last executing test programs: 26.050289343s ago: executing program 3 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x0) 25.855834316s ago: executing program 3 (id=124): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@deltaction={0x28, 0x31, 0x4, 0x0, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x20000000}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) (async) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0x9cf) (async) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0x288) (async) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}], 0x40}, 0x0) 25.693084612s ago: executing program 3 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dd8b56a8ce626a78fb693fa362d216ffe9d549c2dc81f14187c9ae2c574dee3642d409aa3f338193f869f7afbbc28357b12b34f7e5db61b9b9ab5e10163b73f2712bb4d8e25aefa551a8a3c4a14c1ff1725805b31eed58df51abc8dc6fcd4eed186f5b707ecdc98a9b798c9fc43b8074cfd5cd66a7570f5ff07515738948ef436a54ea411e", @ANYRES16=r5, @ANYBLOB="08002abd7000fddbdf251a000000080001003a00000008009a00020000000400cc000700210062620000"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x24008000) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x38}}, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x3, 0x9, 0x24}, 0x48) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x3d, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0bc0f7", 0x0, "de9560"}, "3b021161c0681f7e987b96"}}}}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 25.379870699s ago: executing program 3 (id=130): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x400000001, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp=r2}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close(r1) 24.970950338s ago: executing program 3 (id=136): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000002400078008000200"], 0x38}}, 0x0) 14.750002212s ago: executing program 3 (id=136): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000002400078008000200"], 0x38}}, 0x0) 13.469403778s ago: executing program 2 (id=249): bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x20000005) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047435477018d00080002"], 0x30}}, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x10, [0x10, 0xd, 0xf, 0x0, 0x10, 0x10, 0x9, 0x6, 0xf, 0x8, 0xb, 0x2, 0xb, 0xc, 0xd, 0xc], 0x1, [0x4, 0x4, 0xfffe, 0x367c, 0xef, 0xff80, 0x1f, 0x5, 0x2, 0x54e, 0xffad, 0xca, 0x3, 0x7fff, 0xc8de, 0x4], [0x6, 0x211, 0x9, 0x3f, 0x7, 0x8000, 0x79, 0x2, 0xffc0, 0x6e, 0x6, 0x0, 0x3, 0x7, 0x4ce, 0x7]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef500000000000000000000000000bb00000000000000000000ff"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x6, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000000000)={0x40000, 0x7, 0x6}, 0xc) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 12.856179255s ago: executing program 2 (id=254): socket$inet6(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x21, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12.591617819s ago: executing program 2 (id=258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008e6679ae8c77c85c276c3c5ca0fb79c0163026fdb85acff64cedf54a268474ccd7a0c2ccba059479d3852a70fdff0fda6f805315ad6a22e935633bdc9b45b0db1902bedeb11bfcaec5c88f5ce76a5c"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x7, 0x0, 0xc, 0x800, 0x47dc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0x6, 0x4, 0x6, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc9d3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0xfb2, 0x80000001}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[r2, r2, r1, r2, r2], &(0x7f0000000400)=[{0x3, 0x4, 0xe, 0xa}, {0x1, 0x3, 0x5, 0x8cd5d8433efe231d}, {0x0, 0x4, 0x1, 0x3}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0xa, 0x6}, {0x1, 0x3, 0x8, 0xc}, {0x0, 0x4, 0x10}, {0x4, 0x4, 0xc, 0x9}, {0x1, 0x2, 0x7}, {0x5, 0x1, 0x1, 0x7}], 0x10, 0x7}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@delqdisc={0x60, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0x7, 0x6}, {0x6, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0xe}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffce9, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x3}}, 0x44010) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="000f0000000800030000000000000000000008c2924f1378356bcfd41a815595aaffa75e1262929afa548fbaf0a91d4addfbdc00c86ec7549b5ce7d584fca959ff89c134d391c6e26ce0f3a904bc0ef3f618f170f2ac90edc8479e5c9cacf33ff7b260086f63bcad093f11ba02bc4813b9635aa11b1ec65446b9404c4dfbe303977bf04be257cf2c95f48aa46a20a928eb9cb465b492c0e825845d9a3c4fb1ccb9b456561e4940f8d97ec7ad57e0618d38c2bbf81db09d046da231dadbac8c2bf1c739d75dc50a74246e3327f17ca1aff3fbcbff31e660c36c05bbb128fe632e50f08c1d18c45009", @ANYRES32=r6, @ANYBLOB="59000e008000000008021100000008021100000150505050505000000000000000000000640000000006020202020202040600000000000025030000002d1a0000000000000000000000000000000000000000000000000000000000080026006c090000080027000100000008000c006400000008000d0000000000"], 0x98}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f9, 0x41}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4040801) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000140)=0x2, 0x4) readv(r7, &(0x7f0000000300)=[{&(0x7f0000001600)=""/4092, 0xffc}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x70}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="96bc", 0x2}], 0x2}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500bc0f0a7000000011907800b194e7d1d48430bd018f3e01440000000000000000004ecc673b4cc01200d88550845d3e88d93d3a84b273ad9bd7efefd00b8ee225dea9a1630b1413f665952954d3ed125de990a6826ccc8ed49847721a8013e31e2606c18c85a24a9fd34895ab929ec7719838c934ff0b5868868f48"], 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 11.654972082s ago: executing program 2 (id=262): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xa7, &(0x7f0000000080)=""/167}, 0x90) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xffffffff) 11.439944424s ago: executing program 2 (id=264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmmsg$inet(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}], 0x2, 0x60cd8c5) 11.344388012s ago: executing program 2 (id=266): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x400000001, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp=r2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="daa1", &(0x7f00000002c0)=@udp6=r3}, 0x20) close(r1) 3.11622333s ago: executing program 0 (id=305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xa7, &(0x7f0000000080)=""/167}, 0x90) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0xffffffff) 3.020098809s ago: executing program 0 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x2, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000800), 0x1, 0xc4) 2.467766251s ago: executing program 0 (id=311): r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047435477018d00080002"], 0x30}}, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x10, [0x10, 0xd, 0xf, 0x0, 0x10, 0x10, 0x9, 0x6, 0xf, 0x8, 0xb, 0x2, 0xb, 0xc, 0xd, 0xc], 0x1, [0x4, 0x4, 0xfffe, 0x367c, 0xef, 0xff80, 0x1f, 0x5, 0x2, 0x54e, 0xffad, 0xca, 0x3, 0x7fff, 0xc8de, 0x4], [0x6, 0x211, 0x9, 0x3f, 0x7, 0x8000, 0x79, 0x2, 0xffc0, 0x6e, 0x6, 0x0, 0x3, 0x7, 0x4ce, 0x7]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef500000000000000000000000000bb00000000000000000000ff"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r10 = socket$inet6(0xa, 0x6, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000000)={0x40000, 0x7, 0x6}, 0xc) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2.467149428s ago: executing program 4 (id=312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008e6679ae8c77c85c276c3c5ca0fb79c0163026fdb85acff64cedf54a268474ccd7a0c2ccba059479d3852a70fdff0fda6f805315ad6a22e935633bdc9b45b0db1902bedeb11bfcaec5c88f5ce76a5c"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x7, 0x0, 0xc, 0x800, 0x47dc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0x6, 0x4, 0x6, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc9d3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0xfb2, 0x80000001}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[r2, r2, r1, r2, r2], &(0x7f0000000400)=[{0x3, 0x4, 0xe, 0xa}, {0x1, 0x3, 0x5, 0x8cd5d8433efe231d}, {0x0, 0x4, 0x1, 0x3}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0xa, 0x6}, {0x1, 0x3, 0x8, 0xc}, {0x0, 0x4, 0x10}, {0x4, 0x4, 0xc, 0x9}, {0x1, 0x2, 0x7}, {0x5, 0x1, 0x1, 0x7}], 0x10, 0x7}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@delqdisc={0x60, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0x7, 0x6}, {0x6, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0xe}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffce9, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x3}}, 0x44010) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="000f0000000800030000000000000000000008c2924f1378356bcfd41a815595aaffa75e1262929afa548fbaf0a91d4addfbdc00c86ec7549b5ce7d584fca959ff89c134d391c6e26ce0f3a904bc0ef3f618f170f2ac90edc8479e5c9cacf33ff7b260086f63bcad093f11ba02bc4813b9635aa11b1ec65446b9404c4dfbe303977bf04be257cf2c95f48aa46a20a928eb9cb465b492c0e825845d9a3c4fb1ccb9b456561e4940f8d97ec7ad57e0618d38c2bbf81db09d046da231dadbac8c2bf1c739d75dc50a74246e3327f17ca1aff3fbcbff31e660c36c05bbb128fe632e50f08c1d18c45009", @ANYRES32=r6, @ANYBLOB="59000e008000000008021100000008021100000150505050505000000000000000000000640000000006020202020202040600000000000025030000002d1a0000000000000000000000000000000000000000000000000000000000080026006c090000080027000100000008000c006400000008000d0000000000"], 0x98}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f9, 0x41}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4040801) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000140)=0x2, 0x4) readv(r7, &(0x7f0000000300)=[{&(0x7f0000001600)=""/4092, 0xffc}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x70}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="96bc", 0x2}], 0x2}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500bc0f0a7000000011907800b194e7d1d48430bd018f3e01440000000000000000004ecc673b4cc01200d88550845d3e88d93d3a84b273ad9bd7efefd00b8ee225dea9a1630b1413f665952954d3ed125de990a6826ccc8ed49847721a8013e31e2606c18c85a24a9fd34895ab929ec7719838c934ff0b5868868f48"], 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) 1.802614633s ago: executing program 0 (id=313): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047435477018d00080002"], 0x30}}, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x10, [0x10, 0xd, 0xf, 0x0, 0x10, 0x10, 0x9, 0x6, 0xf, 0x8, 0xb, 0x2, 0xb, 0xc, 0xd, 0xc], 0x1, [0x4, 0x4, 0xfffe, 0x367c, 0xef, 0xff80, 0x1f, 0x5, 0x2, 0x54e, 0xffad, 0xca, 0x3, 0x7fff, 0xc8de, 0x4], [0x6, 0x211, 0x9, 0x3f, 0x7, 0x8000, 0x79, 0x2, 0xffc0, 0x6e, 0x6, 0x0, 0x3, 0x7, 0x4ce, 0x7]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef500000000000000000000000000bb00000000000000000000ff"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r10 = socket$inet6(0xa, 0x6, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000000)={0x40000, 0x7, 0x6}, 0xc) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.482333483s ago: executing program 4 (id=315): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x13, 0x4) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x80, @empty}, 0xffffffff, 0xfffffffd, 0x4, 0x2}}, 0x2e) 1.365408467s ago: executing program 0 (id=316): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) pipe(&(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000002c0)=@caif=@dbg={0x25, 0x3f, 0x7}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="da752f575198baaac2", 0x9}], 0x2}, 0x8400) sendmsg$inet(r4, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="6e4602e2", 0x4}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, 0x0, 0x0) 1.298365685s ago: executing program 1 (id=317): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.235895859s ago: executing program 4 (id=318): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB='\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'wg2\x00'}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000008000140000000002c0001800b0001006e756d67656e00001c000280080003400000000008000140000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aa38cbe01"], 0xb4}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r5) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 1.177187855s ago: executing program 1 (id=319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r1, 0x0, 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 932.630652ms ago: executing program 4 (id=320): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x15, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 905.343585ms ago: executing program 1 (id=321): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4000, 0x0, @empty}, 0x1c) 580.45343ms ago: executing program 1 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x24, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) 524.458093ms ago: executing program 1 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x3, 0x6) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000013c0)=@newpolicy={0x27c, 0x13, 0x429, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@algo_auth={0x1c4, 0x5, {{'streebog512-generic\x00'}, 0xbe0, "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"}}]}, 0x27c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r3}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) (async) getsockopt$bt_BT_SECURITY(r1, 0x29, 0x24, 0x0, 0xfffffffffffffe0a) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="00000024a667274b193b8e4a726964676500001400028005002b000300000005002c00"/44], 0x44}, 0x1, 0xffffffea}, 0x0) 257.465031ms ago: executing program 1 (id=324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008e6679ae8c77c85c276c3c5ca0fb79c0163026fdb85acff64cedf54a268474ccd7a0c2ccba059479d3852a70fdff0fda6f805315ad6a22e935633bdc9b45b0db1902bedeb11bfcaec5c88f5ce76a5c"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x7, 0x0, 0xc, 0x800, 0x47dc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x1, 0x3, 0x6, 0x4, 0x6, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc9d3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x7, 0xfb2, 0x80000001}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[r2, r2, r1, r2, r2], &(0x7f0000000400)=[{0x3, 0x4, 0xe, 0xa}, {0x1, 0x3, 0x5, 0x8cd5d8433efe231d}, {0x0, 0x4, 0x1, 0x3}, {0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0xa, 0x6}, {0x1, 0x3, 0x8, 0xc}, {0x0, 0x4, 0x10}, {0x4, 0x4, 0xc, 0x9}, {0x1, 0x2, 0x7}, {0x5, 0x1, 0x1, 0x7}], 0x10, 0x7}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@delqdisc={0x60, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0x7, 0x6}, {0x6, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0xe}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffce9, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESDEC=r1, @ANYRESOCT=r2], 0x3}}, 0x44010) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="000f0000000800030000000000000000000008c2924f1378356bcfd41a815595aaffa75e1262929afa548fbaf0a91d4addfbdc00c86ec7549b5ce7d584fca959ff89c134d391c6e26ce0f3a904bc0ef3f618f170f2ac90edc8479e5c9cacf33ff7b260086f63bcad093f11ba02bc4813b9635aa11b1ec65446b9404c4dfbe303977bf04be257cf2c95f48aa46a20a928eb9cb465b492c0e825845d9a3c4fb1ccb9b456561e4940f8d97ec7ad57e0618d38c2bbf81db09d046da231dadbac8c2bf1c739d75dc50a74246e3327f17ca1aff3fbcbff31e660c36c05bbb128fe632e50f08c1d18c45009", @ANYRES32=r6, @ANYBLOB="59000e008000000008021100000008021100000150505050505000000000000000000000640000000006020202020202040600000000000025030000002d1a0000000000000000000000000000000000000000000000000000000000080026006c090000080027000100000008000c006400000008000d0000000000"], 0x98}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f9, 0x41}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4040801) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000140)=0x2, 0x4) readv(r7, &(0x7f0000000300)=[{&(0x7f0000001600)=""/4092, 0xffc}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x70}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="96bc", 0x2}], 0x2}, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500bc0f0a7000000011907800b194e7d1d48430bd018f3e01440000000000000000004ecc673b4cc01200d88550845d3e88d93d3a84b273ad9bd7efefd00b8ee225dea9a1630b1413f665952954d3ed125de990a6826ccc8ed49847721a8013e31e2606c18c85a24a9fd34895ab929ec7719838c934ff0b5868868f48"], 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) 236.234971ms ago: executing program 0 (id=325): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047435477018d00080002"], 0x30}}, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x10, [0x10, 0xd, 0xf, 0x0, 0x10, 0x10, 0x9, 0x6, 0xf, 0x8, 0xb, 0x2, 0xb, 0xc, 0xd, 0xc], 0x1, [0x4, 0x4, 0xfffe, 0x367c, 0xef, 0xff80, 0x1f, 0x5, 0x2, 0x54e, 0xffad, 0xca, 0x3, 0x7fff, 0xc8de, 0x4], [0x6, 0x211, 0x9, 0x3f, 0x7, 0x8000, 0x79, 0x2, 0xffc0, 0x6e, 0x6, 0x0, 0x3, 0x7, 0x4ce, 0x7]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef500000000000000000000000000bb00000000000000000000ff"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r10 = socket$inet6(0xa, 0x6, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000000)={0x40000, 0x7, 0x6}, 0xc) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 216.078808ms ago: executing program 4 (id=326): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x17, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 0s ago: executing program 4 (id=327): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 56.922325][ T5078] cgroup: Unknown subsys name 'net' [ 57.059212][ T5078] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.405710][ T5078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.444739][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.454486][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.473442][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.491888][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.498989][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.507748][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.517537][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.525632][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.533815][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.535647][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.542665][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.556512][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.557446][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.565130][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.573180][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.581756][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.593432][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.594430][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.605484][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.617849][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.625042][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.638434][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.640018][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.654740][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.662076][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.662364][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.676706][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.692189][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.700122][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.708008][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.196400][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 61.280844][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 61.340916][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 61.363844][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 61.435346][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.449360][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.456943][ T5096] bridge_slave_0: entered allmulticast mode [ 61.464411][ T5096] bridge_slave_0: entered promiscuous mode [ 61.479620][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.486861][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.494327][ T5096] bridge_slave_1: entered allmulticast mode [ 61.501899][ T5096] bridge_slave_1: entered promiscuous mode [ 61.583066][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.593861][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.600983][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.609331][ T5088] bridge_slave_0: entered allmulticast mode [ 61.616718][ T5088] bridge_slave_0: entered promiscuous mode [ 61.633393][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.643292][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 61.654289][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.661481][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.670870][ T5088] bridge_slave_1: entered allmulticast mode [ 61.678615][ T5088] bridge_slave_1: entered promiscuous mode [ 61.760083][ T5096] team0: Port device team_slave_0 added [ 61.811423][ T5096] team0: Port device team_slave_1 added [ 61.819832][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.844812][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.852798][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.859943][ T5101] bridge_slave_0: entered allmulticast mode [ 61.866943][ T5101] bridge_slave_0: entered promiscuous mode [ 61.875584][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.882798][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.889976][ T5101] bridge_slave_1: entered allmulticast mode [ 61.897324][ T5101] bridge_slave_1: entered promiscuous mode [ 61.924368][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.934449][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.942102][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.949838][ T5087] bridge_slave_0: entered allmulticast mode [ 61.957215][ T5087] bridge_slave_0: entered promiscuous mode [ 61.969484][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.976690][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.983960][ T5087] bridge_slave_1: entered allmulticast mode [ 61.991245][ T5087] bridge_slave_1: entered promiscuous mode [ 62.018230][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.025538][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.051619][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.099937][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.107265][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.133831][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.170527][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.184977][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.196372][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.209494][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.240595][ T5088] team0: Port device team_slave_0 added [ 62.287268][ T5087] team0: Port device team_slave_0 added [ 62.304897][ T5088] team0: Port device team_slave_1 added [ 62.310895][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.318900][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.326301][ T5097] bridge_slave_0: entered allmulticast mode [ 62.334475][ T5097] bridge_slave_0: entered promiscuous mode [ 62.355021][ T5087] team0: Port device team_slave_1 added [ 62.374414][ T5101] team0: Port device team_slave_0 added [ 62.391043][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.398542][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.406260][ T5097] bridge_slave_1: entered allmulticast mode [ 62.414323][ T5097] bridge_slave_1: entered promiscuous mode [ 62.432903][ T5096] hsr_slave_0: entered promiscuous mode [ 62.439198][ T5096] hsr_slave_1: entered promiscuous mode [ 62.459133][ T5101] team0: Port device team_slave_1 added [ 62.481120][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.488265][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.514603][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.564688][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.574808][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.601383][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.622660][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.629631][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.656699][ T5100] Bluetooth: hci0: command tx timeout [ 62.661867][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.662747][ T5093] Bluetooth: hci1: command tx timeout [ 62.681498][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.688742][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.714772][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.722166][ T5093] Bluetooth: hci4: command tx timeout [ 62.725433][ T5100] Bluetooth: hci2: command tx timeout [ 62.782472][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.801785][ T5100] Bluetooth: hci3: command tx timeout [ 62.817596][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.824645][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.850733][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.876889][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.917321][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.924728][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.951458][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.985132][ T5087] hsr_slave_0: entered promiscuous mode [ 62.991686][ T5087] hsr_slave_1: entered promiscuous mode [ 62.997923][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.005968][ T5087] Cannot create hsr debugfs directory [ 63.028411][ T5088] hsr_slave_0: entered promiscuous mode [ 63.034725][ T5088] hsr_slave_1: entered promiscuous mode [ 63.040695][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.048329][ T5088] Cannot create hsr debugfs directory [ 63.069247][ T5097] team0: Port device team_slave_0 added [ 63.085813][ T5097] team0: Port device team_slave_1 added [ 63.167026][ T5101] hsr_slave_0: entered promiscuous mode [ 63.176640][ T5101] hsr_slave_1: entered promiscuous mode [ 63.183064][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.190618][ T5101] Cannot create hsr debugfs directory [ 63.230473][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.240389][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.268364][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.307641][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.314793][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.341015][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.510442][ T5097] hsr_slave_0: entered promiscuous mode [ 63.517645][ T5097] hsr_slave_1: entered promiscuous mode [ 63.526967][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.534673][ T5097] Cannot create hsr debugfs directory [ 63.590992][ T5096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.602975][ T5096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.640397][ T5096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.652251][ T5096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.816299][ T5088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.826833][ T5088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.841306][ T5088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.866086][ T5088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.951958][ T5101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.971783][ T5101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.991290][ T5101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.002822][ T5101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.095568][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.120191][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.130918][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.158492][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.187232][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.217594][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.253759][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.261202][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.283359][ T5097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.294781][ T5097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.307034][ T5097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.320415][ T5097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.358822][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.366056][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.478852][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.514446][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.530929][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.606658][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.656125][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.686420][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.717509][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.722411][ T5100] Bluetooth: hci1: command tx timeout [ 64.724670][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.729946][ T5100] Bluetooth: hci0: command tx timeout [ 64.752650][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.759860][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.773689][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.780773][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.802572][ T5100] Bluetooth: hci4: command tx timeout [ 64.802692][ T5093] Bluetooth: hci2: command tx timeout [ 64.832217][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.839379][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.878973][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.886131][ T5093] Bluetooth: hci3: command tx timeout [ 64.917683][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.924893][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.935449][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.942603][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.967848][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.000308][ T5101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.078887][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.117696][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.164375][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.171628][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.187323][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.194622][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.418835][ T5096] veth0_vlan: entered promiscuous mode [ 65.444981][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.495936][ T5096] veth1_vlan: entered promiscuous mode [ 65.517275][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.723197][ T5101] veth0_vlan: entered promiscuous mode [ 65.750494][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.766578][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.777099][ T5096] veth0_macvtap: entered promiscuous mode [ 65.802961][ T5096] veth1_macvtap: entered promiscuous mode [ 65.826226][ T5101] veth1_vlan: entered promiscuous mode [ 65.879656][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.910354][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.923386][ T5096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.933054][ T5096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942676][ T5096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952229][ T5096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.995460][ T5101] veth0_macvtap: entered promiscuous mode [ 66.017698][ T5097] veth0_vlan: entered promiscuous mode [ 66.035897][ T5097] veth1_vlan: entered promiscuous mode [ 66.048470][ T5101] veth1_macvtap: entered promiscuous mode [ 66.150039][ T5087] veth0_vlan: entered promiscuous mode [ 66.165065][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.176699][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188158][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.209188][ T5088] veth0_vlan: entered promiscuous mode [ 66.218988][ T5087] veth1_vlan: entered promiscuous mode [ 66.270014][ T5088] veth1_vlan: entered promiscuous mode [ 66.277379][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.287488][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.295841][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.307582][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.319935][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.369454][ T5101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.378329][ T5101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.388940][ T5101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.398209][ T5101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.441076][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.445168][ T5097] veth0_macvtap: entered promiscuous mode [ 66.455177][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.491133][ T5087] veth0_macvtap: entered promiscuous mode [ 66.500444][ T5097] veth1_macvtap: entered promiscuous mode [ 66.522409][ T5087] veth1_macvtap: entered promiscuous mode [ 66.546450][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.557635][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.571257][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.582155][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.594775][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.624182][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.634826][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.651690][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.665712][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676843][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.710042][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.720743][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.735908][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.735906][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.761212][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.787734][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.797961][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.804371][ T5172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.814228][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.821494][ T5093] Bluetooth: hci0: command tx timeout [ 66.830637][ T5100] Bluetooth: hci1: command tx timeout [ 66.838715][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.859109][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.859209][ T5172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.874276][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.890165][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.897372][ T5100] Bluetooth: hci4: command tx timeout [ 66.903701][ T5093] Bluetooth: hci2: command tx timeout [ 66.909729][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.962368][ T5093] Bluetooth: hci3: command tx timeout [ 66.972792][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.980634][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.991355][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.005366][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.021294][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.046456][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.066560][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.081057][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.093866][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.105248][ T5088] veth0_macvtap: entered promiscuous mode [ 67.147932][ T5097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.158152][ T5097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.167537][ T5097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.179248][ T5097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.228506][ T5088] veth1_macvtap: entered promiscuous mode [ 67.270425][ T5181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 67.283651][ T5181] FAULT_INJECTION: forcing a failure. [ 67.283651][ T5181] name failslab, interval 1, probability 0, space 0, times 1 [ 67.297095][ T5181] CPU: 0 PID: 5181 Comm: syz.1.7 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 67.306923][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.316979][ T5181] Call Trace: [ 67.320244][ T5181] [ 67.323160][ T5181] dump_stack_lvl+0x241/0x360 [ 67.327834][ T5181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.333017][ T5181] ? __pfx__printk+0x10/0x10 [ 67.337594][ T5181] ? __pfx___might_resched+0x10/0x10 [ 67.342865][ T5181] ? stack_depot_init+0x36/0x140 [ 67.347790][ T5181] should_fail_ex+0x3b0/0x4e0 [ 67.352472][ T5181] ? __hw_addr_add_ex+0x1a8/0x610 [ 67.357517][ T5181] should_failslab+0x9/0x20 [ 67.362034][ T5181] kmalloc_trace_noprof+0x6c/0x2c0 [ 67.367139][ T5181] __hw_addr_add_ex+0x1a8/0x610 [ 67.372067][ T5181] dev_addr_init+0x143/0x230 [ 67.376641][ T5181] ? __pfx_dev_addr_init+0x10/0x10 [ 67.381769][ T5181] ? rcu_is_watching+0x15/0xb0 [ 67.386524][ T5181] ? read_word_at_a_time+0xe/0x20 [ 67.391536][ T5181] alloc_netdev_mqs+0x2a7/0xff0 [ 67.396399][ T5181] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 67.401681][ T5181] rtnl_create_link+0x2f9/0xc20 [ 67.406560][ T5181] rtnl_newlink+0x1423/0x20a0 [ 67.411262][ T5181] ? rtnl_newlink+0xb11/0x20a0 [ 67.416057][ T5181] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.421108][ T5181] ? do_raw_spin_unlock+0x13c/0x8b0 [ 67.426300][ T5181] ? __mutex_lock+0x9a5/0xd70 [ 67.430977][ T5181] ? __mutex_lock+0x527/0xd70 [ 67.435650][ T5181] ? __pfx_rtnl_newlink+0x10/0x10 [ 67.440660][ T5181] rtnetlink_rcv_msg+0x89b/0x1180 [ 67.445672][ T5181] ? rtnetlink_rcv_msg+0x208/0x1180 [ 67.450855][ T5181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.456322][ T5181] ? __local_bh_enable_ip+0x168/0x200 [ 67.461725][ T5181] ? lockdep_hardirqs_on+0x99/0x150 [ 67.466927][ T5181] ? __local_bh_enable_ip+0x168/0x200 [ 67.472281][ T5181] ? dev_hard_start_xmit+0x773/0x7e0 [ 67.477569][ T5181] ? __dev_queue_xmit+0x2da/0x3e90 [ 67.482700][ T5181] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 67.488410][ T5181] ? __dev_queue_xmit+0x2da/0x3e90 [ 67.493529][ T5181] ? __dev_queue_xmit+0x1763/0x3e90 [ 67.498744][ T5181] ? kasan_save_track+0x51/0x80 [ 67.503618][ T5181] ? do_syscall_64+0xf3/0x230 [ 67.508357][ T5181] ? __dev_queue_xmit+0x2da/0x3e90 [ 67.513494][ T5181] ? __pfx___dev_queue_xmit+0x10/0x10 [ 67.518873][ T5181] ? ref_tracker_free+0x643/0x7e0 [ 67.523898][ T5181] netlink_rcv_skb+0x1e3/0x430 [ 67.528653][ T5181] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.534122][ T5181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.539405][ T5181] ? netlink_deliver_tap+0x2e/0x1b0 [ 67.544589][ T5181] netlink_unicast+0x7f0/0x990 [ 67.549338][ T5181] ? __pfx_netlink_unicast+0x10/0x10 [ 67.554620][ T5181] ? __virt_addr_valid+0x183/0x520 [ 67.559754][ T5181] ? __check_object_size+0x49c/0x900 [ 67.565068][ T5181] ? bpf_lsm_netlink_send+0x9/0x10 [ 67.570222][ T5181] netlink_sendmsg+0x8e4/0xcb0 [ 67.574998][ T5181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.580290][ T5181] ? __import_iovec+0x536/0x820 [ 67.585132][ T5181] ? aa_sock_msg_perm+0x91/0x160 [ 67.590069][ T5181] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 67.595357][ T5181] ? security_socket_sendmsg+0x87/0xb0 [ 67.600804][ T5181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.606097][ T5181] __sock_sendmsg+0x221/0x270 [ 67.610780][ T5181] ____sys_sendmsg+0x525/0x7d0 [ 67.615541][ T5181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.620823][ T5181] __sys_sendmsg+0x2b0/0x3a0 [ 67.625412][ T5181] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.630510][ T5181] ? vfs_write+0x7c4/0xc90 [ 67.634935][ T5181] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.641248][ T5181] ? do_syscall_64+0x100/0x230 [ 67.645996][ T5181] ? do_syscall_64+0xb6/0x230 [ 67.650658][ T5181] do_syscall_64+0xf3/0x230 [ 67.655163][ T5181] ? clear_bhb_loop+0x35/0x90 [ 67.659849][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.665757][ T5181] RIP: 0033:0x7fc49d775bd9 [ 67.670164][ T5181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.689762][ T5181] RSP: 002b:00007fc49e4fd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.698164][ T5181] RAX: ffffffffffffffda RBX: 00007fc49d903f60 RCX: 00007fc49d775bd9 [ 67.706137][ T5181] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 67.714113][ T5181] RBP: 00007fc49e4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 67.722076][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.730036][ T5181] R13: 000000000000000b R14: 00007fc49d903f60 R15: 00007ffe6e9608a8 [ 67.738001][ T5181] [ 67.799281][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.819322][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.829357][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.840951][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.854888][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.871707][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.886035][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.897074][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.908859][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.924890][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.935935][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.962081][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.975975][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.987345][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.998789][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.009311][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.019934][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.032261][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.044184][ T5185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9'. [ 68.096678][ T5088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.132133][ T5088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.140879][ T5088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.171631][ T5088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.238573][ T5192] Bluetooth: MGMT ver 1.22 [ 68.287735][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.313722][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.352383][ T2423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.374966][ T2423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.449655][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.458935][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.517191][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.540242][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.597061][ T2446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.616777][ T2446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.706353][ T2446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.746457][ T2446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.777871][ T5198] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 68.789570][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 68.808875][ T5198] bridge0: port 3(syz_tun) entered blocking state [ 68.817064][ T5198] bridge0: port 3(syz_tun) entered disabled state [ 68.824005][ T5198] syz_tun: entered allmulticast mode [ 68.830240][ T5198] syz_tun: entered promiscuous mode [ 68.839797][ T5198] bridge0: port 3(syz_tun) entered blocking state [ 68.846761][ T5198] bridge0: port 3(syz_tun) entered forwarding state [ 68.881869][ T5093] Bluetooth: hci1: command tx timeout [ 68.884339][ T5203] batman_adv: batadv0: Adding interface: ipvlan2 [ 68.892056][ T5093] Bluetooth: hci0: command tx timeout [ 68.896331][ T5203] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.942746][ T5203] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 68.964736][ T5093] Bluetooth: hci2: command tx timeout [ 68.967804][ T5100] Bluetooth: hci4: command tx timeout [ 69.041991][ T5100] Bluetooth: hci3: command tx timeout [ 69.201126][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 69.707633][ T5230] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 70.039223][ T5247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.217716][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 70.274700][ T5252] raw_sendmsg: syz.1.28 forgot to set AF_INET. Fix it! [ 70.311460][ T5228] dccp_close: ABORT with 32 bytes unread [ 70.498255][ T5255] pim6reg1: entered promiscuous mode [ 70.538500][ T5255] pim6reg1: entered allmulticast mode [ 70.640980][ T5266] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.657496][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 70.779010][ T5271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 70.798064][ T5271] Zero length message leads to an empty skb [ 70.827806][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'. [ 70.996828][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 71.103693][ T5261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.139151][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.179399][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.258243][ T5285] netlink: 'syz.1.38': attribute type 2 has an invalid length. [ 71.267621][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 71.336434][ T5290] vlan2: entered promiscuous mode [ 71.694219][ T5142] IPVS: starting estimator thread 0... [ 71.698236][ T5308] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 71.776591][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.791805][ T5311] IPVS: using max 19 ests per chain, 45600 per kthread [ 71.799026][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.965693][ T5318] FAULT_INJECTION: forcing a failure. [ 71.965693][ T5318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.995197][ T5318] CPU: 1 PID: 5318 Comm: syz.1.51 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 72.005233][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.015312][ T5318] Call Trace: [ 72.018637][ T5318] [ 72.021589][ T5318] dump_stack_lvl+0x241/0x360 [ 72.026295][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.031521][ T5318] ? __pfx__printk+0x10/0x10 [ 72.036139][ T5318] ? __pfx_lock_release+0x10/0x10 [ 72.041193][ T5318] ? vfs_write+0x7c4/0xc90 [ 72.045638][ T5318] should_fail_ex+0x3b0/0x4e0 [ 72.050353][ T5318] _copy_from_user+0x2f/0xe0 [ 72.054974][ T5318] __sys_bpf+0x1a4/0x810 [ 72.059254][ T5318] ? __pfx___sys_bpf+0x10/0x10 [ 72.064060][ T5318] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.070069][ T5318] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.076424][ T5318] ? do_syscall_64+0x100/0x230 [ 72.081218][ T5318] __x64_sys_bpf+0x7c/0x90 [ 72.085665][ T5318] do_syscall_64+0xf3/0x230 [ 72.090196][ T5318] ? clear_bhb_loop+0x35/0x90 [ 72.094897][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.100814][ T5318] RIP: 0033:0x7fc49d775bd9 [ 72.105857][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.125486][ T5318] RSP: 002b:00007fc49e4fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.133937][ T5318] RAX: ffffffffffffffda RBX: 00007fc49d903f60 RCX: 00007fc49d775bd9 [ 72.141939][ T5318] RDX: 0000000000000090 RSI: 0000000020000040 RDI: 0000000000000005 [ 72.149938][ T5318] RBP: 00007fc49e4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.157938][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.165948][ T5318] R13: 000000000000000b R14: 00007fc49d903f60 R15: 00007ffe6e9608a8 [ 72.173985][ T5318] [ 72.378090][ T5328] __nla_validate_parse: 7 callbacks suppressed [ 72.378109][ T5328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 72.506207][ T5334] Cannot find add_set index 0 as target [ 72.690936][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 72.820788][ T5340] veth0_vlan: left promiscuous mode [ 72.969983][ T5347] ɶƣ0GC: entered promiscuous mode [ 72.980032][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.987969][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.025136][ T5333] delete_channel: no stack [ 73.058882][ T5350] ɶƣ0GCTw: entered promiscuous mode [ 73.236884][ T5361] ɶƣ0GC: entered promiscuous mode [ 73.313493][ T5361] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.63'. [ 73.519698][ T5376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 73.566855][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 73.577935][ T8] IPVS: starting estimator thread 0... [ 73.586467][ T5378] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 73.657712][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 73.672126][ T5379] IPVS: using max 21 ests per chain, 50400 per kthread [ 73.679384][ T5384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.73'. [ 73.697172][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'. [ 73.714567][ T5384] netlink: 'syz.4.73': attribute type 9 has an invalid length. [ 73.728540][ T5384] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.73'. [ 73.979583][ T5394] Cannot find add_set index 0 as target [ 73.998642][ T5396] FAULT_INJECTION: forcing a failure. [ 73.998642][ T5396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.017775][ T5396] CPU: 0 PID: 5396 Comm: syz.1.78 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 74.027723][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.037801][ T5396] Call Trace: [ 74.041105][ T5396] [ 74.044055][ T5396] dump_stack_lvl+0x241/0x360 [ 74.048760][ T5396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.053974][ T5396] ? __pfx__printk+0x10/0x10 [ 74.058567][ T5396] ? __pfx_lock_release+0x10/0x10 [ 74.063593][ T5396] should_fail_ex+0x3b0/0x4e0 [ 74.068374][ T5396] _copy_from_user+0x2f/0xe0 [ 74.072968][ T5396] copy_msghdr_from_user+0xae/0x680 [ 74.078165][ T5396] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.084061][ T5396] __sys_sendmsg+0x23d/0x3a0 [ 74.088650][ T5396] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.093751][ T5396] ? vfs_write+0x7c4/0xc90 [ 74.098189][ T5396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.104510][ T5396] ? do_syscall_64+0x100/0x230 [ 74.109266][ T5396] ? do_syscall_64+0xb6/0x230 [ 74.113936][ T5396] do_syscall_64+0xf3/0x230 [ 74.118429][ T5396] ? clear_bhb_loop+0x35/0x90 [ 74.123117][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.129007][ T5396] RIP: 0033:0x7fc49d775bd9 [ 74.133416][ T5396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.153026][ T5396] RSP: 002b:00007fc49e4fd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.161434][ T5396] RAX: ffffffffffffffda RBX: 00007fc49d903f60 RCX: 00007fc49d775bd9 [ 74.169395][ T5396] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 74.177355][ T5396] RBP: 00007fc49e4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.185315][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.193276][ T5396] R13: 000000000000000b R14: 00007fc49d903f60 R15: 00007ffe6e9608a8 [ 74.201249][ T5396] [ 74.263359][ T5401] Cannot find add_set index 0 as target [ 74.429788][ T5403] veth0_vlan: left promiscuous mode [ 74.469813][ T5381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 74.614630][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.83'. [ 74.625738][ T5414] tipc: Started in network mode [ 74.630760][ T5414] tipc: Node identity 1, cluster identity 4711 [ 74.637526][ T5414] tipc: Node number set to 1 [ 74.650042][ T5412] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 74.665589][ T5393] delete_channel: no stack [ 74.688946][ T5400] delete_channel: no stack [ 74.810152][ T5424] netlink: 'syz.1.86': attribute type 9 has an invalid length. [ 75.030885][ T5430] netlink: 'syz.0.88': attribute type 9 has an invalid length. [ 75.139702][ T5434] vlan2: entered promiscuous mode [ 75.515693][ T5452] bridge0: entered promiscuous mode [ 75.536785][ T5452] macvlan2: entered promiscuous mode [ 75.555524][ T5456] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 75.733012][ T5465] tipc: Started in network mode [ 75.740434][ T5433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.751984][ T5465] tipc: Node identity 1, cluster identity 4711 [ 75.758467][ T5465] tipc: Node number set to 1 [ 75.879031][ T5474] Cannot find add_set index 0 as target [ 75.996737][ T5478] veth0_vlan: left promiscuous mode [ 76.109189][ T5473] delete_channel: no stack [ 76.177862][ T5483] FAULT_INJECTION: forcing a failure. [ 76.177862][ T5483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.210557][ T5483] CPU: 1 PID: 5483 Comm: syz.2.100 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 76.220592][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 76.230670][ T5483] Call Trace: [ 76.233975][ T5483] [ 76.236925][ T5483] dump_stack_lvl+0x241/0x360 [ 76.241631][ T5483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.246855][ T5483] ? __pfx__printk+0x10/0x10 [ 76.251467][ T5483] ? __pfx_lock_release+0x10/0x10 [ 76.256521][ T5483] should_fail_ex+0x3b0/0x4e0 [ 76.261227][ T5483] _copy_from_user+0x2f/0xe0 [ 76.265839][ T5483] do_ip_vs_set_ctl+0x2f8/0x13d0 [ 76.270814][ T5483] ? __pfx___might_resched+0x10/0x10 [ 76.276121][ T5483] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 76.281517][ T5483] ? rcu_is_watching+0x15/0xb0 [ 76.286306][ T5483] ? __mutex_unlock_slowpath+0x21d/0x750 [ 76.291964][ T5483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.297975][ T5483] ? __pfx_aa_sk_perm+0x10/0x10 [ 76.302854][ T5483] ? module_put+0x13a/0x2d0 [ 76.307386][ T5483] nf_setsockopt+0x295/0x2c0 [ 76.312001][ T5483] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.317917][ T5483] do_sock_setsockopt+0x3af/0x720 [ 76.322976][ T5483] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 76.328552][ T5483] ? __fget_files+0x29/0x470 [ 76.333172][ T5483] ? __fget_files+0x3f6/0x470 [ 76.337885][ T5483] __sys_setsockopt+0x1ae/0x250 [ 76.342765][ T5483] __x64_sys_setsockopt+0xb5/0xd0 [ 76.347819][ T5483] do_syscall_64+0xf3/0x230 [ 76.352353][ T5483] ? clear_bhb_loop+0x35/0x90 [ 76.357060][ T5483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.362986][ T5483] RIP: 0033:0x7f2fd3175bd9 [ 76.367423][ T5483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.387050][ T5483] RSP: 002b:00007f2fd3e97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.395482][ T5483] RAX: ffffffffffffffda RBX: 00007f2fd3303f60 RCX: 00007f2fd3175bd9 [ 76.403480][ T5483] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000004 [ 76.411474][ T5483] RBP: 00007f2fd3e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.419465][ T5483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.427461][ T5483] R13: 000000000000000b R14: 00007f2fd3303f60 R15: 00007fffdb891048 [ 76.435469][ T5483] [ 76.511071][ T5487] delete_channel: no stack [ 76.582969][ T5488] netlink: 'syz.3.101': attribute type 7 has an invalid length. [ 76.601394][ T5488] netlink: 'syz.3.101': attribute type 39 has an invalid length. [ 76.813289][ T5502] Cannot find add_set index 0 as target [ 76.911399][ T5501] delete_channel: no stack [ 76.917309][ T25] cfg80211: failed to load regulatory.db [ 77.026177][ T5509] Cannot find add_set index 0 as target [ 77.170973][ T5508] delete_channel: no stack [ 77.333833][ T5517] FAULT_INJECTION: forcing a failure. [ 77.333833][ T5517] name failslab, interval 1, probability 0, space 0, times 0 [ 77.415610][ T5517] CPU: 1 PID: 5517 Comm: syz.1.115 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 77.425666][ T5517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.435750][ T5517] Call Trace: [ 77.439056][ T5517] [ 77.442024][ T5517] dump_stack_lvl+0x241/0x360 [ 77.446737][ T5517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.451959][ T5517] ? __pfx__printk+0x10/0x10 [ 77.456590][ T5517] should_fail_ex+0x3b0/0x4e0 [ 77.461294][ T5517] ? rtnl_newlink+0xf2/0x20a0 [ 77.465996][ T5517] should_failslab+0x9/0x20 [ 77.470519][ T5517] kmalloc_trace_noprof+0x6c/0x2c0 [ 77.475670][ T5517] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.480720][ T5517] rtnl_newlink+0xf2/0x20a0 [ 77.485268][ T5517] ? __mutex_trylock_common+0x183/0x2e0 [ 77.490834][ T5517] ? __pfx___might_resched+0x10/0x10 [ 77.496145][ T5517] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.501202][ T5517] ? __pfx___mutex_trylock_common+0x10/0x10 [ 77.507125][ T5517] ? rcu_is_watching+0x15/0xb0 [ 77.511905][ T5517] ? trace_contention_end+0x3c/0x120 [ 77.517204][ T5517] ? __mutex_lock+0x2ef/0xd70 [ 77.521895][ T5517] ? rcu_read_unlock+0x87/0xa0 [ 77.526664][ T5517] ? rtnetlink_rcv_msg+0x842/0x1180 [ 77.531860][ T5517] ? __pfx_lock_release+0x10/0x10 [ 77.536879][ T5517] ? __pfx___mutex_lock+0x10/0x10 [ 77.541910][ T5517] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.546928][ T5517] rtnetlink_rcv_msg+0x89b/0x1180 [ 77.551946][ T5517] ? rtnetlink_rcv_msg+0x208/0x1180 [ 77.557133][ T5517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.562586][ T5517] ? __local_bh_enable_ip+0x168/0x200 [ 77.567949][ T5517] ? lockdep_hardirqs_on+0x99/0x150 [ 77.573145][ T5517] ? __local_bh_enable_ip+0x168/0x200 [ 77.578505][ T5517] ? dev_hard_start_xmit+0x773/0x7e0 [ 77.583782][ T5517] ? __dev_queue_xmit+0x2da/0x3e90 [ 77.588886][ T5517] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 77.594599][ T5517] ? __dev_queue_xmit+0x2da/0x3e90 [ 77.599718][ T5517] ? __dev_queue_xmit+0x1763/0x3e90 [ 77.604909][ T5517] ? kasan_save_track+0x51/0x80 [ 77.609754][ T5517] ? do_syscall_64+0xf3/0x230 [ 77.614425][ T5517] ? __dev_queue_xmit+0x2da/0x3e90 [ 77.619533][ T5517] ? __pfx___dev_queue_xmit+0x10/0x10 [ 77.624919][ T5517] ? ref_tracker_free+0x643/0x7e0 [ 77.629944][ T5517] netlink_rcv_skb+0x1e3/0x430 [ 77.634701][ T5517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.640151][ T5517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.645454][ T5517] ? netlink_deliver_tap+0x2e/0x1b0 [ 77.650643][ T5517] netlink_unicast+0x7f0/0x990 [ 77.655402][ T5517] ? __pfx_netlink_unicast+0x10/0x10 [ 77.660681][ T5517] ? __virt_addr_valid+0x183/0x520 [ 77.665791][ T5517] ? __check_object_size+0x49c/0x900 [ 77.671071][ T5517] ? bpf_lsm_netlink_send+0x9/0x10 [ 77.676178][ T5517] netlink_sendmsg+0x8e4/0xcb0 [ 77.680943][ T5517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.686426][ T5517] ? __import_iovec+0x536/0x820 [ 77.691284][ T5517] ? aa_sock_msg_perm+0x91/0x160 [ 77.696219][ T5517] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 77.701584][ T5517] ? security_socket_sendmsg+0x87/0xb0 [ 77.707046][ T5517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.712421][ T5517] __sock_sendmsg+0x221/0x270 [ 77.717107][ T5517] ____sys_sendmsg+0x525/0x7d0 [ 77.721979][ T5517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.727291][ T5517] __sys_sendmsg+0x2b0/0x3a0 [ 77.732057][ T5517] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.737161][ T5517] ? vfs_write+0x7c4/0xc90 [ 77.741624][ T5517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.747946][ T5517] ? do_syscall_64+0x100/0x230 [ 77.752709][ T5517] ? do_syscall_64+0xb6/0x230 [ 77.757393][ T5517] do_syscall_64+0xf3/0x230 [ 77.761886][ T5517] ? clear_bhb_loop+0x35/0x90 [ 77.766556][ T5517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.772437][ T5517] RIP: 0033:0x7fc49d775bd9 [ 77.776842][ T5517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.796612][ T5517] RSP: 002b:00007fc49e4fd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.805019][ T5517] RAX: ffffffffffffffda RBX: 00007fc49d903f60 RCX: 00007fc49d775bd9 [ 77.812984][ T5517] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 77.820942][ T5517] RBP: 00007fc49e4fd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.828903][ T5517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.836868][ T5517] R13: 000000000000000b R14: 00007fc49d903f60 R15: 00007ffe6e9608a8 [ 77.844843][ T5517] [ 77.984594][ T5517] __nla_validate_parse: 11 callbacks suppressed [ 77.984613][ T5517] netlink: 232 bytes leftover after parsing attributes in process `syz.1.115'. [ 78.059772][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 78.234247][ T5540] Cannot find add_set index 0 as target [ 78.309354][ T5548] Cannot find add_set index 0 as target [ 78.416648][ T5552] netlink: 2 bytes leftover after parsing attributes in process `syz.3.128'. [ 78.478462][ T5550] veth0_vlan: left promiscuous mode [ 78.653353][ T5545] delete_channel: no stack [ 78.663839][ T5538] delete_channel: no stack [ 78.809571][ T5101] bridge0: port 3(syz_tun) entered disabled state [ 78.895562][ T5101] syz_tun (unregistering): left allmulticast mode [ 78.917126][ T5101] syz_tun (unregistering): left promiscuous mode [ 78.931857][ T5101] bridge0: port 3(syz_tun) entered disabled state [ 78.999739][ T5570] ɶƣ0GCTw: entered promiscuous mode [ 79.077390][ T5570] ɶƣ0GC: entered promiscuous mode [ 79.102040][ T5570] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.134'. [ 79.371143][ T5577] FAULT_INJECTION: forcing a failure. [ 79.371143][ T5577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.406142][ T5577] CPU: 0 PID: 5577 Comm: syz.0.138 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 79.416188][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.426268][ T5577] Call Trace: [ 79.429557][ T5577] [ 79.432500][ T5577] dump_stack_lvl+0x241/0x360 [ 79.437345][ T5577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.442757][ T5577] ? __pfx__printk+0x10/0x10 [ 79.447375][ T5577] ? __pfx_lock_release+0x10/0x10 [ 79.452431][ T5577] should_fail_ex+0x3b0/0x4e0 [ 79.457225][ T5577] _copy_from_user+0x2f/0xe0 [ 79.461851][ T5577] copy_msghdr_from_user+0xae/0x680 [ 79.467138][ T5577] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 79.472982][ T5577] __sys_sendmsg+0x23d/0x3a0 [ 79.477685][ T5577] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.482819][ T5577] ? vfs_write+0x7c4/0xc90 [ 79.487385][ T5577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.493736][ T5577] ? do_syscall_64+0x100/0x230 [ 79.498525][ T5577] ? do_syscall_64+0xb6/0x230 [ 79.503222][ T5577] do_syscall_64+0xf3/0x230 [ 79.507741][ T5577] ? clear_bhb_loop+0x35/0x90 [ 79.512443][ T5577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.518346][ T5577] RIP: 0033:0x7f5d9ff75bd9 [ 79.522767][ T5577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.542386][ T5577] RSP: 002b:00007f5da0ca8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.550792][ T5577] RAX: ffffffffffffffda RBX: 00007f5da0103f60 RCX: 00007f5d9ff75bd9 [ 79.558784][ T5577] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 79.566751][ T5577] RBP: 00007f5da0ca80a0 R08: 0000000000000000 R09: 0000000000000000 [ 79.574810][ T5577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.582874][ T5577] R13: 000000000000000b R14: 00007f5da0103f60 R15: 00007ffe5b5550e8 [ 79.590850][ T5577] [ 79.690701][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.704246][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.721793][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.729890][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.738656][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.752167][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.946687][ T5587] netlink: 830 bytes leftover after parsing attributes in process `syz.0.142'. [ 80.274176][ T5603] FAULT_INJECTION: forcing a failure. [ 80.274176][ T5603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.289629][ T5603] CPU: 0 PID: 5603 Comm: syz.4.148 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 80.299654][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.309730][ T5603] Call Trace: [ 80.313030][ T5603] [ 80.315980][ T5603] dump_stack_lvl+0x241/0x360 [ 80.320683][ T5603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.325911][ T5603] ? __pfx__printk+0x10/0x10 [ 80.330523][ T5603] ? vfs_write+0x7c4/0xc90 [ 80.334972][ T5603] should_fail_ex+0x3b0/0x4e0 [ 80.339688][ T5603] _copy_from_user+0x2f/0xe0 [ 80.344286][ T5603] move_addr_to_kernel+0x82/0x150 [ 80.349336][ T5603] __sys_connect+0xc1/0x310 [ 80.353877][ T5603] ? __pfx___sys_connect+0x10/0x10 [ 80.359033][ T5603] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.365385][ T5603] ? do_syscall_64+0x100/0x230 [ 80.370158][ T5603] __x64_sys_connect+0x7a/0x90 [ 80.374925][ T5603] do_syscall_64+0xf3/0x230 [ 80.379431][ T5603] ? clear_bhb_loop+0x35/0x90 [ 80.384202][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.390092][ T5603] RIP: 0033:0x7f7d42375bd9 [ 80.394503][ T5603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.414108][ T5603] RSP: 002b:00007f7d431e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 80.422576][ T5603] RAX: ffffffffffffffda RBX: 00007f7d42503f60 RCX: 00007f7d42375bd9 [ 80.430659][ T5603] RDX: 000000000000001c RSI: 00000000200001c0 RDI: 0000000000000003 [ 80.438639][ T5603] RBP: 00007f7d431e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.446618][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.454585][ T5603] R13: 000000000000000b R14: 00007f7d42503f60 R15: 00007ffff5195708 [ 80.462568][ T5603] [ 80.556849][ T5580] chnl_net:caif_netlink_parms(): no params data found [ 80.788767][ T5620] FAULT_INJECTION: forcing a failure. [ 80.788767][ T5620] name failslab, interval 1, probability 0, space 0, times 0 [ 80.804291][ T5620] CPU: 1 PID: 5620 Comm: syz.2.153 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 80.814316][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.824394][ T5620] Call Trace: [ 80.827684][ T5620] [ 80.830636][ T5620] dump_stack_lvl+0x241/0x360 [ 80.835347][ T5620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.840665][ T5620] ? __pfx__printk+0x10/0x10 [ 80.845283][ T5620] ? __pfx___might_resched+0x10/0x10 [ 80.850601][ T5620] should_fail_ex+0x3b0/0x4e0 [ 80.855307][ T5620] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 80.861048][ T5620] should_failslab+0x9/0x20 [ 80.865581][ T5620] __kmalloc_noprof+0xd8/0x400 [ 80.870363][ T5620] ? kfree+0x4e/0x360 [ 80.874388][ T5620] tomoyo_realpath_from_path+0xcf/0x5e0 [ 80.879973][ T5620] tomoyo_path_number_perm+0x23a/0x880 [ 80.885555][ T5620] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.891213][ T5620] ? tomoyo_path_number_perm+0x208/0x880 [ 80.896880][ T5620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.902893][ T5620] ? sb_end_write+0xe9/0x1c0 [ 80.907501][ T5620] ? vfs_write+0x7c4/0xc90 [ 80.911932][ T5620] ? __pfx_vfs_write+0x10/0x10 [ 80.916742][ T5620] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.922752][ T5620] security_file_ioctl+0x75/0xb0 [ 80.927711][ T5620] __se_sys_ioctl+0x47/0x170 [ 80.932308][ T5620] do_syscall_64+0xf3/0x230 [ 80.936820][ T5620] ? clear_bhb_loop+0x35/0x90 [ 80.941489][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.947381][ T5620] RIP: 0033:0x7f2fd3175bd9 [ 80.951801][ T5620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.971428][ T5620] RSP: 002b:00007f2fd3e97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.979864][ T5620] RAX: ffffffffffffffda RBX: 00007f2fd3303f60 RCX: 00007f2fd3175bd9 [ 80.987832][ T5620] RDX: 0000000000000000 RSI: 0000000000005761 RDI: 0000000000000003 [ 80.995815][ T5620] RBP: 00007f2fd3e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.003801][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.011777][ T5620] R13: 000000000000000b R14: 00007f2fd3303f60 R15: 00007fffdb891048 [ 81.019786][ T5620] [ 81.028146][ T5620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.064895][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.092790][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.130618][ T5580] bridge_slave_0: entered allmulticast mode [ 81.156006][ T5580] bridge_slave_0: entered promiscuous mode [ 81.193040][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.210620][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.219783][ T5580] bridge_slave_1: entered allmulticast mode [ 81.228051][ T5580] bridge_slave_1: entered promiscuous mode [ 81.293961][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.309366][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.321975][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 81.415774][ T5580] team0: Port device team_slave_0 added [ 81.429780][ T5580] team0: Port device team_slave_1 added [ 81.504694][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.531796][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.621812][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.686090][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 81.704485][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.721769][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.811081][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.844028][ T5100] Bluetooth: hci4: command tx timeout [ 81.850972][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 81.909278][ T5661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 81.940747][ T5649] bridge1: entered promiscuous mode [ 81.952119][ T5649] vlan0: entered promiscuous mode [ 81.964746][ T5649] bridge1: port 1(vlan0) entered blocking state [ 81.977403][ T5661] tipc: Failed to remove unknown binding: 66,1,1/0:1563751888/1563751890 [ 81.986610][ T5649] bridge1: port 1(vlan0) entered disabled state [ 81.987537][ T5661] tipc: Failed to remove unknown binding: 66,1,1/0:1563751888/1563751890 [ 82.027961][ T5649] vlan0: entered allmulticast mode [ 82.034420][ T5649] bridge1: entered allmulticast mode [ 82.059008][ T5649] vlan0: left allmulticast mode [ 82.066145][ T5649] bridge1: left allmulticast mode [ 82.076968][ T5649] bridge1: left promiscuous mode [ 82.231548][ T5580] hsr_slave_0: entered promiscuous mode [ 82.267183][ T5580] hsr_slave_1: entered promiscuous mode [ 82.297701][ T5580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.320669][ T5580] Cannot create hsr debugfs directory [ 82.520136][ T5682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.173'. [ 82.780432][ T5580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.841006][ T5693] Illegal XDP return value 4294967262 on prog (id 71) dev N/A, expect packet loss! [ 82.894142][ T5580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.992988][ T5580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.095521][ T5580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.124845][ T5700] __nla_validate_parse: 1 callbacks suppressed [ 83.124864][ T5700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 83.174497][ T5700] tipc: Failed to remove unknown binding: 66,1,1/0:3753439378/3753439380 [ 83.181782][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 83.192147][ T5700] tipc: Failed to remove unknown binding: 66,1,1/0:3753439378/3753439380 [ 83.197967][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 83.317454][ T5704] team_slave_0: entered promiscuous mode [ 83.337596][ T5704] team_slave_0: entered allmulticast mode [ 83.372803][ T5704] team0: Port device team_slave_0 removed [ 83.584991][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.641313][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.675040][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.702932][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.743708][ T5727] FAULT_INJECTION: forcing a failure. [ 83.743708][ T5727] name failslab, interval 1, probability 0, space 0, times 0 [ 83.807067][ T5727] CPU: 0 PID: 5727 Comm: syz.4.190 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 83.817187][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.827271][ T5727] Call Trace: [ 83.830580][ T5727] [ 83.833533][ T5727] dump_stack_lvl+0x241/0x360 [ 83.838248][ T5727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.843475][ T5727] ? __pfx__printk+0x10/0x10 [ 83.848099][ T5727] ? __pfx___might_resched+0x10/0x10 [ 83.853430][ T5727] should_fail_ex+0x3b0/0x4e0 [ 83.858145][ T5727] ? skcipher_next_slow+0x117/0x480 [ 83.863376][ T5727] should_failslab+0x9/0x20 [ 83.867908][ T5727] __kmalloc_noprof+0xd8/0x400 [ 83.872700][ T5727] ? __pfx___might_resched+0x10/0x10 [ 83.878009][ T5727] skcipher_next_slow+0x117/0x480 [ 83.883043][ T5727] skcipher_walk_next+0x634/0xba0 [ 83.888068][ T5727] xts_xor_tweak+0x48b/0x850 [ 83.892665][ T5727] ? __pfx_xts_xor_tweak+0x10/0x10 [ 83.897789][ T5727] ? af_alg_pull_tsgl+0x8ac/0x990 [ 83.902813][ T5727] xts_decrypt+0x245/0x3a0 [ 83.907229][ T5727] skcipher_recvmsg+0xbee/0x1230 [ 83.912176][ T5727] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 83.917540][ T5727] ? aa_sock_msg_perm+0x91/0x160 [ 83.922474][ T5727] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 83.927746][ T5727] ? security_socket_recvmsg+0x90/0xb0 [ 83.933195][ T5727] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 83.938561][ T5727] sock_recvmsg+0x22f/0x280 [ 83.943062][ T5727] ____sys_recvmsg+0x1db/0x470 [ 83.947827][ T5727] ? __pfx_____sys_recvmsg+0x10/0x10 [ 83.953120][ T5727] do_recvmmsg+0x474/0xae0 [ 83.957532][ T5727] ? __pfx_lock_release+0x10/0x10 [ 83.962562][ T5727] ? __pfx_do_recvmmsg+0x10/0x10 [ 83.967544][ T5727] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 83.973453][ T5727] ? ksys_write+0x23e/0x2c0 [ 83.977970][ T5727] ? __pfx_lock_release+0x10/0x10 [ 83.982992][ T5727] ? vfs_write+0x7c4/0xc90 [ 83.987403][ T5727] ? __mutex_unlock_slowpath+0x21d/0x750 [ 83.993038][ T5727] ? __fget_files+0x3f6/0x470 [ 83.997722][ T5727] __x64_sys_recvmmsg+0x199/0x250 [ 84.002758][ T5727] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 84.008387][ T5727] ? do_syscall_64+0x100/0x230 [ 84.013146][ T5727] ? do_syscall_64+0xb6/0x230 [ 84.017816][ T5727] do_syscall_64+0xf3/0x230 [ 84.022309][ T5727] ? clear_bhb_loop+0x35/0x90 [ 84.027001][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.032884][ T5727] RIP: 0033:0x7f7d42375bd9 [ 84.037290][ T5727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.056911][ T5727] RSP: 002b:00007f7d431e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 84.065321][ T5727] RAX: ffffffffffffffda RBX: 00007f7d42503f60 RCX: 00007f7d42375bd9 [ 84.073375][ T5727] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000004 [ 84.081347][ T5727] RBP: 00007f7d431e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.089322][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.097285][ T5727] R13: 000000000000000b R14: 00007f7d42503f60 R15: 00007ffff5195708 [ 84.105271][ T5727] [ 84.124423][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 84.147435][ T5100] Bluetooth: hci4: command tx timeout [ 84.170592][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.231348][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 84.243172][ T5730] tipc: Failed to remove unknown binding: 66,1,1/0:4135570893/4135570895 [ 84.290560][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 84.299849][ T5730] tipc: Failed to remove unknown binding: 66,1,1/0:4135570893/4135570895 [ 84.396965][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.418847][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.426786][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.451439][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.458701][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.649681][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 84.673853][ T5753] netlink: 5288 bytes leftover after parsing attributes in process `syz.4.196'. [ 84.677571][ T5138] IPVS: starting estimator thread 0... [ 84.701503][ T5750] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 84.703951][ T5753] openvswitch: netlink: IP tunnel dst address not specified [ 84.790552][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 84.810458][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 84.822109][ T5755] IPVS: using max 18 ests per chain, 43200 per kthread [ 84.890146][ T5762] bridge3: entered promiscuous mode [ 84.906808][ T5762] vlan1: entered promiscuous mode [ 84.913891][ T5762] bridge3: port 1(vlan1) entered blocking state [ 84.920487][ T5762] bridge3: port 1(vlan1) entered disabled state [ 84.928122][ T5762] vlan1: entered allmulticast mode [ 84.936806][ T5762] bridge3: entered allmulticast mode [ 84.954587][ T5762] vlan1: left allmulticast mode [ 84.966248][ T5762] bridge3: left allmulticast mode [ 84.988427][ T5762] bridge3: left promiscuous mode [ 85.041277][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.188408][ T5580] veth0_vlan: entered promiscuous mode [ 85.217643][ T5580] veth1_vlan: entered promiscuous mode [ 85.284437][ T5580] veth0_macvtap: entered promiscuous mode [ 85.319909][ T5580] veth1_macvtap: entered promiscuous mode [ 85.362883][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.383278][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.409938][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.438164][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.474305][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.497638][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.534121][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.549339][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.560857][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.577673][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.589940][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.629024][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.658429][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.683357][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.698646][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.711102][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.728482][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.738669][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.756416][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.768855][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.800489][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.818642][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.840372][ T5580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850571][ T5580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860416][ T5580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.871162][ T5580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.068804][ T5795] FAULT_INJECTION: forcing a failure. [ 86.068804][ T5795] name failslab, interval 1, probability 0, space 0, times 0 [ 86.099875][ T5795] CPU: 1 PID: 5795 Comm: syz.4.210 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 86.109910][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 86.112870][ T2446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.119962][ T5795] Call Trace: [ 86.119991][ T5795] [ 86.120000][ T5795] dump_stack_lvl+0x241/0x360 [ 86.120035][ T5795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.120053][ T5795] ? __pfx__printk+0x10/0x10 [ 86.120074][ T5795] ? __pfx___might_resched+0x10/0x10 [ 86.120104][ T5795] should_fail_ex+0x3b0/0x4e0 [ 86.120132][ T5795] ? skcipher_next_slow+0x117/0x480 [ 86.120154][ T5795] should_failslab+0x9/0x20 [ 86.120178][ T5795] __kmalloc_noprof+0xd8/0x400 [ 86.120195][ T5795] ? __pfx___might_resched+0x10/0x10 [ 86.120220][ T5795] skcipher_next_slow+0x117/0x480 [ 86.120251][ T5795] skcipher_walk_next+0x634/0xba0 [ 86.120287][ T5795] ecb_decrypt+0x2c4/0x390 [ 86.120316][ T5795] ? __pfx_ecb_decrypt+0x10/0x10 [ 86.120350][ T5795] ? af_alg_pull_tsgl+0x8ac/0x990 [ 86.120370][ T5795] ? simd_skcipher_decrypt+0x55/0x130 [ 86.120394][ T5795] ? __asan_memcpy+0x40/0x70 [ 86.120412][ T5795] ? irq_fpu_usable+0x87/0xa0 [ 86.120430][ T5795] ? cryptd_skcipher_child+0xd/0x40 [ 86.120457][ T5795] xts_decrypt+0x264/0x3a0 [ 86.120481][ T5795] skcipher_recvmsg+0xbee/0x1230 [ 86.131634][ T5795] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 86.131661][ T5795] ? aa_sock_msg_perm+0x91/0x160 [ 86.131691][ T5795] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 86.131710][ T5795] ? security_socket_recvmsg+0x90/0xb0 [ 86.131731][ T5795] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 86.131756][ T5795] sock_recvmsg+0x22f/0x280 [ 86.131783][ T5795] ____sys_recvmsg+0x1db/0x470 [ 86.131818][ T5795] ? __pfx_____sys_recvmsg+0x10/0x10 [ 86.131868][ T5795] do_recvmmsg+0x474/0xae0 [ 86.131900][ T5795] ? __pfx_lock_release+0x10/0x10 [ 86.131924][ T5795] ? __pfx_do_recvmmsg+0x10/0x10 [ 86.131990][ T5795] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 86.132020][ T5795] ? ksys_write+0x23e/0x2c0 [ 86.132048][ T5795] ? __pfx_lock_release+0x10/0x10 [ 86.132074][ T5795] ? vfs_write+0x7c4/0xc90 [ 86.132110][ T5795] ? __mutex_unlock_slowpath+0x21d/0x750 [ 86.132147][ T5795] ? __fget_files+0x3f6/0x470 [ 86.132188][ T5795] __x64_sys_recvmmsg+0x199/0x250 [ 86.132216][ T5795] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 86.132248][ T5795] ? do_syscall_64+0x100/0x230 [ 86.132271][ T5795] ? do_syscall_64+0xb6/0x230 [ 86.132291][ T5795] do_syscall_64+0xf3/0x230 [ 86.132309][ T5795] ? clear_bhb_loop+0x35/0x90 [ 86.132333][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.132352][ T5795] RIP: 0033:0x7f7d42375bd9 [ 86.148433][ T2446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.149705][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.149724][ T5795] RSP: 002b:00007f7d431e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 86.149746][ T5795] RAX: ffffffffffffffda RBX: 00007f7d42503f60 RCX: 00007f7d42375bd9 [ 86.163188][ T5100] Bluetooth: hci4: command tx timeout [ 86.164848][ T5795] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000004 [ 86.164865][ T5795] RBP: 00007f7d431e10a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.164878][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.164889][ T5795] R13: 000000000000000b R14: 00007f7d42503f60 R15: 00007ffff5195708 [ 86.211508][ T2446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.213843][ T5795] [ 86.466536][ T2446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.856739][ T5807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.857736][ T5816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 86.896163][ T5812] netlink: 'syz.4.216': attribute type 5 has an invalid length. [ 87.065928][ T5826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.069449][ T5825] Cannot find add_set index 0 as target [ 87.126898][ T5824] delete_channel: no stack [ 87.708659][ T5842] bridge1: entered promiscuous mode [ 87.715303][ T5842] vlan0: entered promiscuous mode [ 87.721350][ T5842] bridge1: port 1(vlan0) entered blocking state [ 87.727891][ T5842] bridge1: port 1(vlan0) entered disabled state [ 87.735528][ T5842] vlan0: entered allmulticast mode [ 87.740667][ T5842] bridge1: entered allmulticast mode [ 87.747506][ T5842] vlan0: left allmulticast mode [ 87.752509][ T5842] bridge1: left allmulticast mode [ 87.759800][ T5842] bridge1: left promiscuous mode [ 87.910364][ T5849] syz.4.227[5849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.910504][ T5849] syz.4.227[5849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.924958][ T5848] syz.4.227[5848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.932138][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.937764][ T5847] syz.4.227[5847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.961385][ T5848] syz.4.227[5848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.047901][ T5852] tipc: Failed to remove unknown binding: 66,1,1/1:2448109265/2448109267 [ 88.069458][ T5852] tipc: Failed to remove unknown binding: 66,1,1/1:2448109265/2448109267 [ 88.451025][ T5867] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 88.474625][ T5870] __nla_validate_parse: 9 callbacks suppressed [ 88.474642][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 88.556045][ T5874] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.234'. [ 88.599089][ T5867] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 88.829749][ T5879] bridge0: port 3(bond0) entered blocking state [ 88.852584][ T5879] bridge0: port 3(bond0) entered disabled state [ 88.879576][ T5879] bond0: entered allmulticast mode [ 88.901829][ T5879] bond_slave_0: entered allmulticast mode [ 88.912232][ T5879] bond_slave_1: entered allmulticast mode [ 88.923756][ T5879] bond0: entered promiscuous mode [ 88.928847][ T5879] bond_slave_0: entered promiscuous mode [ 88.982074][ T5879] bond_slave_1: entered promiscuous mode [ 89.003098][ T5879] bridge0: port 3(bond0) entered blocking state [ 89.009890][ T5879] bridge0: port 3(bond0) entered forwarding state [ 89.216958][ T5883] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.389175][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.403371][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.842397][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.852062][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.860114][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.869382][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.877894][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.885673][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.116376][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 90.250936][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.258105][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.275207][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.283974][ T5917] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 90.288198][ T5907] bridge_slave_0: entered allmulticast mode [ 90.299595][ T5907] bridge_slave_0: entered promiscuous mode [ 90.311958][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.320372][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.329436][ T5907] bridge_slave_1: entered allmulticast mode [ 90.337376][ T5907] bridge_slave_1: entered promiscuous mode [ 90.370189][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.384744][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.459311][ T5907] team0: Port device team_slave_0 added [ 90.485659][ T5907] team0: Port device team_slave_1 added [ 90.565535][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.679703][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 90.700679][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 90.792146][ T5930] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.249'. [ 90.814588][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.862579][ T5928] ɶƣ0GCTw: entered promiscuous mode [ 90.925513][ T5929] bridge2: entered promiscuous mode [ 90.936574][ T5929] vlan0: entered promiscuous mode [ 90.943666][ T5929] bridge2: port 1(vlan0) entered blocking state [ 90.950411][ T5929] bridge2: port 1(vlan0) entered disabled state [ 90.957713][ T5929] vlan0: entered allmulticast mode [ 90.967485][ T5929] bridge2: entered allmulticast mode [ 90.992296][ T5929] vlan0: left allmulticast mode [ 90.997216][ T5929] bridge2: left allmulticast mode [ 91.008597][ T5929] bridge2: left promiscuous mode [ 91.076882][ T5923] ɶƣ0GC: entered promiscuous mode [ 91.183816][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.223451][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.230642][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.352052][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.403461][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.418536][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.491431][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.536982][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 91.591883][ T5957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.670002][ T5907] hsr_slave_0: entered promiscuous mode [ 91.677292][ T5907] hsr_slave_1: entered promiscuous mode [ 91.697368][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.705682][ T5907] Cannot create hsr debugfs directory [ 91.834993][ T51] bridge_slave_1: left allmulticast mode [ 91.848552][ T51] bridge_slave_1: left promiscuous mode [ 91.861362][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.878690][ T51] bridge_slave_0: left allmulticast mode [ 91.884805][ T51] bridge_slave_0: left promiscuous mode [ 91.890693][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.925048][ T5093] Bluetooth: hci4: command tx timeout [ 91.984036][ T5952] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.274447][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.286859][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.299046][ T51] bond0 (unregistering): Released all slaves [ 92.483145][ T5965] netlink: 'syz.4.261': attribute type 5 has an invalid length. [ 92.539458][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 92.874539][ T5974] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.265'. [ 92.883201][ T5975] ɶƣ0GCTw: entered promiscuous mode [ 93.061163][ T5978] ɶƣ0GC: entered promiscuous mode [ 93.363698][ T5989] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 93.451013][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.467134][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.483886][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.495240][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.504033][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.516017][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.640821][ T51] hsr_slave_0: left promiscuous mode [ 93.659323][ T51] hsr_slave_1: left promiscuous mode [ 93.667087][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.674904][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.690413][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.699481][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.729296][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'. [ 93.743277][ T51] veth1_macvtap: left promiscuous mode [ 93.750144][ T51] veth0_macvtap: left promiscuous mode [ 93.761951][ T51] veth1_vlan: left promiscuous mode [ 93.767995][ T6010] tipc: Failed to remove unknown binding: 66,1,1/0:3022767671/3022767673 [ 93.774628][ T51] veth0_vlan: left promiscuous mode [ 93.784018][ T6010] tipc: Failed to remove unknown binding: 66,1,1/0:3022767671/3022767673 [ 94.002293][ T5100] Bluetooth: hci4: command tx timeout [ 94.279715][ T51] team0 (unregistering): Port device team_slave_1 removed [ 94.324006][ T51] team0 (unregistering): Port device team_slave_0 removed [ 95.192002][ T6033] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 95.574634][ T6023] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.611934][ T5100] Bluetooth: hci3: command tx timeout [ 95.770831][ T2423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.905137][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 96.006559][ T2423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.084749][ T5100] Bluetooth: hci4: command tx timeout [ 96.118525][ T5907] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.150236][ T5907] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.179874][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 96.327227][ T6084] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 96.373801][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'. [ 96.398070][ T6085] tipc: Failed to remove unknown binding: 66,1,1/0:548612339/548612341 [ 96.408052][ T6085] tipc: Failed to remove unknown binding: 66,1,1/0:548612339/548612341 [ 96.521211][ T2423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592472][ T5907] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.619625][ T5907] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.749754][ T2423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.844537][ T6097] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 96.863194][ T6094] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 96.903391][ T6094] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.283'. [ 96.932959][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.940142][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.954775][ T6104] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 96.960228][ T5996] bridge_slave_0: entered allmulticast mode [ 96.984187][ T5996] bridge_slave_0: entered promiscuous mode [ 97.005408][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.014879][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.061000][ T5996] bridge_slave_1: entered allmulticast mode [ 97.093739][ T5996] bridge_slave_1: entered promiscuous mode [ 97.172887][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.264272][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.330288][ T6113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.411121][ T5996] team0: Port device team_slave_0 added [ 97.430981][ T5996] team0: Port device team_slave_1 added [ 97.467961][ T6116] netlink: 5 bytes leftover after parsing attributes in process `syz.1.289'. [ 97.479780][ T6116] 0XD: renamed from gretap0 (while UP) [ 97.490117][ T6116] 0XD: entered allmulticast mode [ 97.575607][ T2423] bridge_slave_1: left allmulticast mode [ 97.578181][ T6121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.589436][ T2423] bridge_slave_1: left promiscuous mode [ 97.606400][ T2423] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.620686][ T2423] bridge_slave_0: left allmulticast mode [ 97.628740][ T2423] bridge_slave_0: left promiscuous mode [ 97.644324][ T2423] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.682051][ T5100] Bluetooth: hci3: command tx timeout [ 97.908817][ T6112] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.161839][ T5100] Bluetooth: hci4: command tx timeout [ 98.200659][ T6140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.299891][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'. [ 98.341214][ T2423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.362710][ T6148] tipc: Failed to remove unknown binding: 66,1,1/1:1069600932/1069600934 [ 98.371201][ T6148] tipc: Failed to remove unknown binding: 66,1,1/1:1069600932/1069600934 [ 98.399029][ T2423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.427860][ T2423] bond0 (unregistering): Released all slaves [ 98.464488][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.482001][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.562292][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.704715][ T2423] ɶƣ0GCTw: left promiscuous mode [ 98.812293][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.821107][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.891905][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.926609][ T6166] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.954055][ T2423] ɶƣ0GC: left promiscuous mode [ 99.080447][ T5996] hsr_slave_0: entered promiscuous mode [ 99.100164][ T5996] hsr_slave_1: entered promiscuous mode [ 99.166499][ T5996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.175203][ T5996] Cannot create hsr debugfs directory [ 99.184298][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 99.320945][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.578605][ T6184] netlink: 5 bytes leftover after parsing attributes in process `syz.1.299'. [ 99.605344][ T6184] 1XD: renamed from 00XD (while UP) [ 99.699945][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.761832][ T5100] Bluetooth: hci3: command tx timeout [ 99.770770][ T2423] hsr_slave_0: left promiscuous mode [ 99.784865][ T2423] hsr_slave_1: left promiscuous mode [ 99.801440][ T2423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.823167][ T2423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.854703][ T2423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.885219][ T2423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.898740][ T2423] batman_adv: batadv0: Removing interface: ipvlan2 [ 99.950357][ T2423] veth1_macvtap: left promiscuous mode [ 99.961589][ T2423] veth0_macvtap: left promiscuous mode [ 99.971224][ T2423] veth1_vlan: left promiscuous mode [ 99.979541][ T2423] veth0_vlan: left promiscuous mode [ 100.238465][ T6190] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.446691][ T2423] team0 (unregistering): Port device team_slave_1 removed [ 100.485989][ T2423] team0 (unregistering): Port device team_slave_0 removed [ 100.816344][ T6205] netlink: 'syz.1.302': attribute type 6 has an invalid length. [ 100.976387][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.983716][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.036996][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 101.048688][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.056277][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.119801][ T6212] tipc: Failed to remove unknown binding: 66,1,1/0:2628649176/2628649178 [ 101.141190][ T6212] tipc: Failed to remove unknown binding: 66,1,1/0:2628649176/2628649178 [ 101.244065][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 101.364420][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 101.404986][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 101.697478][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 101.731462][ T6248] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 101.755345][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 101.846014][ T5100] Bluetooth: hci3: command tx timeout [ 101.855554][ T6244] bridge2: entered promiscuous mode [ 101.859061][ T6243] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.311'. [ 101.860880][ T6244] vlan0: entered promiscuous mode [ 101.957616][ T6244] bridge2: port 1(vlan0) entered blocking state [ 101.985383][ T6244] bridge2: port 1(vlan0) entered disabled state [ 102.002094][ T6244] vlan0: entered allmulticast mode [ 102.009669][ T6244] bridge2: entered allmulticast mode [ 102.026367][ T6244] vlan0: left allmulticast mode [ 102.038606][ T6244] bridge2: left allmulticast mode [ 102.048851][ T6244] bridge2: left promiscuous mode [ 102.088935][ T6237] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 102.182219][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.274363][ T5996] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.327659][ T5996] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.371515][ T5996] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.410573][ T6261] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 102.428470][ T5996] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.452946][ T6266] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 102.475347][ T6256] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 102.489394][ T6261] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 102.489930][ T5907] veth0_vlan: entered promiscuous mode [ 102.515993][ T6269] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.313'. [ 102.539165][ T6263] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 102.614925][ T5907] veth1_vlan: entered promiscuous mode [ 102.760279][ T5907] veth0_macvtap: entered promiscuous mode [ 102.798074][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.838655][ T5907] veth1_macvtap: entered promiscuous mode [ 102.900056][ T6281] tipc: Failed to remove unknown binding: 66,1,1/1:346068785/346068787 [ 102.908549][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.914102][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.926593][ T6281] tipc: Failed to remove unknown binding: 66,1,1/1:346068785/346068787 [ 102.956635][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.971044][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.981800][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.991835][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.006642][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.018745][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.030160][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.060737][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.096563][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.103784][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.128676][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.149212][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.177274][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.197572][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.231713][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.248764][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.258823][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.276790][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.295001][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.315498][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.322701][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.352941][ T5907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.384434][ T5907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.406953][ T5907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.420787][ T5907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.486327][ T6297] bridge3: entered promiscuous mode [ 103.512777][ T6297] vlan0: entered promiscuous mode [ 103.519226][ T6297] bridge3: port 1(vlan0) entered blocking state [ 103.573092][ T6297] bridge3: port 1(vlan0) entered disabled state [ 103.580487][ T6297] vlan0: entered allmulticast mode [ 103.585958][ T6297] bridge3: entered allmulticast mode [ 103.593716][ T6297] vlan0: left allmulticast mode [ 103.598611][ T6297] bridge3: left allmulticast mode [ 103.619055][ T6297] bridge3: left promiscuous mode [ 103.686524][ T6308] bridge: RTM_NEWNEIGH with invalid ether address [ 103.851457][ T5996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.946379][ T6318] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 104.060580][ T6318] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 104.076479][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.100756][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.112313][ T6330] [ 104.114688][ T6330] ====================================================== [ 104.121712][ T6330] WARNING: possible circular locking dependency detected [ 104.128734][ T6330] 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 Not tainted [ 104.135845][ T6330] ------------------------------------------------------ [ 104.142871][ T6330] syz.4.327/6330 is trying to acquire lock: [ 104.144597][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.148749][ T6330] ffff88802c5ba218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}, at: __dev_queue_xmit+0x2353/0x3e90 [ 104.157401][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.168704][ T6330] [ 104.168704][ T6330] but task is already holding lock: [ 104.168714][ T6330] ffff88801f47e4d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 104.168766][ T6330] [ 104.168766][ T6330] which lock already depends on the new lock. [ 104.168766][ T6330] [ 104.168772][ T6330] [ 104.168772][ T6330] the existing dependency chain (in reverse order) is: [ 104.168778][ T6330] [ 104.168778][ T6330] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}: [ 104.220995][ T6330] lock_acquire+0x1ed/0x550 [ 104.226029][ T6330] _raw_spin_lock+0x2e/0x40 [ 104.231061][ T6330] sch_direct_xmit+0x1c4/0x5f0 [ 104.236354][ T6330] __dev_queue_xmit+0x1a7f/0x3e90 [ 104.242076][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.247699][ T6330] ip6_finish_output+0x41e/0x810 [ 104.253153][ T6330] NF_HOOK+0x9e/0x430 [ 104.257659][ T6330] mld_sendpack+0x843/0xdb0 [ 104.262689][ T6330] mld_ifc_work+0x7d6/0xd90 [ 104.267708][ T6330] process_scheduled_works+0xa2c/0x1830 [ 104.273763][ T6330] worker_thread+0x86d/0xd50 [ 104.278867][ T6330] kthread+0x2f0/0x390 [ 104.283476][ T6330] ret_from_fork+0x4b/0x80 [ 104.288407][ T6330] ret_from_fork_asm+0x1a/0x30 [ 104.293690][ T6330] [ 104.293690][ T6330] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}: [ 104.304054][ T6330] validate_chain+0x18e0/0x5900 [ 104.309414][ T6330] __lock_acquire+0x1346/0x1fd0 [ 104.314775][ T6330] lock_acquire+0x1ed/0x550 [ 104.319794][ T6330] _raw_spin_lock+0x2e/0x40 [ 104.324812][ T6330] __dev_queue_xmit+0x2353/0x3e90 [ 104.330365][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.335985][ T6330] ip6_finish_output+0x41e/0x810 [ 104.341523][ T6330] ndisc_send_skb+0xab2/0x1380 [ 104.346801][ T6330] ndisc_solicit+0x493/0x6a0 [ 104.351908][ T6330] __neigh_event_send+0xece/0x15b0 [ 104.357545][ T6330] neigh_resolve_output+0x1b5/0x740 [ 104.363260][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.368881][ T6330] ip6_finish_output+0x41e/0x810 [ 104.374343][ T6330] ip6_send_skb+0x112/0x230 [ 104.379371][ T6330] icmp6_send+0x15fc/0x2070 [ 104.384388][ T6330] ip6_link_failure+0x3c/0x4f0 [ 104.389664][ T6330] ip_tunnel_xmit+0x1653/0x2950 [ 104.395032][ T6330] __gre_xmit+0x1cf/0x260 [ 104.399870][ T6330] erspan_xmit+0xabe/0x1310 [ 104.404882][ T6330] dev_hard_start_xmit+0x27a/0x7e0 [ 104.410506][ T6330] sch_direct_xmit+0x2b6/0x5f0 [ 104.415776][ T6330] __qdisc_run+0xbfd/0x2170 [ 104.421018][ T6330] __dev_queue_xmit+0x1119/0x3e90 [ 104.426573][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.432203][ T6330] ip6_finish_output+0x41e/0x810 [ 104.437655][ T6330] rawv6_send_hdrinc+0xcfc/0x1890 [ 104.443188][ T6330] rawv6_sendmsg+0x1962/0x23c0 [ 104.448464][ T6330] __sock_sendmsg+0x1a6/0x270 [ 104.453656][ T6330] ____sys_sendmsg+0x525/0x7d0 [ 104.458938][ T6330] __sys_sendmsg+0x2b0/0x3a0 [ 104.464040][ T6330] do_syscall_64+0xf3/0x230 [ 104.469050][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.475540][ T6330] [ 104.475540][ T6330] other info that might help us debug this: [ 104.475540][ T6330] [ 104.485770][ T6330] Possible unsafe locking scenario: [ 104.485770][ T6330] [ 104.493213][ T6330] CPU0 CPU1 [ 104.498565][ T6330] ---- ---- [ 104.503913][ T6330] lock(&qdisc_xmit_lock_key#3); [ 104.508937][ T6330] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 104.518557][ T6330] lock(&qdisc_xmit_lock_key#3); [ 104.526095][ T6330] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 104.533198][ T6330] [ 104.533198][ T6330] *** DEADLOCK *** [ 104.533198][ T6330] [ 104.541346][ T6330] 10 locks held by syz.4.327/6330: [ 104.546439][ T6330] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0xb7a/0x1890 [ 104.556186][ T6330] #1: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 104.566039][ T6330] #2: ffffffff8e333fc0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2da/0x3e90 [ 104.576042][ T6330] #3: ffff88801f47e4d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 104.586306][ T6330] #4: ffff88802a3881d8 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc45/0x2070 [ 104.595691][ T6330] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xba4/0x2070 [ 104.604814][ T6330] #6: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 104.614631][ T6330] #7: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x574/0x1380 [ 104.624108][ T6330] #8: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 104.633944][ T6330] #9: ffffffff8e333fc0 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2da/0x3e90 [ 104.644133][ T6330] [ 104.644133][ T6330] stack backtrace: [ 104.650007][ T6330] CPU: 0 PID: 6330 Comm: syz.4.327 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 104.659981][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.670028][ T6330] Call Trace: [ 104.673300][ T6330] [ 104.676225][ T6330] dump_stack_lvl+0x241/0x360 [ 104.680897][ T6330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.686173][ T6330] ? print_circular_bug+0x130/0x1a0 [ 104.691537][ T6330] check_noncircular+0x36a/0x4a0 [ 104.696561][ T6330] ? __pfx_check_noncircular+0x10/0x10 [ 104.702008][ T6330] ? __bfs+0x368/0x6f0 [ 104.706063][ T6330] ? __pfx_usage_skip+0x10/0x10 [ 104.710908][ T6330] validate_chain+0x18e0/0x5900 [ 104.715766][ T6330] ? __pfx_validate_chain+0x10/0x10 [ 104.720961][ T6330] ? __pfx_validate_chain+0x10/0x10 [ 104.726242][ T6330] ? validate_chain+0x15b1/0x5900 [ 104.731260][ T6330] ? register_lock_class+0x102/0x980 [ 104.736541][ T6330] ? __pfx_register_lock_class+0x10/0x10 [ 104.742160][ T6330] ? __pfx_validate_chain+0x10/0x10 [ 104.747347][ T6330] ? mark_lock+0x9a/0x350 [ 104.751670][ T6330] __lock_acquire+0x1346/0x1fd0 [ 104.756522][ T6330] lock_acquire+0x1ed/0x550 [ 104.761017][ T6330] ? __dev_queue_xmit+0x2353/0x3e90 [ 104.766214][ T6330] ? __pfx_lock_acquire+0x10/0x10 [ 104.771228][ T6330] ? __pfx_lock_acquire+0x10/0x10 [ 104.776243][ T6330] ? __lock_acquire+0x1346/0x1fd0 [ 104.781302][ T6330] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 104.787449][ T6330] ? rcu_read_lock_bh_held+0x7e/0x120 [ 104.792829][ T6330] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 104.798627][ T6330] _raw_spin_lock+0x2e/0x40 [ 104.803151][ T6330] ? __dev_queue_xmit+0x2353/0x3e90 [ 104.808339][ T6330] __dev_queue_xmit+0x2353/0x3e90 [ 104.813363][ T6330] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.819328][ T6330] ? __dev_queue_xmit+0x2da/0x3e90 [ 104.824449][ T6330] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.829813][ T6330] ? neigh_resolve_output+0x450/0x740 [ 104.835175][ T6330] ? read_seqbegin+0x157/0x2b0 [ 104.839929][ T6330] ? lockdep_hardirqs_on+0x99/0x150 [ 104.845125][ T6330] ? read_seqbegin+0x208/0x2b0 [ 104.849885][ T6330] ? __pfx_read_seqbegin+0x10/0x10 [ 104.854985][ T6330] ? neigh_resolve_output+0x2e5/0x740 [ 104.860352][ T6330] ? eth_header+0x11c/0x1f0 [ 104.864853][ T6330] ? __asan_memcpy+0x40/0x70 [ 104.869434][ T6330] ? eth_header+0x11c/0x1f0 [ 104.874364][ T6330] ? __pfx_eth_header+0x10/0x10 [ 104.879206][ T6330] ? neigh_resolve_output+0x61f/0x740 [ 104.884576][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.889677][ T6330] ? ip6_finish_output2+0x712/0x1680 [ 104.894948][ T6330] ? nf_hook+0x9e/0x450 [ 104.899092][ T6330] ? __pfx_ip6_finish_output2+0x10/0x10 [ 104.904627][ T6330] ? ip6_mtu+0x81/0x3f0 [ 104.908778][ T6330] ip6_finish_output+0x41e/0x810 [ 104.913709][ T6330] ndisc_send_skb+0xab2/0x1380 [ 104.918915][ T6330] ? ndisc_send_skb+0x574/0x1380 [ 104.923842][ T6330] ? skb_clone+0x171/0x390 [ 104.928251][ T6330] ? __pfx_ndisc_send_skb+0x10/0x10 [ 104.933436][ T6330] ? __pfx_dst_output+0x10/0x10 [ 104.938274][ T6330] ? __asan_memcpy+0x40/0x70 [ 104.942941][ T6330] ? __pfx_ndisc_ns_create+0x10/0x10 [ 104.948219][ T6330] ndisc_solicit+0x493/0x6a0 [ 104.952805][ T6330] ? __pfx_ndisc_solicit+0x10/0x10 [ 104.957911][ T6330] ? __skb_clone+0x454/0x6c0 [ 104.962513][ T6330] ? __pfx_ndisc_solicit+0x10/0x10 [ 104.967617][ T6330] __neigh_event_send+0xece/0x15b0 [ 104.972737][ T6330] neigh_resolve_output+0x1b5/0x740 [ 104.977936][ T6330] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 104.983740][ T6330] ip6_finish_output2+0xffa/0x1680 [ 104.988857][ T6330] ? ip6_finish_output2+0x712/0x1680 [ 104.994130][ T6330] ? nf_hook+0x9e/0x450 [ 104.998275][ T6330] ? __pfx_ip6_finish_output2+0x10/0x10 [ 105.003814][ T6330] ? ip6_mtu+0x81/0x3f0 [ 105.007964][ T6330] ip6_finish_output+0x41e/0x810 [ 105.012896][ T6330] ip6_send_skb+0x112/0x230 [ 105.017407][ T6330] ? icmp6_send+0xba4/0x2070 [ 105.022007][ T6330] icmp6_send+0x15fc/0x2070 [ 105.026504][ T6330] ? icmp6_send+0xba4/0x2070 [ 105.031089][ T6330] ? __pfx_icmp6_send+0x10/0x10 [ 105.035928][ T6330] ? in6_dump_addrs+0xa30/0x1e40 [ 105.040853][ T6330] ? __pfx_lock_release+0x10/0x10 [ 105.045870][ T6330] ? ip6_neigh_lookup+0x44b/0x580 [ 105.050887][ T6330] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 105.056248][ T6330] ip6_link_failure+0x3c/0x4f0 [ 105.061023][ T6330] ? dst_link_failure+0x107/0x160 [ 105.066045][ T6330] ip_tunnel_xmit+0x1653/0x2950 [ 105.070891][ T6330] ? kasan_save_free_info+0x40/0x50 [ 105.076083][ T6330] ? __kasan_slab_free+0x37/0x60 [ 105.081021][ T6330] ? packet_rcv+0x16e/0x13e0 [ 105.085605][ T6330] ? dev_hard_start_xmit+0x15f/0x7e0 [ 105.090887][ T6330] ? ip6_finish_output2+0xffa/0x1680 [ 105.096159][ T6330] ? ip6_finish_output+0x41e/0x810 [ 105.101261][ T6330] ? rawv6_sendmsg+0x1962/0x23c0 [ 105.106196][ T6330] ? ____sys_sendmsg+0x525/0x7d0 [ 105.111176][ T6330] ? __sys_sendmsg+0x2b0/0x3a0 [ 105.115953][ T6330] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 105.121162][ T6330] ? gre_build_header+0x341/0xb30 [ 105.126198][ T6330] ? __pfx_gre_build_header+0x10/0x10 [ 105.131563][ T6330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.137884][ T6330] __gre_xmit+0x1cf/0x260 [ 105.142207][ T6330] ? __pfx___gre_xmit+0x10/0x10 [ 105.147047][ T6330] ? erspan_build_header+0x174/0x360 [ 105.152323][ T6330] erspan_xmit+0xabe/0x1310 [ 105.156822][ T6330] ? __pfx_erspan_xmit+0x10/0x10 [ 105.161748][ T6330] ? dev_queue_xmit_nit+0x2b/0xc10 [ 105.166857][ T6330] dev_hard_start_xmit+0x27a/0x7e0 [ 105.171976][ T6330] sch_direct_xmit+0x2b6/0x5f0 [ 105.176743][ T6330] ? qdisc_tree_reduce_backlog+0x84/0x5f0 [ 105.182465][ T6330] ? __pfx_sch_direct_xmit+0x10/0x10 [ 105.187768][ T6330] __qdisc_run+0xbfd/0x2170 [ 105.192279][ T6330] ? qdisc_tree_reduce_backlog+0x84/0x5f0 [ 105.198008][ T6330] ? pfifo_tail_enqueue+0x2d2/0x410 [ 105.203206][ T6330] __dev_queue_xmit+0x1119/0x3e90 [ 105.208231][ T6330] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.214203][ T6330] ? __dev_queue_xmit+0x2da/0x3e90 [ 105.219315][ T6330] ? __pfx___dev_queue_xmit+0x10/0x10 [ 105.224686][ T6330] ? neigh_resolve_output+0x450/0x740 [ 105.230051][ T6330] ? read_seqbegin+0x157/0x2b0 [ 105.234807][ T6330] ? lockdep_hardirqs_on+0x99/0x150 [ 105.240011][ T6330] ? read_seqbegin+0x208/0x2b0 [ 105.244769][ T6330] ? __pfx_read_seqbegin+0x10/0x10 [ 105.249886][ T6330] ? neigh_resolve_output+0x2e5/0x740 [ 105.255274][ T6330] ? eth_header+0x11c/0x1f0 [ 105.259780][ T6330] ? __asan_memcpy+0x40/0x70 [ 105.264362][ T6330] ? eth_header+0x11c/0x1f0 [ 105.268863][ T6330] ? __pfx_eth_header+0x10/0x10 [ 105.273713][ T6330] ? neigh_resolve_output+0x61f/0x740 [ 105.279091][ T6330] ip6_finish_output2+0xffa/0x1680 [ 105.284197][ T6330] ? ip6_finish_output2+0x712/0x1680 [ 105.289469][ T6330] ? nf_hook+0x9e/0x450 [ 105.293638][ T6330] ? __pfx_ip6_finish_output2+0x10/0x10 [ 105.299202][ T6330] ? ip6_mtu+0x81/0x3f0 [ 105.303358][ T6330] ip6_finish_output+0x41e/0x810 [ 105.308291][ T6330] ? rawv6_send_hdrinc+0xb7a/0x1890 [ 105.313567][ T6330] rawv6_send_hdrinc+0xcfc/0x1890 [ 105.318677][ T6330] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 105.324218][ T6330] ? ip6_dst_lookup_flow+0x13e/0x180 [ 105.329504][ T6330] ? __pfx_dst_output+0x10/0x10 [ 105.334347][ T6330] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 105.339977][ T6330] ? aa_label_sk_perm+0x4f0/0x6d0 [ 105.344997][ T6330] ? rawv6_sendmsg+0xef9/0x23c0 [ 105.349836][ T6330] rawv6_sendmsg+0x1962/0x23c0 [ 105.354597][ T6330] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 105.359705][ T6330] ? aa_sk_perm+0x967/0xab0 [ 105.364210][ T6330] ? inet_sendmsg+0x330/0x390 [ 105.368887][ T6330] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.374185][ T6330] ? security_socket_sendmsg+0x87/0xb0 [ 105.379670][ T6330] __sock_sendmsg+0x1a6/0x270 [ 105.384358][ T6330] ____sys_sendmsg+0x525/0x7d0 [ 105.389131][ T6330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.394480][ T6330] __sys_sendmsg+0x2b0/0x3a0 [ 105.399090][ T6330] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.404209][ T6330] ? rawv6_setsockopt+0x432/0x740 [ 105.409242][ T6330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.415584][ T6330] ? do_syscall_64+0x100/0x230 [ 105.420357][ T6330] ? do_syscall_64+0xb6/0x230 [ 105.425041][ T6330] do_syscall_64+0xf3/0x230 [ 105.429536][ T6330] ? clear_bhb_loop+0x35/0x90 [ 105.434210][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.440097][ T6330] RIP: 0033:0x7f7d42375bd9 [ 105.444512][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.464105][ T6330] RSP: 002b:00007f7d431e1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.472514][ T6330] RAX: ffffffffffffffda RBX: 00007f7d42503f60 RCX: 00007f7d42375bd9 [ 105.480479][ T6330] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 105.488441][ T6330] RBP: 00007f7d423e4a98 R08: 0000000000000000 R09: 0000000000000000 [ 105.496399][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.504360][ T6330] R13: 000000000000000b R14: 00007f7d42503f60 R15: 00007ffff5195708 [ 105.512332][ T6330] [ 105.575604][ T6330] syz.4.327 (6330) used greatest stack depth: 17424 bytes left [ 105.690750][ T6327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.713901][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.750777][ T5996] veth0_vlan: entered promiscuous mode [ 105.765443][ T5996] veth1_vlan: entered promiscuous mode [ 105.789401][ T5996] veth0_macvtap: entered promiscuous mode [ 105.798186][ T5996] veth1_macvtap: entered promiscuous mode [ 105.811366][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.823061][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.833046][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.843574][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.853507][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.864816][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.874682][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.886526][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.896516][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.907032][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.917842][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.930194][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.941167][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.951163][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.962296][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.973077][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.985280][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.995636][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.006167][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.016049][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.026756][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.037834][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.050425][ T5996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.059523][ T5996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.068529][ T5996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.077288][ T5996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.107661][ T5996] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 106.128998][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.130594][ T5996] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 106.145808][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.166581][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.176068][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.908648][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.027518][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.089999][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.147066][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.268378][ T51] bridge_slave_1: left allmulticast mode [ 107.276091][ T51] bridge_slave_1: left promiscuous mode [ 107.282250][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.291105][ T51] bridge_slave_0: left allmulticast mode [ 107.298147][ T51] bridge_slave_0: left promiscuous mode [ 107.304312][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.501414][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.514522][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.528484][ T51] bond0 (unregistering): Released all slaves [ 107.764910][ T51] hsr_slave_0: left promiscuous mode [ 107.785988][ T51] hsr_slave_1: left promiscuous mode [ 107.799947][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.821763][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.842065][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.849501][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.873252][ T51] veth1_macvtap: left promiscuous mode [ 107.878884][ T51] veth0_macvtap: left promiscuous mode [ 107.884791][ T51] veth1_vlan: left promiscuous mode [ 107.890085][ T51] veth0_vlan: left promiscuous mode [ 108.103790][ T51] team0 (unregistering): Port device team_slave_1 removed [ 108.127202][ T51] team0 (unregistering): Port device team_slave_0 removed