238100][T15096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.276677][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 352.335137][ T6398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.414093][T15073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.473040][ T6398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.551651][ T6398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.643220][ T6398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.770198][T15073] veth0_vlan: entered promiscuous mode [ 352.830323][T15096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.858154][T15073] veth1_vlan: entered promiscuous mode [ 352.983486][T15096] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.048867][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.056103][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.077316][ T5837] Bluetooth: hci3: command tx timeout [ 353.083730][T15193] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 353.085171][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.098702][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.136746][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.145203][T15193] bond0: (slave team0): Enslaving as an active interface with an up link [ 353.165727][ T6398] bridge_slave_1: left allmulticast mode [ 353.171918][ T6398] bridge_slave_1: left promiscuous mode [ 353.180166][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.208448][ T6398] bridge_slave_0: left allmulticast mode [ 353.224444][ T6398] bridge_slave_0: left promiscuous mode [ 353.230569][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.305519][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.318184][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.337075][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.356530][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.365556][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.872903][ T6398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.883666][ T6398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.893984][ T6398] bond0 (unregistering): Released all slaves [ 354.033581][T15073] veth0_macvtap: entered promiscuous mode [ 354.058202][T15196] lo speed is unknown, defaulting to 1000 [ 354.149331][T15073] veth1_macvtap: entered promiscuous mode [ 354.200741][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 354.252944][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.266039][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.286530][T15073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.343820][ T6398] hsr_slave_0: left promiscuous mode [ 354.352095][ T6398] hsr_slave_1: left promiscuous mode [ 354.360343][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.369564][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.378210][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.385799][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.404569][ T6398] veth1_macvtap: left promiscuous mode [ 354.410383][ T6398] veth0_macvtap: left promiscuous mode [ 354.416135][ T6398] veth1_vlan: left promiscuous mode [ 354.421399][ T6398] veth0_vlan: left promiscuous mode [ 354.806987][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 354.849005][ T6398] team0 (unregistering): Port device team_slave_0 removed [ 355.156774][ T5837] Bluetooth: hci3: command tx timeout [ 355.310412][T15073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.357885][T15073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.372859][T15073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.381711][T15073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.392543][T15073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.400355][ T5837] Bluetooth: hci2: command tx timeout [ 355.491900][T15096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.751678][T15196] chnl_net:caif_netlink_parms(): no params data found [ 355.866902][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 355.913519][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.924490][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.042307][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.054251][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.063752][T15196] bridge_slave_0: entered allmulticast mode [ 356.071288][T15196] bridge_slave_0: entered promiscuous mode [ 356.080591][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.088507][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2539'. [ 356.088839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.101576][T15096] veth0_vlan: entered promiscuous mode [ 356.112280][T15259] nbd: must specify a device to reconfigure [ 356.119536][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.129544][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.137088][T15196] bridge_slave_1: entered allmulticast mode [ 356.144866][T15196] bridge_slave_1: entered promiscuous mode [ 356.177822][T15096] veth1_vlan: entered promiscuous mode [ 356.281870][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.324840][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.382639][T15196] team0: Port device team_slave_0 added [ 356.398657][T15196] team0: Port device team_slave_1 added [ 356.462088][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.471444][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.500390][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.514151][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.524405][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.553338][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.612689][ T9900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.648445][T15096] veth0_macvtap: entered promiscuous mode [ 356.678763][T15096] veth1_macvtap: entered promiscuous mode [ 356.743599][ T9900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.834946][T15196] hsr_slave_0: entered promiscuous mode [ 356.843748][T15196] hsr_slave_1: entered promiscuous mode [ 356.850899][T15196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.859137][T15196] Cannot create hsr debugfs directory [ 356.878675][ T9900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.897983][T15096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.908768][T15096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.920542][T15096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.931404][T15096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.944192][T15096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.955200][T15096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.993045][ T9900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.026553][T15096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.036337][T15096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.045029][T15096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.054758][T15096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.194607][ T9900] bridge_slave_1: left allmulticast mode [ 357.202300][ T9900] bridge_slave_1: left promiscuous mode [ 357.208753][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.219390][ T9900] bridge_slave_0: left allmulticast mode [ 357.225030][ T9900] bridge_slave_0: left promiscuous mode [ 357.231252][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.484287][ T5837] Bluetooth: hci2: command tx timeout [ 357.529470][ T9900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.540326][ T9900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.550597][ T9900] bond0 (unregistering): Released all slaves [ 357.611942][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.628701][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.679240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.689804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.807585][ T9900] hsr_slave_0: left promiscuous mode [ 357.813460][ T9900] hsr_slave_1: left promiscuous mode [ 357.820673][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.828223][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.837705][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.845198][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.865658][ T9900] veth1_macvtap: left promiscuous mode [ 357.871197][ T9900] veth0_macvtap: left promiscuous mode [ 357.877443][ T9900] veth1_vlan: left promiscuous mode [ 357.882714][ T9900] veth0_vlan: left promiscuous mode [ 358.429648][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.440891][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.449800][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.460391][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.460854][ T9900] team0 (unregistering): Port device team_slave_1 removed [ 358.478109][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.529522][ T9900] team0 (unregistering): Port device team_slave_0 removed [ 358.891522][T15273] lo speed is unknown, defaulting to 1000 [ 359.196760][T15196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.208868][T15196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.220723][T15196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.232464][T15196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.332569][T15273] chnl_net:caif_netlink_parms(): no params data found [ 359.379943][ T9900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.415224][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.426562][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.429275][T15196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.442389][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.451701][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.466403][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.497985][T15196] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.551275][ T9900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.562036][ T5845] Bluetooth: hci2: command tx timeout [ 359.604386][T15273] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.611711][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.622335][T15273] bridge_slave_0: entered allmulticast mode [ 359.629619][T15273] bridge_slave_0: entered promiscuous mode [ 359.638759][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.646385][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.653682][T15273] bridge_slave_1: entered allmulticast mode [ 359.661466][T15273] bridge_slave_1: entered promiscuous mode [ 359.670209][T15285] lo speed is unknown, defaulting to 1000 [ 359.688917][ T9900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.714484][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.721661][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.758886][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.766111][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.804286][ T9900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.822399][T15273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.852016][T15273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.932533][T15292] vlan3: entered promiscuous mode [ 359.954294][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2545'. [ 360.009171][T15293] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2545'. [ 360.023541][T15273] team0: Port device team_slave_0 added [ 360.066483][T15273] team0: Port device team_slave_1 added [ 360.172106][T15273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.179310][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.206646][T15273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.234188][T15273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.241301][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.267473][T15273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.307947][ T9900] bridge_slave_1: left allmulticast mode [ 360.314838][ T9900] bridge_slave_1: left promiscuous mode [ 360.322731][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.334152][ T9900] bridge_slave_0: left allmulticast mode [ 360.342784][ T9900] bridge_slave_0: left promiscuous mode [ 360.350208][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.515762][ T5845] Bluetooth: hci0: command tx timeout [ 360.698713][ T9900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.709856][ T9900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.720132][ T9900] bond0 (unregistering): Released all slaves [ 361.005169][T15273] hsr_slave_0: entered promiscuous mode [ 361.026201][T15273] hsr_slave_1: entered promiscuous mode [ 361.033297][T15273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.042351][T15273] Cannot create hsr debugfs directory [ 361.146140][T15285] chnl_net:caif_netlink_parms(): no params data found [ 361.235101][ T9900] hsr_slave_0: left promiscuous mode [ 361.246631][ T9900] hsr_slave_1: left promiscuous mode [ 361.252590][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.261035][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.269050][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.276600][ T9900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.297183][ T9900] veth1_macvtap: left promiscuous mode [ 361.302723][ T9900] veth0_macvtap: left promiscuous mode [ 361.309649][ T9900] veth1_vlan: left promiscuous mode [ 361.314997][ T9900] veth0_vlan: left promiscuous mode [ 361.555587][ T5845] Bluetooth: hci3: command tx timeout [ 361.635520][ T5845] Bluetooth: hci2: command tx timeout [ 361.688210][ T9900] team0 (unregistering): Port device team_slave_1 removed [ 361.725039][ T9900] team0 (unregistering): Port device team_slave_0 removed [ 362.284787][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.294564][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.302041][T15285] bridge_slave_0: entered allmulticast mode [ 362.310255][T15285] bridge_slave_0: entered promiscuous mode [ 362.320434][T15196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.334556][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.342118][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.356978][T15285] bridge_slave_1: entered allmulticast mode [ 362.364039][T15285] bridge_slave_1: entered promiscuous mode [ 362.415612][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.439904][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.482345][T15285] team0: Port device team_slave_0 added [ 362.503257][T15285] team0: Port device team_slave_1 added [ 362.553364][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.560515][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.588787][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.599420][ T5845] Bluetooth: hci0: command tx timeout [ 362.611128][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.618201][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.644436][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.706253][T15285] hsr_slave_0: entered promiscuous mode [ 362.712710][T15285] hsr_slave_1: entered promiscuous mode [ 362.720857][T15285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.729965][T15285] Cannot create hsr debugfs directory [ 362.752190][T15196] veth0_vlan: entered promiscuous mode [ 362.794523][T15196] veth1_vlan: entered promiscuous mode [ 362.962457][T15273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.975226][T15273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.991078][T15273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.120164][T15273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.147031][T15347] macvlan1: entered promiscuous mode [ 363.153521][T15347] ipvlan0: entered promiscuous mode [ 363.160848][T15347] ipvlan0: left promiscuous mode [ 363.166316][T15347] macvlan1: left promiscuous mode [ 363.188311][T15196] veth0_macvtap: entered promiscuous mode [ 363.248035][T15196] veth1_macvtap: entered promiscuous mode [ 363.315693][T15353] pim6reg0: tun_chr_ioctl cmd 35111 [ 363.331887][T15196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.372298][T15196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.386869][T15196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.402593][T15196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.421241][T15196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.431972][T15196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.645870][ T5845] Bluetooth: hci3: command tx timeout [ 363.723872][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.730699][T15273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.751201][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.807828][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.822411][T15285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.832558][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 363.844678][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.855836][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.859377][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.865833][T15372] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2566'. [ 363.870307][ T9900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.911000][T15373] syzkaller0: entered promiscuous mode [ 363.916703][T15373] syzkaller0: entered allmulticast mode [ 363.923181][T15285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.952055][T15285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.971548][T15285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.007631][T15370] lo speed is unknown, defaulting to 1000 [ 364.020026][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.027217][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.679212][ T5845] Bluetooth: hci0: command tx timeout [ 364.830279][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.849886][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.858669][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.873541][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.885826][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.719986][ T5845] Bluetooth: hci3: command tx timeout [ 365.891168][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.952256][T15381] lo speed is unknown, defaulting to 1000 [ 365.978912][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.033448][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.061634][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 366.076376][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.152525][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.250761][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.280824][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.300839][T15401] openvswitch: netlink: Key type 5136 is out of range max 32 [ 366.352485][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.359689][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.396893][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.404014][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.554663][T15285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.671093][T15273] veth0_vlan: entered promiscuous mode [ 366.755411][ T5845] Bluetooth: hci0: command tx timeout [ 366.819566][T15273] veth1_vlan: entered promiscuous mode [ 366.859977][T15381] chnl_net:caif_netlink_parms(): no params data found [ 366.943544][T15412] pim6reg0: tun_chr_ioctl cmd 35111 [ 366.980041][ T12] bridge_slave_1: left allmulticast mode [ 366.998851][ T5845] Bluetooth: hci2: command tx timeout [ 367.006356][ T12] bridge_slave_1: left promiscuous mode [ 367.015666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.029177][ T12] bridge_slave_0: left allmulticast mode [ 367.034966][ T12] bridge_slave_0: left promiscuous mode [ 367.040989][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.562985][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.577591][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.588306][ T12] bond0 (unregistering): Released all slaves [ 367.790517][T15273] veth0_macvtap: entered promiscuous mode [ 367.797151][ T5845] Bluetooth: hci3: command tx timeout [ 367.841024][T15273] veth1_macvtap: entered promiscuous mode [ 367.848289][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2577'. [ 367.882292][T15425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2577'. [ 367.910537][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.918536][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.926127][T15381] bridge_slave_0: entered allmulticast mode [ 367.934141][T15381] bridge_slave_0: entered promiscuous mode [ 367.974165][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.982111][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.993703][T15381] bridge_slave_1: entered allmulticast mode [ 368.004168][T15381] bridge_slave_1: entered promiscuous mode [ 368.031493][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.092744][ T12] hsr_slave_0: left promiscuous mode [ 368.100313][ T12] hsr_slave_1: left promiscuous mode [ 368.118171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.125910][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.138708][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.147947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.176481][ T12] veth1_macvtap: left promiscuous mode [ 368.182156][ T12] veth0_macvtap: left promiscuous mode [ 368.188157][ T12] veth1_vlan: left promiscuous mode [ 368.193556][ T12] veth0_vlan: left promiscuous mode [ 368.740166][ T12] team0 (unregistering): Port device team_slave_1 removed [ 368.786264][ T12] team0 (unregistering): Port device team_slave_0 removed [ 369.085522][ T5845] Bluetooth: hci2: command tx timeout [ 369.409810][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.436988][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.479180][T15273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.565120][T15381] team0: Port device team_slave_0 added [ 369.589578][T15273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.618555][T15381] team0: Port device team_slave_1 added [ 369.630408][T15273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.639866][T15273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.648839][T15273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.659271][T15273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.750740][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.762588][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.791606][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.823622][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.831524][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.860067][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.902938][T15285] veth0_vlan: entered promiscuous mode [ 369.948403][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2583'. [ 370.001697][T15381] hsr_slave_0: entered promiscuous mode [ 370.009387][T15381] hsr_slave_1: entered promiscuous mode [ 370.015990][T15381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.023564][T15381] Cannot create hsr debugfs directory [ 370.029660][T15285] veth1_vlan: entered promiscuous mode [ 370.134734][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2584'. [ 370.302708][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.315413][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.328300][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 370.394660][T15458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2588'. [ 370.424687][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.449046][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.479409][T15285] veth0_macvtap: entered promiscuous mode [ 370.507720][T15462] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2590'. [ 370.531806][T15285] veth1_macvtap: entered promiscuous mode [ 370.647452][T15465] sctp: [Deprecated]: syz.2.2591 (pid 15465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.647452][T15465] Use struct sctp_sack_info instead [ 370.648522][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.676572][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.689940][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.738504][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 370.750226][T15465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2591'. [ 371.165494][ T5845] Bluetooth: hci2: command tx timeout [ 372.149198][T15285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.159888][T15285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.171237][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.232038][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.250852][T15285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.260765][T15285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.270854][T15285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.279767][T15285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.318461][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.403088][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.461080][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.471950][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.501082][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.502901][T15381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.516810][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.528276][T15381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.540851][T15381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.550316][T15381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.644595][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.681941][T15381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.702529][T15381] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.713891][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.721054][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.735617][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.742783][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.873467][ T12] bridge_slave_1: left allmulticast mode [ 372.891801][ T12] bridge_slave_1: left promiscuous mode [ 372.917198][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.951075][ T12] bridge_slave_0: left allmulticast mode [ 372.965494][ T12] bridge_slave_0: left promiscuous mode [ 372.971299][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.235494][ T5845] Bluetooth: hci2: command tx timeout [ 373.319313][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.330046][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.338359][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.348755][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.359303][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.518969][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.529740][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.539690][ T12] bond0 (unregistering): Released all slaves [ 373.649657][T15477] lo speed is unknown, defaulting to 1000 [ 373.823400][T15381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.872474][ T12] hsr_slave_0: left promiscuous mode [ 373.879220][ T12] hsr_slave_1: left promiscuous mode [ 373.889277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.899162][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.909508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.917027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.936090][ T12] veth1_macvtap: left promiscuous mode [ 373.941890][ T12] veth0_macvtap: left promiscuous mode [ 373.947684][ T12] veth1_vlan: left promiscuous mode [ 373.952949][ T12] veth0_vlan: left promiscuous mode [ 374.442302][ T12] team0 (unregistering): Port device team_slave_1 removed [ 374.477994][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.489524][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.498628][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.508472][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.509491][ T12] team0 (unregistering): Port device team_slave_0 removed [ 374.524470][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.929184][T15477] chnl_net:caif_netlink_parms(): no params data found [ 374.971854][T15488] lo speed is unknown, defaulting to 1000 [ 375.038893][T15381] veth0_vlan: entered promiscuous mode [ 375.051018][T15381] veth1_vlan: entered promiscuous mode [ 375.085673][T15491] lo speed is unknown, defaulting to 1000 [ 375.133120][T15497] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2596'. [ 375.150861][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 375.153038][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.172977][T15497] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 375.173270][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.189457][T15477] bridge_slave_0: entered allmulticast mode [ 375.198170][T15477] bridge_slave_0: entered promiscuous mode [ 375.245198][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.261222][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.268970][T15477] bridge_slave_1: entered allmulticast mode [ 375.287823][T15477] bridge_slave_1: entered promiscuous mode [ 375.398735][ T5837] Bluetooth: hci0: command tx timeout [ 375.407260][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.417365][T15500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 375.419798][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.493535][T15477] team0: Port device team_slave_0 added [ 375.517903][T15381] veth0_macvtap: entered promiscuous mode [ 375.544082][T15477] team0: Port device team_slave_1 added [ 375.562291][T15381] veth1_macvtap: entered promiscuous mode [ 375.639252][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.654299][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.683270][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.714935][T15381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.727294][T15381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.740905][T15381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.749110][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.756579][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.783400][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.800937][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 375.824805][T15381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.837490][T15381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.847905][T15511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2600'. [ 375.858532][T15381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.944905][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.966483][T15381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.977116][T15381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.985864][T15381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.994587][T15381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.098929][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.143907][T15477] hsr_slave_0: entered promiscuous mode [ 376.153711][T15477] hsr_slave_1: entered promiscuous mode [ 376.162621][T15477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.170596][T15477] Cannot create hsr debugfs directory [ 376.184114][T15491] chnl_net:caif_netlink_parms(): no params data found [ 376.212702][T15522] netlink: 'syz.2.2604': attribute type 3 has an invalid length. [ 376.224423][T15522] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2604'. [ 376.240844][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.291851][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 376.333782][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.344815][T15522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2604'. [ 376.565558][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.568573][T15531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2605'. [ 376.584952][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.596852][ T5837] Bluetooth: hci3: command tx timeout [ 376.683940][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.691291][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.701401][T15491] bridge_slave_0: entered allmulticast mode [ 376.709403][T15491] bridge_slave_0: entered promiscuous mode [ 376.729104][T15491] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.736902][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.742521][T15532] netlink: 'syz.2.2605': attribute type 15 has an invalid length. [ 376.744433][T15491] bridge_slave_1: entered allmulticast mode [ 376.762196][T15491] bridge_slave_1: entered promiscuous mode [ 376.800679][T15491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.819761][ T12] bridge_slave_1: left allmulticast mode [ 376.826110][ T12] bridge_slave_1: left promiscuous mode [ 376.831872][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.842246][ T12] bridge_slave_0: left allmulticast mode [ 376.849350][ T12] bridge_slave_0: left promiscuous mode [ 376.855136][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.216393][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.230988][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.245064][ T12] bond0 (unregistering): Released all slaves [ 377.259517][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.269812][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.301115][T15491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.413197][T15491] team0: Port device team_slave_0 added [ 377.440458][T15491] team0: Port device team_slave_1 added [ 377.478378][ T5837] Bluetooth: hci0: command tx timeout [ 377.610769][T15491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.619497][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.647454][T15491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.703504][T15491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.713757][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.741140][T15491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.868907][ T12] hsr_slave_0: left promiscuous mode [ 377.893686][ T12] hsr_slave_1: left promiscuous mode [ 377.906884][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.925549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.954608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.968425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.135138][ T12] veth1_macvtap: left promiscuous mode [ 378.154081][ T12] veth0_macvtap: left promiscuous mode [ 378.167782][ T12] veth1_vlan: left promiscuous mode [ 378.184652][ T12] veth0_vlan: left promiscuous mode [ 378.685870][ T5837] Bluetooth: hci3: command tx timeout [ 379.019805][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.033633][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.046780][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.063042][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.073914][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.078689][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.123852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 379.556542][ T5837] Bluetooth: hci0: command tx timeout [ 379.572308][T15568] pim6reg0: tun_chr_ioctl cmd 35111 [ 379.639050][T15491] hsr_slave_0: entered promiscuous mode [ 379.646271][T15491] hsr_slave_1: entered promiscuous mode [ 379.652749][T15491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.660782][T15491] Cannot create hsr debugfs directory [ 379.832286][T15566] lo speed is unknown, defaulting to 1000 [ 379.862478][T15578] lo speed is unknown, defaulting to 1000 [ 379.932293][T15477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.979924][T15477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.019803][T15477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.065676][T15477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.328713][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.420599][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.524846][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.562063][T15477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.572065][T15566] chnl_net:caif_netlink_parms(): no params data found [ 380.602352][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.739447][T15477] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.755647][ T5837] Bluetooth: hci3: command tx timeout [ 380.807284][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.815907][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.823396][T15566] bridge_slave_0: entered allmulticast mode [ 380.832825][T15566] bridge_slave_0: entered promiscuous mode [ 380.845076][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.852336][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.881788][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.889518][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.897568][T15566] bridge_slave_1: entered allmulticast mode [ 380.904683][T15566] bridge_slave_1: entered promiscuous mode [ 380.914545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.921733][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.942285][T15491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.977302][T15491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.009952][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.020557][T15491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.035166][T15491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.049856][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.059462][ T12] bridge_slave_1: left allmulticast mode [ 381.065130][ T12] bridge_slave_1: left promiscuous mode [ 381.071613][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.081426][ T12] bridge_slave_0: left allmulticast mode [ 381.087976][ T12] bridge_slave_0: left promiscuous mode [ 381.093661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.168608][ T5837] Bluetooth: hci2: command tx timeout [ 381.291458][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'. [ 381.363095][T15603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 381.562177][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.574061][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.585624][ T12] bond0 (unregistering): Released all slaves [ 381.645903][ T5837] Bluetooth: hci0: command tx timeout [ 381.716584][T15566] team0: Port device team_slave_0 added [ 381.767830][T15566] team0: Port device team_slave_1 added [ 381.949932][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.958563][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.988234][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.001558][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.008784][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.035607][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.054162][T15477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.118656][ T12] hsr_slave_0: left promiscuous mode [ 382.135312][ T12] hsr_slave_1: left promiscuous mode [ 382.141233][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.149558][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.158036][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.166275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.184782][ T12] veth1_macvtap: left promiscuous mode [ 382.190679][ T12] veth0_macvtap: left promiscuous mode [ 382.196799][ T12] veth1_vlan: left promiscuous mode [ 382.202110][ T12] veth0_vlan: left promiscuous mode [ 382.654417][ T12] team0 (unregistering): Port device team_slave_1 removed [ 382.698413][ T12] team0 (unregistering): Port device team_slave_0 removed [ 382.855454][ T5837] Bluetooth: hci3: command tx timeout [ 383.161215][T15627] pim6reg0: tun_chr_ioctl cmd 35111 [ 383.245455][ T5837] Bluetooth: hci2: command tx timeout [ 383.283719][T15566] hsr_slave_0: entered promiscuous mode [ 383.291367][T15566] hsr_slave_1: entered promiscuous mode [ 383.297767][T15566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.305656][T15566] Cannot create hsr debugfs directory [ 383.526093][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2625'. [ 383.555137][T15477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.752563][T15491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.903917][T15491] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.932760][T15477] veth0_vlan: entered promiscuous mode [ 384.083464][T15477] veth1_vlan: entered promiscuous mode [ 384.150050][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.157270][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.189426][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.196639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.324641][T15477] veth0_macvtap: entered promiscuous mode [ 384.354983][T15477] veth1_macvtap: entered promiscuous mode [ 384.463481][T15477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.478047][T15477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.529154][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.540779][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.550924][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.561430][T15477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.561545][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.578324][T15477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.590873][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.598780][T15477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.617619][T15477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.659907][T15566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.687701][T15652] lo speed is unknown, defaulting to 1000 [ 384.705206][T15566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.725097][T15566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.794175][T15566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.866785][T15661] netlink: 1420 bytes leftover after parsing attributes in process `syz.4.2632'. [ 384.971527][T15661] netlink: 'syz.4.2632': attribute type 10 has an invalid length. [ 384.976342][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.979689][T15661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2632'. [ 385.021534][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.031050][T15661] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.042319][T15661] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.051070][T15661] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.060359][T15661] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.071007][T15661] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 385.081089][T15661] team0: Failed to send options change via netlink (err -105) [ 385.088704][T15661] team0: Port device geneve0 added [ 385.099676][T15491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.146217][T15652] chnl_net:caif_netlink_parms(): no params data found [ 385.159205][ T9900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.176288][ T9900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.327836][ T5845] Bluetooth: hci2: command tx timeout [ 385.354440][T15491] veth0_vlan: entered promiscuous mode [ 385.404909][T15491] veth1_vlan: entered promiscuous mode [ 385.420280][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.427957][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.435037][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.443481][T15652] bridge_slave_0: entered allmulticast mode [ 385.452828][T15652] bridge_slave_0: entered promiscuous mode [ 385.468366][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.476309][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.483533][T15652] bridge_slave_1: entered allmulticast mode [ 385.492226][T15652] bridge_slave_1: entered promiscuous mode [ 385.571896][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.669329][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.696014][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.712073][T15652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.746457][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.766050][T15652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.809179][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.838061][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.845171][ T9900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.866591][T15652] team0: Port device team_slave_0 added [ 385.883528][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.890679][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.904772][T15652] team0: Port device team_slave_1 added [ 385.934341][T15491] veth0_macvtap: entered promiscuous mode [ 385.951920][T15652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.963016][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.990286][T15652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.003082][T15652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.010151][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.036737][T15652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.074133][T15491] veth1_macvtap: entered promiscuous mode [ 386.140038][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.152865][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.163979][T15491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.190360][T15652] hsr_slave_0: entered promiscuous mode [ 386.197694][T15652] hsr_slave_1: entered promiscuous mode [ 386.203770][T15652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.213036][T15652] Cannot create hsr debugfs directory [ 386.240831][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.251467][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.263995][T15491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.305710][ T36] bridge_slave_1: left allmulticast mode [ 386.312257][ T36] bridge_slave_1: left promiscuous mode [ 386.318156][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.329335][ T36] bridge_slave_0: left allmulticast mode [ 386.334980][ T36] bridge_slave_0: left promiscuous mode [ 386.341662][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.642609][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.653202][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.663327][ T36] bond0 (unregistering): Released all slaves [ 386.675909][ T5845] Bluetooth: hci1: command tx timeout [ 386.691334][T15491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.704244][T15491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.713200][T15491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.722276][T15491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.990468][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.000109][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.038305][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.047480][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.060014][ T36] hsr_slave_0: left promiscuous mode [ 387.066553][ T36] hsr_slave_1: left promiscuous mode [ 387.072319][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.081020][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.088886][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.096523][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.115875][ T36] veth1_macvtap: left promiscuous mode [ 387.121404][ T36] veth0_macvtap: left promiscuous mode [ 387.127183][ T36] veth1_vlan: left promiscuous mode [ 387.132451][ T36] veth0_vlan: left promiscuous mode [ 387.395454][ T5845] Bluetooth: hci2: command tx timeout [ 387.509597][ T36] team0 (unregistering): Port device team_slave_1 removed [ 387.552210][ T36] team0 (unregistering): Port device team_slave_0 removed [ 388.000442][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.026136][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.037191][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.069402][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.084059][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.250488][T15684] pim6reg0: tun_chr_ioctl cmd 35111 [ 388.308656][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.388516][T15685] lo speed is unknown, defaulting to 1000 [ 388.574860][T15566] veth0_vlan: entered promiscuous mode [ 388.623738][T15566] veth1_vlan: entered promiscuous mode [ 388.755753][ C1] ================================================================== [ 388.763871][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 388.771798][ C1] Read of size 2 at addr ffff888043a3d42a by task syz-executor/15484 [ 388.779877][ C1] [ 388.782214][ C1] CPU: 1 UID: 0 PID: 15484 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00999-ga9ce2ce1800e #0 PREEMPT(full) [ 388.782238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 388.782250][ C1] Call Trace: [ 388.782258][ C1] [ 388.782267][ C1] dump_stack_lvl+0x189/0x250 [ 388.782296][ C1] ? __virt_addr_valid+0x18c/0x540 [ 388.782319][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.782346][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.782370][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.782395][ C1] ? lock_release+0x4b/0x3e0 [ 388.782422][ C1] ? __virt_addr_valid+0x18c/0x540 [ 388.782444][ C1] ? __virt_addr_valid+0x469/0x540 [ 388.782467][ C1] print_report+0xb4/0x290 [ 388.782488][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 388.782508][ C1] kasan_report+0x118/0x150 [ 388.782532][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 388.782554][ C1] rose_timer_expiry+0x471/0x4b0 [ 388.782575][ C1] call_timer_fn+0x17b/0x5f0 [ 388.782598][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 388.782617][ C1] ? call_timer_fn+0xbe/0x5f0 [ 388.782639][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 388.782668][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.782693][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.782719][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 388.782739][ C1] __run_timer_base+0x61a/0x860 [ 388.782761][ C1] ? ktime_get+0x3e/0x1f0 [ 388.782785][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 388.782812][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 388.782840][ C1] run_timer_softirq+0xb7/0x180 [ 388.782863][ C1] handle_softirqs+0x283/0x870 [ 388.782882][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 388.782902][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 388.782922][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 388.782946][ C1] __irq_exit_rcu+0xca/0x1f0 [ 388.782962][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 388.782983][ C1] irq_exit_rcu+0x9/0x30 [ 388.782998][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 388.783025][ C1] [ 388.783032][ C1] [ 388.783040][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.783060][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 388.783085][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f c2 c7 09 e8 2a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 388.783101][ C1] RSP: 0018:ffffc900033476f8 EFLAGS: 00000282 [ 388.783120][ C1] RAX: 741a20e9883d2a00 RBX: 0000000000000000 RCX: 741a20e9883d2a00 [ 388.783134][ C1] RDX: 0000000000000000 RSI: ffffffff8d75179c RDI: ffffffff8bc1d4a0 [ 388.783148][ C1] RBP: ffffc90003347750 R08: ffffffff8f7f2c77 R09: 1ffffffff1efe58e [ 388.783162][ C1] R10: dffffc0000000000 R11: fffffbfff1efe58f R12: ffff8880329b1e00 [ 388.783176][ C1] R13: dffffc0000000000 R14: ffff888033e1bc00 R15: ffff8880b893a6d8 [ 388.783200][ C1] ? finish_task_switch+0x266/0x950 [ 388.783226][ C1] __schedule+0x16ea/0x4cd0 [ 388.783255][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 388.783282][ C1] ? kernel_text_address+0xa5/0xe0 [ 388.783306][ C1] ? __kernel_text_address+0xd/0x40 [ 388.783329][ C1] ? preempt_schedule_notrace+0xd1/0x110 [ 388.783356][ C1] ? __pfx___schedule+0x10/0x10 [ 388.783378][ C1] ? __lock_acquire+0xaac/0xd20 [ 388.783405][ C1] ? do_raw_spin_lock+0x121/0x290 [ 388.783432][ C1] preempt_schedule_notrace+0xd1/0x110 [ 388.783459][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 388.783489][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 388.783511][ C1] ? page_ext_get+0x22/0x2b0 [ 388.783535][ C1] rcu_is_watching+0x7f/0xb0 [ 388.783560][ C1] ? page_ext_get+0x22/0x2b0 [ 388.783581][ C1] page_ext_get+0x5b/0x2b0 [ 388.783604][ C1] __reset_page_owner+0x28/0x1f0 [ 388.783627][ C1] __free_frozen_pages+0xb14/0xce0 [ 388.783656][ C1] vfree+0x1a6/0x330 [ 388.783681][ C1] ? __pfx_kcov_close+0x10/0x10 [ 388.783703][ C1] kcov_close+0x28/0x50 [ 388.783724][ C1] __fput+0x449/0xa70 [ 388.783755][ C1] task_work_run+0x1d1/0x260 [ 388.783779][ C1] ? __pfx_task_work_run+0x10/0x10 [ 388.783809][ C1] ? kmem_cache_free+0x192/0x3f0 [ 388.783834][ C1] do_exit+0x8d6/0x2550 [ 388.783862][ C1] ? __pfx_do_exit+0x10/0x10 [ 388.783888][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.783912][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.783940][ C1] do_group_exit+0x21c/0x2d0 [ 388.783964][ C1] __x64_sys_exit_group+0x3f/0x40 [ 388.783986][ C1] x64_sys_call+0x21ba/0x21c0 [ 388.784003][ C1] do_syscall_64+0xf6/0x210 [ 388.784021][ C1] ? clear_bhb_loop+0x45/0xa0 [ 388.784042][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.784058][ C1] RIP: 0033:0x7ff6e4d8e969 [ 388.784074][ C1] Code: Unable to access opcode bytes at 0x7ff6e4d8e93f. [ 388.784084][ C1] RSP: 002b:00007ffeb0a3e1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 388.784103][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007ff6e4d8e969 [ 388.784116][ C1] RDX: 00007ff6e4d8d3e0 RSI: 0000000000000004 RDI: 0000000000000043 [ 388.784128][ C1] RBP: 00007ff6e4fb6738 R08: 00007ffeb0a3bf86 R09: 0000000000000008 [ 388.784141][ C1] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 388.784153][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 388.784172][ C1] [ 388.784179][ C1] [ 388.796462][T15652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.806458][ C1] Allocated by task 36: [ 388.806474][ C1] kasan_save_track+0x3e/0x80 [ 388.806496][ C1] __kasan_kmalloc+0x93/0xb0 [ 388.806513][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 388.806530][ C1] fib6_info_alloc+0x30/0xf0 [ 388.806553][ C1] ip6_route_info_create+0x147/0xa70 [ 388.806573][ C1] addrconf_f6i_alloc+0x1c7/0x420 [ 388.806593][ C1] ipv6_add_addr+0x56e/0x1090 [ 388.806609][ C1] addrconf_add_linklocal+0x28c/0x6c0 [ 388.806625][ C1] addrconf_addr_gen+0x490/0x580 [ 388.806644][ C1] addrconf_init_auto_addrs+0x711/0xb50 [ 388.806664][ C1] addrconf_notify+0xacc/0x1010 [ 388.806685][ C1] notifier_call_chain+0x1b3/0x3e0 [ 388.806702][ C1] netif_state_change+0x284/0x3a0 [ 388.806721][ C1] linkwatch_do_dev+0x117/0x170 [ 388.815364][ T5845] Bluetooth: hci1: command tx timeout [ 388.817456][ C1] __linkwatch_run_queue+0x56d/0x7e0 [ 388.817485][ C1] linkwatch_event+0x4c/0x60 [ 388.817506][ C1] process_scheduled_works+0xadb/0x17a0 [ 388.817531][ C1] worker_thread+0x8a0/0xda0 [ 388.817549][ C1] kthread+0x70e/0x8a0 [ 388.817568][ C1] ret_from_fork+0x4b/0x80 [ 388.817586][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.817601][ C1] [ 388.817606][ C1] Freed by task 15: [ 388.817617][ C1] kasan_save_track+0x3e/0x80 [ 388.817635][ C1] kasan_save_free_info+0x46/0x50 [ 388.817660][ C1] __kasan_slab_free+0x62/0x70 [ 388.817679][ C1] kfree+0x193/0x440 [ 388.817697][ C1] rcu_core+0xca5/0x1710 [ 388.817720][ C1] handle_softirqs+0x283/0x870 [ 388.817735][ C1] run_ksoftirqd+0x9b/0x100 [ 388.817752][ C1] smpboot_thread_fn+0x53f/0xa60 [ 388.817767][ C1] kthread+0x70e/0x8a0 [ 388.817785][ C1] ret_from_fork+0x4b/0x80 [ 389.466723][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.471485][ C1] [ 389.473801][ C1] Last potentially related work creation: [ 389.479506][ C1] kasan_save_stack+0x3e/0x60 [ 389.484177][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 389.489368][ C1] call_rcu+0x142/0x990 [ 389.493511][ C1] __ip6_del_rt+0x111/0x180 [ 389.498005][ C1] ip6_del_rt+0xb3/0x100 [ 389.502242][ C1] __ipv6_ifa_notify+0x5c7/0xac0 [ 389.507168][ C1] addrconf_ifdown+0xe69/0x1880 [ 389.512452][ C1] addrconf_notify+0x1bc/0x1010 [ 389.517292][ C1] notifier_call_chain+0x1b3/0x3e0 [ 389.522389][ C1] dev_close_many+0x29c/0x410 [ 389.527053][ C1] unregister_netdevice_many_notify+0x834/0x2320 [ 389.533379][ C1] default_device_exit_batch+0x819/0x890 [ 389.539009][ C1] ops_undo_list+0x522/0x990 [ 389.543591][ C1] cleanup_net+0x4c5/0x8a0 [ 389.547997][ C1] process_scheduled_works+0xadb/0x17a0 [ 389.553539][ C1] worker_thread+0x8a0/0xda0 [ 389.558115][ C1] kthread+0x70e/0x8a0 [ 389.562172][ C1] ret_from_fork+0x4b/0x80 [ 389.566575][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.571324][ C1] [ 389.573660][ C1] The buggy address belongs to the object at ffff888043a3d400 [ 389.573660][ C1] which belongs to the cache kmalloc-512 of size 512 [ 389.587699][ C1] The buggy address is located 42 bytes inside of [ 389.587699][ C1] freed 512-byte region [ffff888043a3d400, ffff888043a3d600) [ 389.601582][ C1] [ 389.603891][ C1] The buggy address belongs to the physical page: [ 389.610296][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43a3c [ 389.619822][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 389.628306][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 389.635935][ C1] page_type: f5(slab) [ 389.639904][ C1] raw: 00fff00000000040 ffff88801a041c80 ffffea00007fe300 dead000000000002 [ 389.648480][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 389.657058][ C1] head: 00fff00000000040 ffff88801a041c80 ffffea00007fe300 dead000000000002 [ 389.665887][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 389.674555][ C1] head: 00fff00000000002 ffffea00010e8f01 00000000ffffffff 00000000ffffffff [ 389.683211][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 389.691863][ C1] page dumped because: kasan: bad access detected [ 389.698268][ C1] page_owner tracks the page as allocated [ 389.703964][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 73727112875, free_ts 73624589714 [ 389.725831][ C1] post_alloc_hook+0x1d8/0x230 [ 389.730589][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 389.736127][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 389.741927][ C1] alloc_pages_mpol+0x232/0x4a0 [ 389.746769][ C1] allocate_slab+0x8a/0x3b0 [ 389.751261][ C1] ___slab_alloc+0xbfc/0x1480 [ 389.755952][ C1] __kmalloc_noprof+0x305/0x4f0 [ 389.760801][ C1] fib6_info_alloc+0x30/0xf0 [ 389.765379][ C1] ip6_route_info_create+0x147/0xa70 [ 389.770660][ C1] ip6_route_add+0x29/0x2f0 [ 389.775160][ C1] addrconf_add_dev+0x24f/0x340 [ 389.780005][ C1] addrconf_init_auto_addrs+0x5cf/0xb50 [ 389.785804][ C1] addrconf_notify+0xacc/0x1010 [ 389.790991][ C1] notifier_call_chain+0x1b3/0x3e0 [ 389.796088][ C1] netif_state_change+0x284/0x3a0 [ 389.801189][ C1] linkwatch_do_dev+0x117/0x170 [ 389.806042][ C1] page last free pid 5827 tgid 5827 stack trace: [ 389.812958][ C1] __free_frozen_pages+0xb14/0xce0 [ 389.818062][ C1] __put_partials+0x161/0x1c0 [ 389.822734][ C1] put_cpu_partial+0x17c/0x250 [ 389.827489][ C1] __slab_free+0x2f7/0x400 [ 389.831888][ C1] qlist_free_all+0x9a/0x140 [ 389.836465][ C1] kasan_quarantine_reduce+0x148/0x160 [ 389.841916][ C1] __kasan_slab_alloc+0x22/0x80 [ 389.846759][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 389.852122][ C1] netdevice_event+0x3a1/0x8a0 [ 389.856882][ C1] notifier_call_chain+0x1b3/0x3e0 [ 389.861979][ C1] netif_set_mac_address+0x37c/0x4c0 [ 389.867268][ C1] do_setlink+0x908/0x40d0 [ 389.871685][ C1] rtnl_newlink+0x160b/0x1c70 [ 389.876349][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 389.881300][ C1] netlink_rcv_skb+0x219/0x490 [ 389.886052][ C1] netlink_unicast+0x758/0x8d0 [ 389.890809][ C1] [ 389.893117][ C1] Memory state around the buggy address: [ 389.898733][ C1] ffff888043a3d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 389.906784][ C1] ffff888043a3d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 389.915005][ C1] >ffff888043a3d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 389.923050][ C1] ^ [ 389.928401][ C1] ffff888043a3d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 389.936448][ C1] ffff888043a3d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 389.944518][ C1] ================================================================== [ 389.952690][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 389.959997][ C1] CPU: 1 UID: 0 PID: 15484 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00999-ga9ce2ce1800e #0 PREEMPT(full) [ 389.972248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 389.982306][ C1] Call Trace: [ 389.985579][ C1] [ 389.988412][ C1] dump_stack_lvl+0x99/0x250 [ 389.993002][ C1] ? __asan_memcpy+0x40/0x70 [ 389.997582][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.002775][ C1] ? __pfx__printk+0x10/0x10 [ 390.007359][ C1] panic+0x2db/0x790 [ 390.011251][ C1] ? __pfx_panic+0x10/0x10 [ 390.015667][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 390.021554][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 390.027439][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.033759][ C1] ? print_memory_metadata+0x314/0x400 [ 390.039209][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 390.044307][ C1] check_panic_on_warn+0x89/0xb0 [ 390.049239][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 390.054342][ C1] end_report+0x78/0x160 [ 390.058581][ C1] kasan_report+0x129/0x150 [ 390.063082][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 390.068185][ C1] rose_timer_expiry+0x471/0x4b0 [ 390.073114][ C1] call_timer_fn+0x17b/0x5f0 [ 390.077698][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 390.083147][ C1] ? call_timer_fn+0xbe/0x5f0 [ 390.087816][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 390.092920][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.098111][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.103303][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 390.108753][ C1] __run_timer_base+0x61a/0x860 [ 390.113593][ C1] ? ktime_get+0x3e/0x1f0 [ 390.117913][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 390.123272][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 390.129523][ C1] run_timer_softirq+0xb7/0x180 [ 390.134365][ C1] handle_softirqs+0x283/0x870 [ 390.139119][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 390.143869][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 390.149143][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 390.154331][ C1] __irq_exit_rcu+0xca/0x1f0 [ 390.158911][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 390.164098][ C1] irq_exit_rcu+0x9/0x30 [ 390.168325][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 390.173956][ C1] [ 390.176874][ C1] [ 390.179792][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.185762][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 390.191563][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f c2 c7 09 e8 2a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 390.211156][ C1] RSP: 0018:ffffc900033476f8 EFLAGS: 00000282 [ 390.217212][ C1] RAX: 741a20e9883d2a00 RBX: 0000000000000000 RCX: 741a20e9883d2a00 [ 390.225171][ C1] RDX: 0000000000000000 RSI: ffffffff8d75179c RDI: ffffffff8bc1d4a0 [ 390.233126][ C1] RBP: ffffc90003347750 R08: ffffffff8f7f2c77 R09: 1ffffffff1efe58e [ 390.241085][ C1] R10: dffffc0000000000 R11: fffffbfff1efe58f R12: ffff8880329b1e00 [ 390.249045][ C1] R13: dffffc0000000000 R14: ffff888033e1bc00 R15: ffff8880b893a6d8 [ 390.257014][ C1] ? finish_task_switch+0x266/0x950 [ 390.262212][ C1] __schedule+0x16ea/0x4cd0 [ 390.266719][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 390.271911][ C1] ? kernel_text_address+0xa5/0xe0 [ 390.277014][ C1] ? __kernel_text_address+0xd/0x40 [ 390.282204][ C1] ? preempt_schedule_notrace+0xd1/0x110 [ 390.287831][ C1] ? __pfx___schedule+0x10/0x10 [ 390.292673][ C1] ? __lock_acquire+0xaac/0xd20 [ 390.297517][ C1] ? do_raw_spin_lock+0x121/0x290 [ 390.302536][ C1] preempt_schedule_notrace+0xd1/0x110 [ 390.307990][ C1] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 390.314050][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 390.319934][ C1] ? page_ext_get+0x22/0x2b0 [ 390.324516][ C1] rcu_is_watching+0x7f/0xb0 [ 390.329101][ C1] ? page_ext_get+0x22/0x2b0 [ 390.333680][ C1] page_ext_get+0x5b/0x2b0 [ 390.338086][ C1] __reset_page_owner+0x28/0x1f0 [ 390.343017][ C1] __free_frozen_pages+0xb14/0xce0 [ 390.348124][ C1] vfree+0x1a6/0x330 [ 390.352014][ C1] ? __pfx_kcov_close+0x10/0x10 [ 390.356858][ C1] kcov_close+0x28/0x50 [ 390.361007][ C1] __fput+0x449/0xa70 [ 390.364986][ C1] task_work_run+0x1d1/0x260 [ 390.369569][ C1] ? __pfx_task_work_run+0x10/0x10 [ 390.374672][ C1] ? kmem_cache_free+0x192/0x3f0 [ 390.379602][ C1] do_exit+0x8d6/0x2550 [ 390.383753][ C1] ? __pfx_do_exit+0x10/0x10 [ 390.388335][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.393524][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.398717][ C1] do_group_exit+0x21c/0x2d0 [ 390.403299][ C1] __x64_sys_exit_group+0x3f/0x40 [ 390.408315][ C1] x64_sys_call+0x21ba/0x21c0 [ 390.412980][ C1] do_syscall_64+0xf6/0x210 [ 390.417476][ C1] ? clear_bhb_loop+0x45/0xa0 [ 390.422146][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.428024][ C1] RIP: 0033:0x7ff6e4d8e969 [ 390.432425][ C1] Code: Unable to access opcode bytes at 0x7ff6e4d8e93f. [ 390.439423][ C1] RSP: 002b:00007ffeb0a3e1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 390.447827][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007ff6e4d8e969 [ 390.455789][ C1] RDX: 00007ff6e4d8d3e0 RSI: 0000000000000004 RDI: 0000000000000043 [ 390.463756][ C1] RBP: 00007ff6e4fb6738 R08: 00007ffeb0a3bf86 R09: 0000000000000008 [ 390.471713][ C1] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 390.479672][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 390.487637][ C1] [ 390.490888][ C1] Kernel Offset: disabled [ 390.495200][ C1] Rebooting in 86400 seconds..