last executing test programs: 1m38.279103777s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 1m27.51204966s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 1m17.818766522s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 1m6.618186977s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 55.981679623s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 45.979247703s ago: executing program 0 (id=33): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x20884) 5.514286047s ago: executing program 4 (id=911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25200000001c002d800500040001e9ffff040001000800000008000200020000000800", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 5.297596545s ago: executing program 4 (id=916): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x6}, {0x6}]}, 0x10) 5.174853814s ago: executing program 4 (id=918): r0 = socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) (async) listen(r0, 0xfffffffd) (async) listen(r0, 0x8) (async) r1 = socket$inet(0xa, 0x801, 0x84) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000580)={0x200, 0x3, 0xffffffff, 0xffff48bc, 0xfff}, 0x14) listen(r1, 0x8) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800e0001006970366772657461700000004400028014000700f0d5"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f00000002c0)="4a3a7d5518584fe9ac1ab020f1405a6e071f3b25c593eeb33d104a052a0e7003d1ce70cf41e8a6453279a0b1e8f444219156553f5a9952e8665f1380cfa8cd3bdbc56434fb374e45b6b0f25fd61d5c7a", 0x50) listen(r5, 0x8) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x1) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="01010000d99a17047dbeee7c188fd5a196be7717d35b95847050381ef785cccb879d2d6a6fadd3e27d065feb407585dc564f829e1ddd634ee9bbf4", @ANYRES16=r9, @ANYBLOB="000128bd7000ffdbdf252700000008000300", @ANYRES32=r10, @ANYBLOB="1e003400419d7094b171d5f15a72d0696745ac5c1aa7e15601528107ca850000060036007f0000000a0034000101010101010000"], 0x50}, 0x1, 0x0, 0x0, 0x40150}, 0x40084) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) recvmmsg(r12, &(0x7f0000000540)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1, &(0x7f00000004c0)=""/70, 0x46}, 0x5}], 0x1, 0x2040, 0x0) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f0000000200)={0x1d, r13}, 0x10) 4.997724041s ago: executing program 4 (id=922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000040)=0x3ff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r5) 4.335111639s ago: executing program 4 (id=929): r0 = epoll_create1(0x0) (async) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create(0x79) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0x10}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) (async) shutdown(r1, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 4.105518306s ago: executing program 4 (id=930): unshare(0x6a040000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, r0, 0x36, 0x5, r1, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x9, 0x3, 0x4}]}}]}, 0x40}}, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r11, @ANYRES8=0x0, @ANYRES32=r2, @ANYBLOB="117f3d711f7a23a980e24608dc1cbcbd1bd992a42b0801520b1581db977bb9b8197f84cd8d03858f9b88d549f3296cc769c8a29711895a2dd2b67bdcd806765498d21be468c5dd2bdd687d0dc7cbc01070fe56bf56a9053fef3571a10843e74f7014b81929657bcdc6476e6ade8d6479d612e1a4d2cbf7ba2c357122ea5a226114b9cf9538ceea49bd77965b4461d95e04f8bf3295c866d864f9e90a05044ee8475f5c653f64bb6a02a132b7d7b033cad40326cadad04f66ea", @ANYRESDEC=0x0], 0x48}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r12, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x41) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES64=r10, @ANYRESOCT=r7, @ANYRES8=r13, @ANYBLOB="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", @ANYRES64=r14], 0x20}, 0x1, 0x0, 0x0, 0x24084800}, 0x8000) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400210100000000000000000200"], 0x28}}, 0x0) 1.691229461s ago: executing program 1 (id=941): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4, @broadcast, 'bond0\x00'}}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180300000000000000080000040000008510000006000000180000000a0010064c00000000000000650000000300000018000000000000000000000000000000950000000000000074030000000000009500000000000000f2d8f85458aafbace59de88abe7c9d93ff0bbc89f193468ddcf5dbc49fae6df29497878ed30fbcdcb732c5b6bbdcbca78714e156d16b287b95d09cf3dd486e898be310d28cfc7bb3b1bd3233ccc8a4601c355a2f489ba143c3b898"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc0000001b00010026bd7000fcdbdf250a010101000000000000000000000000200100000000000000000000000000024e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9c0600000000000006000000000000000900000000000000070000000000000008000000000700000700000000c30000da00000000000000000000000000002880000000000000000400000000000000060000000000000005000000000000000300000000000000020001000000000000000000000000000c0008000800080000090000"], 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x48800) (async, rerun: 32) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xfe71}], 0x1}, 0x4) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x585d}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.434833815s ago: executing program 2 (id=944): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x40000000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) (async) tee(r2, r0, 0x8, 0x4) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000000c0)={0xfffffffd, 0x10, 0x6, @multicast, 'bridge_slave_0\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xc, 0x3, 0x8, 0x72d8, 0x4, 0x8, 0xc, 0xffff8eca, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={r5, 0x2000, 0x5a}, 0x8) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000200)={0xfffffe00, 0xb}) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x5}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x4, 0x7}, 0x4) (async) epoll_create1(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0x88, 0x1000, {r8, r9/1000+60000}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x22, 0x3, 0x0, 0x0, "0171a346762b7dc08bbd153d4f55423984a2dc5bc212454d9236660ef199f1ad4a9ce02409c45f23b5a5c86f5cee75d8d7752d90c67f9c85dcaa7982d9f61388"}}, 0x80}, 0x1, 0x0, 0x0, 0xc800}, 0x20044810) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) (async) r10 = accept4$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14, 0x80000) ioctl$SIOCGSTAMPNS(r10, 0x8907, &(0x7f0000000640)) (async) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r11, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r12) (async) sendfile(r2, r1, 0x0, 0x6) r13 = accept$netrom(r1, &(0x7f00000007c0)={{0x3, @rose}, [@rose, @rose, @null, @bcast, @bcast, @default, @netrom, @netrom]}, &(0x7f0000000840)=0x48) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000008c0)={'veth0_to_bridge\x00', &(0x7f0000000880)=@ethtool_stats={0x1d, 0x1, [0x1]}}) (async) openat$cgroup_ro(r0, &(0x7f0000000900)='pids.events\x00', 0x0, 0x0) 1.427787007s ago: executing program 1 (id=946): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000600000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001004155444954000000140000001000010000000000000000000000000a"], 0xb0}}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x5, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a000200aaaaaaaaaa0e00004c0316802800018010000200a90d000034070000"], 0x394}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000600000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001004155444954000000140000001000010000000000000000000000000a"], 0xb0}}, 0x0) (async) sendmsg$netlink(r0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x5, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a000200aaaaaaaaaa0e00004c0316802800018010000200a90d000034070000"], 0x394}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) (async) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) (async) 1.38478749s ago: executing program 3 (id=947): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2c, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getpeername$packet(r1, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001140)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001280)={'gre0\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xf, 0x6, {{0x2c, 0x4, 0x1, 0x0, 0xb0, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@cipso={0x86, 0x65, 0x0, [{0x7, 0x4, "98d1"}, {0x1, 0xa, "4eaaab774a5c6a10"}, {0x5, 0x11, "828de6c853dc0257b1486b1855f612"}, {0x1, 0x6, "5f2e8729"}, {0x2, 0x6, "af462822"}, {0x5, 0x11, "4b386d4811b6fa94bcaf40f230788c"}, {0x7, 0xf, "11361cc9ee4f54996ba34ca211"}, {0x1, 0x5, "827610"}, {0x5, 0xf, "6bcfb5da7fa066578bbd6366ce"}]}, @ssrr={0x89, 0x13, 0xca, [@multicast1, @private=0xa010100, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0xc7, [@local]}, @noop, @timestamp={0x44, 0x10, 0x78, 0x0, 0x6, [0x1, 0x6, 0x2]}, @timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x2, [{@rand_addr=0x64010101, 0x2}]}]}}}}}) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="98ab998cc534496aada7b63be9b5c5f10877f0500fb6423c170f2bbc1941c34d", 0x20}, {&(0x7f0000000100)="e77d450c691b899fc9c556a8db7307a5769ea2cc344edef4914cf2a81eb7c2d308f997197f82c9e29b5e022528c2d69f9c9979753617d76bcd53163d1c35f8e9", 0x40}, {&(0x7f0000000140)="683c276250fe216597a0be9b5c3cb6491e336671ca217874378b65a38bf06f20", 0x20}, {&(0x7f00000001c0)="e03955607bfda3445f06977ee827ac6c275bfc3dd5ca9440eb7c003ead7bf35e98b192f46bc9fd0e1309d5dc8b4515402d23f0ccf4d775c8ade227f2b3ec9f", 0x3f}, {&(0x7f0000000200)="ae", 0x1}, {&(0x7f0000000280)="3b642a64fe4edac4b4a4e67f03cc5818af262a35a4dd726789f96360f98283e0c5f9c54a544c073d8f5e93a28c38de4c7518e7c01a7672eafc67d32d55e2d0816100ea50083d5d986c18b44301638a", 0x4f}], 0x6, &(0x7f0000000380)=[@ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x4a, [@local, @multicast1, @remote, @local, @multicast1, @private=0xa010100, @local, @rand_addr=0x64010100, @broadcast]}, @noop, @ssrr={0x89, 0x17, 0x7e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1, @multicast2, @empty]}, @noop, @timestamp={0x44, 0x14, 0x99, 0x0, 0xc, [0xfffffffd, 0x101, 0xde, 0x8]}]}}}], 0x68}}, {{&(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="35d736ca86ca7cf680b38dddab9d4533d06f438ceb7d", 0x16}, {&(0x7f0000000480)="d5a502935d381bbede9fd7fda7b8333995d37296c9d1a3eedbbe7e70aeb1d6ecf444bf200cefdaedc307232a42cc66d2b4892d4037f51c4d8b54e5a2b0df6081b9f7b79bea9f3749aacb4a37854c499fb533f92b9cde6682442cfb4aad92099f29384ed0782accaf707d90eb5aa2fb7eb2b86444b98c02b2afc4b70b01ad40539b988f679a023615c1387a88", 0x8c}], 0x2, &(0x7f0000000580)}}, {{&(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000640)="b6080798b6642fd7b981797ebc617365cd98b2e994bc0022c7cfdb122542ef065ee7186c1b6c99ac8124f074b5912926108bc468e00119f9fa477cc6c137e7aa017734e246230dadbb5b572f436b76cd32080fccf0b54c50ad185582d9b5a0823de1cd4ae47aa4c2e9979ba213c1388c4783dcde47dbfe5ff7b7559e2c743132250d5937faf2e4e178d24f602bd025c497df490ecaaf620b7c21c74db22c729f3d8c9b36b30151ca0cdc9d56848cf78766a075f625bea9cf36df3e0b7f31073ea5b4420d89423c78d183d59300ae167d5b52be635d1ddd685c50a82902f3", 0xde}, {&(0x7f0000000740)}, {&(0x7f0000000780)="73795bf180b10cacb348b592d0a7138728c274ebee3e344d2c1cddbd3b007b0aab0cdd91438e47d8b97114349ed07f7a83b2cc03040e6349ff1e615db5d5d50f8100d5b566c83366ed47d66593f0449dfbebfea35e4f0e9a804d000ae070db38f8418c6f0e60f5df3caad617893abd7301a948a0eabf5c980afd9e81b9e753601f6cc6e1420a77a66a682336", 0x8c}, {&(0x7f0000000840)="fecb81cf0c991c89df5c1291dcd36a5774dcb7367d1667cfb113d0d032c8658748f6c9b9aeedb56d9b1f372f26daccb780d8507adf01fdd5542b5ecab7d30efbdfc39e7f1b1298b2425917e930a3257e14ce226562037075117e16fad9e29490018bfaf0ed4fbd781a5321ba05574915c686885faace2e053156422bbe8b6a16a57116293b52016a04634f3354c91951dfd26047c1358ef4684757b8bb23bd45a806f6ba6f9ae2b7802689ea3f014d41fd0a6f0d6efe82c11cae", 0xba}, {&(0x7f0000000900)="5f678599c78d0182f6b963ccf555e2d99ca8b27c1884794456299b657e773eab39e3de58b7f6e18d7f08cdf1db8a898c1f91d373d731800122633d19f97d626b196bd0e81c208e8db01e1c9de95a6f821ea35fd56a652e503189903e718538a16797d33775f6b130c5922e90e8fa7ad2a9fc48cd6c0377740944e4b1069504612fea99a83525a127f8567fae0acbe00798a158e059676068b3ad3bc50492a430b47f03c5efcc825d19580ea285af491fe63ccc8af370db68c09e1ea3ea79e551e5a157e076e993dccc957bb85dc9e2694a27a1c9a7c3e03518ef58ee905bd699f43f0f779d7b2f7ea073997499", 0xed}], 0x5, &(0x7f0000000a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x518f32cc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1077b2f479b0f4f813237f823302661714aae7b280b02fda3e8c7068828a76c7825b3579acb5ed8a659587241cc6e18763efbf275d9f0b5626a335851085ad3c375ada1841ee7b52e8f1d5f556e3840ae4c0bf027363405bc169098da03f24108c7190191143d0cb780166bf91ba726a3bbe12040d666f4a77b4a4613366dceeaea516be48834ab914fb06e4326ffdea172e026bfa529f24612974fa843d8c97d8956e779b0bf3e07d254a99c4e90a227256e211856e84c354ac1fc91e2e393dda1aa0", 0xc3}, {&(0x7f0000000c00)="213031f0c995d9a1eaa7162880b6774606646826dff2ceca32b2067a8c79be7353dd9a03dd33ee1685178a932878f3006756c8db30bd496a8bcad9e9425f8fa78637277a92a598c4d702063b353e5f9056660f3d5ed1849e06ca6648feb1cbd28f013a864da6f677f3be1e3a175837f15df38020042207d34707114d2ec0749e9d16c533123407d2a25b800e483a7fc68843dfea74cbaebab0795fc6", 0x9c}, {&(0x7f0000000cc0)="25df59df3aae5fb63ba5a288ca1dcafdf09c88c15a8fe5c85fac4df5c54b3295e0d9477cf8b6c6c57180d66c1011302a186b67d9a389b7024e0de74486b0210e5a2809899079a583157cfd1c1037d50f6e4269d72e560f2cf279f21dec298b0dcd3bf0c6cc21290e03df40d3df7bcfa9b8455756d218c1eb5950f473f62f1957d0265fcbc88f92a009903644abab40f9c23943aa1d61f78cfdb80bc7d3b20eb4bf8b5bc7a444f05c680e", 0xaa}, {&(0x7f0000000d80)="3b2800e787fd20ba565f3b147d35cbe9a480650059fd29f07376c0dd8d97253ce1f3f0db4a2d7d6a05ee1a90eb8c0cb49987be01c04835efacf7937e8c76441893bf81253db7fe9c9dd1dab396b2d23203c1eb73bf9b665e6da8ce15d1c52447781a0bdaff1ee550a331ea2d0227fdbd44c97fea7a011d497fabaca9e60f3cb4eca8d1a03600ebb17dc64c73aeb7304629531ea56b5359af98df9b8758f1a7048923844fb6e973921d19e4a725086ead2a4919df3abb6a3dede8ca9f5db5", 0xbe}, {&(0x7f0000000e40)="36f27c18b2a56b2d558feaf18de6ea9dc352f47159525cb64a31e943672375622a6bf6f488893fc214d02ca168ccb322464ceda3b669f5b726e096202a62a9e5387c3882e008e76d621e95a6e98fe47e5ac52217b8ede950300025bb945d4c9f1cc66b64c12409e34141f38f9411b2b6a06644b8e4315b9ef4049fa8751f342d8d872558892365adf6621e49656087772367075c643291423596b2b69ced0871625141daced8c430f147d5df370d23f944ec9bdc3aa533f69aa8ddeb216215157bbbdcddfb21226c877ff3b1f85d6b7561476eb7fb33fde58498eece2ec67881a81aa6e84b3ece7b47994b00b8b8416034", 0xf1}], 0x5, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}, {{&(0x7f0000001000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000001040)="7bfc618616ccc494ab5b32f3c610c05d9ef81ac7dcbd5c4bfcdc14b9993ed088eed396708494007e1802e446294c2abe79038931b58f567ae4c004e3195a893d178c35f206b82949ac29107b65fed679c90bb4", 0x53}], 0x1, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}], 0x70}}], 0x5, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.313425468s ago: executing program 2 (id=948): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x26020480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x105, 0x5, 0x94b2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x40, 0x0, 0x7, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000666eb7f367e752cf09000100636f6e6400000000188002801400080001"], 0x48}}, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0xb6, 0x3, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x65, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@ssrr={0x89, 0xb, 0xa2, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r8, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x74, r5, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004091}, 0x8040) (async) r12 = socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) connect$can_bcm(r13, &(0x7f0000000280)={0x1d, r14}, 0xb) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=@delqdisc={0x19c, 0x25, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xd, 0x8}, {0xa, 0xffe0}, {0x1f, 0xa}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x12b}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x946f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x93b}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40046}, 0x88d5) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xf, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x8, @loopback, 0x4, "469d418dd37da908"}]}}}}}}}}, 0x0) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.115140655s ago: executing program 2 (id=949): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@private=0xa010101}, {}, {0xfff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x2c0a48c248a27d2a}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x0, 0x0, 0x2}}, 0xe8) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='[&!\\@{\x00', 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x124c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x122c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, "3548808bade38655c576b6213ff333b11b44e67a11eda982a7085bd70e4736b5b72ff8d635b6e01862a865d395f9484c2bbb36474933ea663870c76405829a4d87dc67c716cf0ea85e0899a24f07b3a7fabe0955524d8b2a7b95e1815f9ce66fa1af2bb00de39d517a754e7ff480c8af84ffe4bc5aef5682216447c233e483efe0e49c3f8c935f20fde18e80b4dcdd4a492fcfdddd171378400777ef05c1a4c47e5a28fc8ae2b61684edcd3e37f0a49092c0e1908fe383fb2565d57d96b0343679bc82851d51750c"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_2GHZ={0x6f, 0x0, "e016ede8a43347cd436ab8d48e5b2f3dd2f7008f58a200b23888eca8bb78149957b379bd619b92eba067bc75774db35f3a5a22cc35dc8312ab7fac8a7a7dfe3c01ad1da6152ba5fa8ac8ba3628f6ddb2992310af8adf26d6370ed57db0314f7e0cd230397a51d17068ddc0"}, @NL80211_BAND_5GHZ={0xe7, 0x1, "e913e514379165889de95e7eb3b17729e0347a74139c01bcf46eb2b9fddd607f86fde6838cb34092f500837581f40ae3364e663ffb1fdbea01ddbaa87ab97b27fa42f04a9b8f0b44d56f34af88e12fc137c4627ed4e546ae290421bacda31096c3d5200d5397012b5bd1020b8281260aa8e24a0b2690b79332daa2119b7a65ecdda0d29c78ad9716ac2de819a0f24f4321a0a59a6780d6a2b4bf8c88abef8ced65b71fce8cb7c966b17840a0c013926d679aeaa89da197dbbcc14a2df53c7f1b8cd4c1b1063f239c4d9f983ac8dedf499e439baf9fa4c4396aa20a1d36c12c0b3083d7"}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) 1.114660367s ago: executing program 1 (id=950): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff7}]}, 0x54}}, 0x4c0b0) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000340)=@qipcrtr, 0x80, 0x0}, 0x1}], 0x1, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)="4aa74f992c7534abfc106090c20d57c9a593ed3156443611fb481a208ed0d1a40ee1b3a39eb73ef61a3c774d7d7e972e57615fc97348e1c0a63065c10e9e66182d0e7aa2c3324d02f7565c444434b2ab1bdbee9d29e911d3dd362b3df0854c805f197dd80a396f2b", 0x68}, {&(0x7f00000004c0)="e786e7a7a08b2cbb85e045083a6e84f4833b0ddd969f0b736feaa53b38d4b676cb6761331e33af82a85fa78bdc2f5a89b8c375ffa98992993b88dc95f3980cb7b3f2e6e7b2118e22b86f8d4700cfc4c63d4a52e25e12bfa63dce278fccfb2be87c1fbada673ca97effc21868a1cfeced2f5baa6e1b98ec7c51defc4470f3ee8131ef419178c2b8b31cb5597d1ef7d253133bd654a3cd8660f1f3ca164b0f2fc96516c6a3f94fede9121fa2997f72f31e0f39b4c27f1baed521a36176c0d063865ac4dbba28d6fb771f0742dafa2439ae77e2c9e16635cc216545267ce98c3ce4", 0xe0}, {&(0x7f00000005c0)="001e4a38106472cd85e9a6ccc5797b6e5da34bfd28241a068c3476079d696381c49fadaeabed822d883359b144fc0796ff21051999e8812833514a3b7312dafb3ae6bbddea083afe6b54fed55579bed2cca7e8b6d4f3c8", 0x57}, {&(0x7f0000000640)="353c436a58d241ff898d9fb3c4e288ce70d6d0a54bff4c066e50101f998fd71b0eaa5cf4620012a8ddae524ed777d4884acff5d3e57bb61d2aebb9581c09bd2b0a260dec1feefc213d9fd24f6e584116a727976e6d0e253d", 0x58}], 0x4, &(0x7f0000000300)=[{0x20, 0x3a, 0x0, "c8d21a8d217995234d9c7db1d0b2d3"}], 0x20}, 0x40) 1.045634444s ago: executing program 2 (id=951): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f00000020c0)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb78014d854612", 0x39}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000001d00)="16127b5fb1a0692eed04e810bc663db40a44a3ae8e0ef55a7eaf7afbd52ce1e5ad852639443861b509802b57186dfd72c9bea0e3c17aa603dfde29ab4f0671853060ea0754bf7aadcc11452788dbc1692240299c3785696630fff7f58f89af5905", 0x61}], 0x2, &(0x7f0000004a40)=ANY=[], 0x1450}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000004c0)={@val={0x6f01, 0xf7}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv6=@tipc_packet={0x2, 0x6, "1ea093", 0x18, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @payload_conn={{{0x18, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2, 0x0, 0x1, 0x1, 0x4, 0x0, 0x6, 0x2, 0x4, 0x4e22, 0x4e24}}}}}}}, 0x4e) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 947.57602ms ago: executing program 1 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300238b9cef5fea11c3a8b0a4842aad388a5f8d3fb4d15ef10eda546ea91c6144b5c1a5e3d8108595a5fd2a6c5e4801ea4f6326b83031bb91ec9b2ea9cadc60b8d8d13c8c4f875982113376675a5756fdbfe65ed5ba61b4059d6ae6c51f8c56b4ff2d77faf7c8bf8efad2c4a6e38daee8857ab66b527fd1e573c64f433b2e34e793a97964f6bbd40000000000000000", @ANYRES32=r2, @ANYBLOB="20005e800400010008000200020000004b0006000200000008000700ad040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000008040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000008040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 813.310616ms ago: executing program 1 (id=953): socket$inet6(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206050014000000000000000000000005000400000000000900020073797a320000000014000780050015000200000008001240000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d0b449e7a8bbaa6e634158c0f4c102a0639c58aeb0ff335fdcd36265952932f5dc219bc25c123b43296ea4e869abada129becd4ad672308396918314c9d9cf85339eae6f8e3bf8dcb0f4af54715d18b60adaf4db1f21b863e138a11c63c71e91573f4914ca6348c58bdc402388ed36e4b546e6e04d84b0203a4cef6864e7c"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0399d85809b03e242c000000f8ab8b1ab2bdf9b1db5f3f0b6ae958b4835a", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xe9, '\x00', r8, r9, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="21000010064607000000000000", @ANYRES32, @ANYBLOB="f08700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000b00"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x8, 0x0, 0x0}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000005c0)={'ipvlan0\x00', 0x200}) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f0000000100)=""/128, &(0x7f0000000300)=0x80) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800ed627268000005"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r14}, 0x20) 691.323659ms ago: executing program 2 (id=954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "ae56da7eef8a3bb4", "48f9179d369fe94c1a752cad3d944796", "874571b0", "a1b5b6064ed3a70d"}, 0x28) 631.722443ms ago: executing program 1 (id=955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x0, 0x5, 0x6, 0x80, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20040000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40060900) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0x0, [0x8000, 0xffff, 0x7, 0x5, 0x4, 0x80], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0x0, [0x7, 0x3, 0x5, 0xffff, 0x6], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 483.007732ms ago: executing program 3 (id=956): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='signal_deliver\x00', r1}, 0x18) (async) unshare(0x62040200) (async) r2 = socket$kcm(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x9c, &(0x7f0000000740)={@broadcast, @link_local, @void, {@mpls_uc={0x8847, {[{0x4}, {0x4}, {0x140}], @ipv6=@generic={0x9, 0x6, "b7f372", 0x5a, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, {[@dstopts={0x4, 0x5, '\x00', [@ra={0x5, 0x2, 0xa}, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0xb, [0xfffffffffffffffc, 0x3, 0x1, 0x100000001]}}]}, @routing={0x3c, 0x0, 0x2, 0x7}, @fragment={0x61, 0x0, 0x8, 0x0, 0x0, 0x10, 0x68}, @fragment={0x21, 0x0, 0x4, 0x0, 0x0, 0x5, 0x68}], "2e488caf1592f2bc898d"}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x1, 0x6, 0x0, 0x0, @rand_addr=0x64010103, @private}}}}) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8811) (async) getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000380), &(0x7f0000001880)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', r4, 0x2f, 0x3, 0x7, 0x9, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0xffff0000, 0x225}}) recvmsg$kcm(r2, &(0x7f0000000b40)={&(0x7f0000000940)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000ac0)=""/1, 0x1}], 0x2}, 0x2000) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb4, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) socket(0x10, 0x2, 0x0) close(0xffffffffffffffff) (async) pselect6(0x40, &(0x7f0000000b80)={0x9, 0x10000, 0x4, 0xfffffffffffffffe, 0x3, 0x9, 0x9, 0x7}, &(0x7f0000000bc0)={0xf, 0x101, 0x0, 0x9, 0x3, 0x7d, 0x9, 0x9}, &(0x7f0000000c00)={0x4, 0xd6f, 0x1, 0x2, 0x3, 0x4, 0x1, 0x2}, &(0x7f0000000c80), &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x5]}, 0x8}) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x321000, 0x0) (async) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xeb, 0x19, &(0x7f00000001c0)="c7796dd7b2c390b4669e6af37c540c0aac7d63624e56d50ae616a70d547944afbe9a4b749dbb76bb1a3f717071351e14f45f8d3b91d6a2cd2f4e9faecfa5b530f426373f7c6fa89a1affbaf9a041696edf61bb41222279c1bf41252d9cda8144c8d94aee67f41dff7a3ad30749848b362f31a2dde637cc1c363680db65c842b346af395bfa094358a9f103ae8ed6a1e1e56f52a0ab10ff96ed341824f9f57cfb8d1e322758bf1e1ebeda6526004e23edd30adf0897596699fbebc349d6b398b870a9b0abce985ed2b39bed995cfad452f373e778a4631afbd593f2f78ddca4aeedbe76c5c3397e50787e82", &(0x7f00000002c0)=""/25, 0x4, 0x0, 0x56, 0x9c, &(0x7f0000000300)="df175158a53762757a4aa4c7628db529280a208398328ef1dbf9462c0e820a6051fd814c2f893d4419ebaa67569d8a377c191b23e53317588d49082c018970ceee692bdf43b7e7430be08c6157f0c944d30b710b7404", &(0x7f00000003c0)="831ab7d923d49913d86984461ffe178f620d8c2454dfc9e3cb2b83007564b5abae410cad2cb93a53f63f3c63ac8a0047245ac595141524991de0f4e444329235df27510829080e543c68071181b3364665e9e2284b6d9a3090062c1ef41b50dafec919a7b75f2afd98b87e750ab74f0b7483836428b0c077b51cb90cb2bd91cc3651611244904bbdc1d5655f97e2bcd67039b8ecdaedfe6f5701f3fa", 0x4, 0x0, 0x5}, 0x50) 391.342083ms ago: executing program 3 (id=957): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0xec62, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x9, 0x1, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xffff, 0x4, 0x8, 0x9a09, r2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 247.414289ms ago: executing program 3 (id=958): socket$nl_route(0x10, 0x3, 0x0) 188.877ms ago: executing program 3 (id=959): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x801, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a00df0214f9f407000904001f000000ff02000200020000", 0x1c) getsockopt(r0, 0x0, 0x50, 0x0, &(0x7f0000001ffc)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 95.114194ms ago: executing program 3 (id=960): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffd, 0x3}, 0x90) sendmmsg$inet6(r3, &(0x7f0000004e80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x882, @loopback, 0xfffffffe}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000280)="ad8a", 0x2}], 0x1}}], 0x1, 0x40440) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/229, 0x22fe0}], 0x3}, 0x2) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000000180)) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000540)="1ab7940344c6e488e90173c8b4aab3dec5fc3bc042a502d9361d22ff25c36d53c0759f7b68c3d8d01acbdfae5ff4cde5c7af3636afd0c6e5f982667659f42be95fd11c98a880becdb5c2f625d8202f3dac8175b6575f2f91f71efa149e47d64bd06d71a4938404a5d174807858708ef761f6bfda56f895ebdd9d3f7f99cbb3d3c6350e37ebebcabc0302629d0148dae774648f15e600f86ff42ebb6e6f98a5b809e2462ee3ed1c7575ad7220452e8eeb5910619e0a0386b56e6951780b4531053c4c8e0d83b27349faddf2dffe08b97443fe474f24a4a061602109880c1f778aaab16c4d9c947dcd", 0xe8}, {&(0x7f0000000200)="f8d2d33c7b76f6b3ca1a8298f7ef49e9f00d90cd43c4ce63899372e6eb2346e48163cd1628f826d724a686de810e541d7f1bd01d", 0x34}, {&(0x7f0000000640)="8ffc40ccaa27ad7e50f14cf6aca3b21d00336559ce19398521cd0e1faf801087ced3e357aad2570fe0cc5676ae81d6afdec7cb76bd0d0e6b94b7cb79723f9a980cfcfb445a45146a027d3f1cf7ca0fbe0ca389cf5afbcf3aad9bdf479c6ab0dd392f2a7dd35ce17ebe0a80132c96e1f1897b813c4ce481886855f6e6f9a8c7e0c6aa426cf0fbd1ca6cce9288daa506b68f741bcedebba7342451527af4000273e89aa4ed02c5fa2ff5c399901760b9304d490835f6a7a4908978acc957a35a347d5db4ce461d8bb3b2987e4aa64d9fdc932696e845", 0xd5}], 0x3) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 0s ago: executing program 2 (id=961): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790028000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) (async, rerun: 64) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (rerun: 64) r1 = socket(0x10, 0x80002, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async, rerun: 32) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async, rerun: 32) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async, rerun: 32) sendto(r1, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}]}, 0x24}}, 0x40050) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60020800", @ANYRES16=r5, @ANYBLOB="000027bd7000ffdbdf250f0000006c0002804c00038008000100000200000800010008000000080002000900000008000100cf9e0000080001000300000008000100faba000008000100f6000000080001000000000008000200060000000800020001fcffff08000100040000000400040008000200fdffffff74000280080001000100010008000200720000000800010000100000040004000800020006000000080001009c96000004000400080002000900000024000380080002000800000008000100810000000800010000000000080002000a00000014000380080001000100000008000200070000005c000680080006000500000008000600090000004600040067636d28616573290000000000000000000000000000000000000000000000001e000000078a44b38d9b44558dadc997c8d38f39f49ede7ca9832ab2485d537b84aa00001001018008000300bbe00000160001006574683a76657468315f746f5f7465616d0000003c0002800800040082ad0000080001000200000008000400fdffffff080004007f00000008000300070000000800010019000000080001000b0000000d0001007564703a73797a30000000000f00010069623a6970766c616e30000008000300b7bf00002c0004001400010002004e24e000000200000000000000001400020002004e2400000000000000000000000038000400200001000a004e2100000006fe8000000000000000000000000000aa0a0000001400020002004e22ffffffff000000000000000008000300fb0000001c000280080004009d460000080001000f000000080003002e44c67e"], 0x260}, 0x1, 0x0, 0x0, 0x90}, 0x10) kernel console output (not intermixed with test programs): e_0 [ 62.491143][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.501333][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.511974][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.522115][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.532733][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.544608][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.565543][ T5841] veth1_macvtap: entered promiscuous mode [ 62.579659][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.617835][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.637622][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.649665][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.661414][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.671010][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.687034][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.696177][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.706883][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.708912][ T5917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.722126][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.737321][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.747239][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.758015][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.768999][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.799312][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.809039][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.818258][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.827260][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.860661][ T5917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.888733][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.898218][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.907481][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.916629][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.929446][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.942733][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.969018][ T5917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.989046][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.999939][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.011024][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.022250][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.032494][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.043302][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.054077][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.064894][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.076511][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.132730][ T5917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.165724][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.181940][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.192383][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.204067][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.214326][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.225335][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.235269][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.246019][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.258472][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.290024][ T5917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.310431][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.321606][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.340116][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.349964][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.396830][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.409191][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.531233][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.549009][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.574590][ T5843] Bluetooth: hci0: command tx timeout [ 63.581303][ T5846] Bluetooth: hci2: command tx timeout [ 63.583350][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.608714][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.610672][ T5917] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.632754][ T5917] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654372][ T5843] Bluetooth: hci4: command tx timeout [ 63.659836][ T5843] Bluetooth: hci3: command tx timeout [ 63.665676][ T5846] Bluetooth: hci1: command tx timeout [ 63.688398][ T5917] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.734700][ T5917] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.771663][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.787777][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.821329][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.865405][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.904704][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.931634][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.955509][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.013949][ T5930] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 64.069565][ T5930] vlan1: entered promiscuous mode [ 64.076203][ T5930] veth0: entered promiscuous mode [ 64.492973][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.927559][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'. [ 64.982963][ T5987] syz.4.19 uses old SIOCAX25GETINFO [ 64.985883][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.234060][ T6004] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 65.558115][ T6006] gretap1: entered promiscuous mode [ 65.606720][ T6027] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 65.656130][ T5843] Bluetooth: hci2: command tx timeout [ 65.670139][ T6029] netlink: 'syz.1.27': attribute type 11 has an invalid length. [ 65.705413][ T6029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.27'. [ 65.735179][ T5846] Bluetooth: hci1: command tx timeout [ 65.741149][ T5846] Bluetooth: hci4: command tx timeout [ 65.746735][ T5843] Bluetooth: hci3: command tx timeout [ 65.793857][ T6026] warning: `syz.1.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.012607][ T6036] Zero length message leads to an empty skb [ 66.055605][ T6033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.29'. [ 66.324600][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.427703][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 66.533809][ T6052] netlink: 'syz.2.37': attribute type 29 has an invalid length. [ 66.564991][ T6044] nbd: socks must be embedded in a SOCK_ITEM attr [ 66.607088][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 66.617289][ T6057] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0040 with DS=0x3 [ 66.646072][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35'. [ 66.666967][ T6048] nbd: device at index 64 is going down [ 66.755743][ T6060] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.39'. [ 66.833066][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.959681][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.972408][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.981548][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.006183][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.014690][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.022784][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.044322][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.161564][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.284393][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.409272][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 67.683348][ T6101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 67.717557][ T6101] netlink: 9 bytes leftover after parsing attributes in process `syz.1.48'. [ 67.730652][ T6101] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 67.808223][ T6097] pimreg: entered allmulticast mode [ 67.826766][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.843222][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.858542][ T6065] bridge_slave_0: entered allmulticast mode [ 67.868580][ T6065] bridge_slave_0: entered promiscuous mode [ 67.885834][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.897461][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.908017][ T6065] bridge_slave_1: entered allmulticast mode [ 67.916565][ T6065] bridge_slave_1: entered promiscuous mode [ 67.931057][ T1038] bridge_slave_1: left allmulticast mode [ 67.938466][ T1038] bridge_slave_1: left promiscuous mode [ 67.944827][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.962113][ T1038] bridge_slave_0: left allmulticast mode [ 67.973264][ T1038] bridge_slave_0: left promiscuous mode [ 67.991283][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.448422][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.463261][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.477131][ T1038] bond0 (unregistering): Released all slaves [ 68.489297][ T6102] pimreg: left allmulticast mode [ 68.896698][ T6121] Bluetooth: MGMT ver 1.23 [ 68.953139][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.085014][ T6131] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 69.090099][ T6130] Cannot find add_set index 3 as target [ 69.101659][ T5846] Bluetooth: hci0: command tx timeout [ 69.175104][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.224071][ T6136] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 69.243823][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.403553][ T6136] bridge0: entered promiscuous mode [ 69.416517][ T6136] macvlan2: entered promiscuous mode [ 69.440286][ T6136] bridge0: port 3(macvlan2) entered blocking state [ 69.483116][ T6136] bridge0: port 3(macvlan2) entered disabled state [ 69.506236][ T29] audit: type=1804 audit(1741245965.067:2): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.58" name="/newroot/17/memory.events" dev="tmpfs" ino=105 res=1 errno=0 [ 69.529973][ T6136] macvlan2: entered allmulticast mode [ 69.536626][ T6136] bridge0: entered allmulticast mode [ 69.545410][ T29] audit: type=1800 audit(1741245965.067:3): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.58" name="memory.events" dev="tmpfs" ino=105 res=0 errno=0 [ 69.574511][ T6136] macvlan2: left allmulticast mode [ 69.580339][ T6136] bridge0: left allmulticast mode [ 69.587427][ T6136] bridge0: left promiscuous mode [ 69.632995][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.743247][ T6065] team0: Port device team_slave_0 added [ 69.771861][ T6065] team0: Port device team_slave_1 added [ 69.930809][ T6162] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 69.966716][ T6164] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 69.983151][ T1038] hsr_slave_0: left promiscuous mode [ 69.990608][ T1038] hsr_slave_1: left promiscuous mode [ 69.993869][ T6164] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 70.005196][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.012879][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.028078][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.045978][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.111597][ T1038] veth1_macvtap: left promiscuous mode [ 70.117702][ T1038] veth0_macvtap: left promiscuous mode [ 70.123697][ T1038] veth1_vlan: left promiscuous mode [ 70.129905][ T1038] veth0_vlan: left promiscuous mode [ 70.658063][ T6178] __nla_validate_parse: 5 callbacks suppressed [ 70.658080][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 70.813997][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 70.851967][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 71.173694][ T5843] Bluetooth: hci0: command tx timeout [ 71.198002][ T6162] team0: Port device wlan1 added [ 71.205359][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.212324][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.239621][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.252404][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.262074][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.289209][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.301081][ T6165] netlink: 'syz.2.60': attribute type 3 has an invalid length. [ 71.478357][ T6182] team0: Device gtp0 is of different type [ 71.577496][ T6065] hsr_slave_0: entered promiscuous mode [ 71.584189][ T6065] hsr_slave_1: entered promiscuous mode [ 71.607493][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.628746][ T6065] Cannot create hsr debugfs directory [ 71.639187][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 71.661417][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.668097][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.890691][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 72.141464][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.69'. [ 72.214977][ T6217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 72.440097][ T6214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 72.834711][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.843146][ T6240] bond0: (slave bond1): Enslaving as an active interface with an up link [ 72.862129][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 72.889338][ T6246] lo speed is unknown, defaulting to 1000 [ 72.906371][ T6246] lo speed is unknown, defaulting to 1000 [ 72.915210][ T6246] lo speed is unknown, defaulting to 1000 [ 72.933214][ T6246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.990438][ T6246] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.033324][ T6246] lo speed is unknown, defaulting to 1000 [ 73.041882][ T6246] lo speed is unknown, defaulting to 1000 [ 73.062435][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 73.083276][ T6246] lo speed is unknown, defaulting to 1000 [ 73.109235][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 73.111416][ T6065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.152451][ T6257] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 73.176135][ T6246] lo speed is unknown, defaulting to 1000 [ 73.179865][ T6263] netlink: 'syz.2.81': attribute type 12 has an invalid length. [ 73.191943][ T6263] netlink: 'syz.2.81': attribute type 29 has an invalid length. [ 73.201037][ T6263] netlink: 148 bytes leftover after parsing attributes in process `syz.2.81'. [ 73.210631][ T6262] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 73.218745][ T6262] netlink: 2 bytes leftover after parsing attributes in process `syz.1.80'. [ 73.231227][ T6263] netlink: 59 bytes leftover after parsing attributes in process `syz.2.81'. [ 73.251324][ T6257] batman_adv: batadv0: Adding interface: team0 [ 73.255041][ T5843] Bluetooth: hci0: command 0x040f tx timeout [ 73.271859][ T6257] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.359442][ T6257] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 73.385891][ T6246] lo speed is unknown, defaulting to 1000 [ 73.392537][ T6065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.440027][ T6065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.469779][ T6262] team0: entered promiscuous mode [ 73.483135][ T6262] team_slave_0: entered promiscuous mode [ 73.504584][ T6262] team_slave_1: entered promiscuous mode [ 73.526603][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.533922][ T6262] batman_adv: batadv0: Interface activated: team0 [ 73.541725][ T6262] batman_adv: batadv0: Interface deactivated: team0 [ 73.559550][ T6262] batman_adv: batadv0: Removing interface: team0 [ 73.624639][ T6262] bridge0: port 3(team0) entered blocking state [ 73.651688][ T6262] bridge0: port 3(team0) entered disabled state [ 73.671931][ T6262] team0: entered allmulticast mode [ 73.718597][ T6286] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 73.728788][ T6262] team_slave_0: entered allmulticast mode [ 73.741984][ T6262] team_slave_1: entered allmulticast mode [ 73.767821][ T6262] bridge0: port 3(team0) entered blocking state [ 73.774239][ T6262] bridge0: port 3(team0) entered forwarding state [ 73.873765][ T6065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.997551][ T5209] udevd[5209]: worker [5851] terminated by signal 33 (Unknown signal 33) [ 74.253067][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.298367][ T6300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.305919][ T6300] IPv6: NLM_F_CREATE should be set when creating new route [ 74.313270][ T6300] IPv6: NLM_F_CREATE should be set when creating new route [ 74.340406][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.382132][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.389293][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.428263][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.435435][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.661481][ T6313] netlink: 'syz.3.91': attribute type 15 has an invalid length. [ 74.724501][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.823420][ T6065] veth0_vlan: entered promiscuous mode [ 74.832860][ T6318] x_tables: duplicate underflow at hook 1 [ 74.847879][ T6065] veth1_vlan: entered promiscuous mode [ 74.905745][ T6065] veth0_macvtap: entered promiscuous mode [ 74.927721][ T6065] veth1_macvtap: entered promiscuous mode [ 74.963283][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.983299][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.004877][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.023106][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.040006][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.050681][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.060957][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.072351][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.083283][ T6322] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 75.093213][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.121354][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.122423][ T6321] netlink: 'syz.3.94': attribute type 4 has an invalid length. [ 75.141164][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.153092][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.170898][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.181688][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.199330][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.209681][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.226057][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.251172][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.270568][ T5886] lo speed is unknown, defaulting to 1000 [ 75.282448][ T6065] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.299096][ T6065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.310347][ T6065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.325938][ T6065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.335044][ T5846] Bluetooth: hci0: command 0x040f tx timeout [ 75.416030][ T5884] lo speed is unknown, defaulting to 1000 [ 75.416047][ T5883] lo speed is unknown, defaulting to 1000 [ 75.566773][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.591635][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.658174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.726180][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.876536][ T6335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.205981][ T6335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.395480][ T6335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.486153][ T6353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.569035][ T6335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.617105][ T6353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.744040][ T6353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.822840][ T6335] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.846199][ T6335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.000633][ T3476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.071329][ T6353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.113968][ T6335] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.186591][ T6335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.300750][ T6353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.365943][ T6359] __nla_validate_parse: 5 callbacks suppressed [ 77.365962][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.103'. [ 77.383760][ T6353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467342][ T6353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.515306][ T6353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.712602][ T3476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.770410][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.104'. [ 77.998735][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.019399][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.030230][ T3476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.056071][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.065654][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.073970][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.082172][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.252267][ T3476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.407954][ T6369] lo speed is unknown, defaulting to 1000 [ 78.574725][ T3476] bridge_slave_1: left allmulticast mode [ 78.580525][ T3476] bridge_slave_1: left promiscuous mode [ 78.587942][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.608542][ T3476] bridge_slave_0: left allmulticast mode [ 78.617367][ T3476] bridge_slave_0: left promiscuous mode [ 78.626767][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.977362][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.990164][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.000181][ T3476] bond0 (unregistering): Released all slaves [ 79.012266][ T6379] pim6reg: entered allmulticast mode [ 79.024660][ T6380] pim6reg: left allmulticast mode [ 79.177917][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 79.266720][ T6391] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 79.279335][ T6391] bridge0: port 3(team0) entered disabled state [ 79.288213][ T6391] team0: left allmulticast mode [ 79.293112][ T6391] team_slave_0: left allmulticast mode [ 79.299017][ T6391] team_slave_1: left allmulticast mode [ 79.310544][ T6391] team0: left promiscuous mode [ 79.322254][ T6391] team_slave_0: left promiscuous mode [ 79.338430][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.112'. [ 79.348731][ T6391] team_slave_1: left promiscuous mode [ 79.355423][ T6391] bridge0: port 3(team0) entered disabled state [ 79.379540][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.390277][ T6391] bond0: (slave team0): Enslaving as an active interface with an up link [ 79.597522][ T3476] hsr_slave_0: left promiscuous mode [ 79.606886][ T3476] hsr_slave_1: left promiscuous mode [ 79.612773][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.620985][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.630035][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.637856][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.660230][ T3476] veth1_macvtap: left promiscuous mode [ 79.665933][ T3476] veth0_macvtap: left promiscuous mode [ 79.671713][ T3476] veth1_vlan: left promiscuous mode [ 79.678439][ T3476] veth0_vlan: left promiscuous mode [ 80.143769][ T5846] Bluetooth: hci0: command tx timeout [ 80.207967][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 80.281210][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 80.764648][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.771787][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.791343][ T6369] bridge_slave_0: entered allmulticast mode [ 80.811494][ T6369] bridge_slave_0: entered promiscuous mode [ 80.828055][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.835635][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.850689][ T6369] bridge_slave_1: entered allmulticast mode [ 80.866110][ T6369] bridge_slave_1: entered promiscuous mode [ 80.955869][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.996978][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.019152][ T6424] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 81.125364][ T6424] bond2: entered promiscuous mode [ 81.140651][ T6424] bond2: entered allmulticast mode [ 81.194670][ T6426] batadv1: entered promiscuous mode [ 81.231445][ T6369] team0: Port device team_slave_0 added [ 81.241056][ T6369] team0: Port device team_slave_1 added [ 81.360896][ T6436] lo speed is unknown, defaulting to 1000 [ 81.412986][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.431472][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.458343][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 81.485386][ T6445] xt_TCPMSS: Only works on TCP SYN packets [ 81.537799][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.582125][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.596573][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.672587][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.774706][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'. [ 81.798534][ T6369] hsr_slave_0: entered promiscuous mode [ 81.812049][ T6369] hsr_slave_1: entered promiscuous mode [ 81.821822][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.833758][ T6369] Cannot create hsr debugfs directory [ 81.856238][ T6458] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.131'. [ 81.883981][ T6458] openvswitch: netlink: Message has 8 unknown bytes. [ 81.897035][ T974] cfg80211: failed to load regulatory.db [ 82.214868][ T5846] Bluetooth: hci0: command tx timeout [ 82.441038][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 82.842467][ T6489] @ÿ: renamed from veth0_vlan (while UP) [ 82.866988][ T6369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.885567][ T6369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.908138][ T6369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.937459][ T6369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.011576][ T6493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.142'. [ 83.039838][ T6493] netlink: 56 bytes leftover after parsing attributes in process `syz.1.142'. [ 83.162939][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.176031][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 83.230781][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.246937][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 83.266978][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.274179][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.362039][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.369261][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.582720][ T6509] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 83.597057][ T6510] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 83.631222][ T6509] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 83.638310][ T6510] lo speed is unknown, defaulting to 1000 [ 83.673784][ T6510] lo speed is unknown, defaulting to 1000 [ 83.738030][ T6510] lo speed is unknown, defaulting to 1000 [ 83.750710][ T6510] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.809626][ T6512] lo speed is unknown, defaulting to 1000 [ 83.830518][ T6517] TCP: TCP_TX_DELAY enabled [ 83.846942][ T6510] lo speed is unknown, defaulting to 1000 [ 83.874714][ T6510] lo speed is unknown, defaulting to 1000 [ 83.923586][ T6510] lo speed is unknown, defaulting to 1000 [ 83.942477][ T6512] lo speed is unknown, defaulting to 1000 [ 83.949310][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.985430][ T6510] lo speed is unknown, defaulting to 1000 [ 84.006406][ T6510] lo speed is unknown, defaulting to 1000 [ 84.097239][ T6369] veth0_vlan: entered promiscuous mode [ 84.129802][ T6369] veth1_vlan: entered promiscuous mode [ 84.203123][ T6526] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 84.221854][ T6369] veth0_macvtap: entered promiscuous mode [ 84.237253][ T6527] veth1_macvtap: left promiscuous mode [ 84.240780][ T6529] netlink: 3 bytes leftover after parsing attributes in process `syz.2.152'. [ 84.242905][ T6527] macsec0: entered promiscuous mode [ 84.270500][ T6369] veth1_macvtap: entered promiscuous mode [ 84.305865][ T5846] Bluetooth: hci0: command tx timeout [ 84.318128][ T6526] bond1: entered promiscuous mode [ 84.352089][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.416385][ T6529] batadv1: entered promiscuous mode [ 84.421641][ T6529] batadv1: entered allmulticast mode [ 84.465643][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.495670][ T6529] bond1: (slave batadv1): making interface the new active one [ 84.522294][ T6529] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 84.555764][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 84.591857][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.602616][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.1.153'. [ 84.635551][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.653618][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.665095][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.675436][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.686286][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.698261][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.713393][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.725346][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.737291][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 84.751304][ T6536] gtp0: entered promiscuous mode [ 84.764434][ T6536] gtp0: entered allmulticast mode [ 84.776316][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.791180][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.801962][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.812871][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.823693][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.834342][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.846194][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.861136][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.872403][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.889206][ T6369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.900827][ T6369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.910587][ T6369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921064][ T6369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.177417][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.197795][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.342059][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.366200][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.807306][ T6579] bridge: RTM_NEWNEIGH with invalid ether address [ 85.891258][ T6580] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 85.899759][ T6582] lo speed is unknown, defaulting to 1000 [ 85.900666][ T6582] lo speed is unknown, defaulting to 1000 [ 85.936559][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.957612][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.966080][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.013640][ T6580] team0: Port device bridge0 added [ 86.146475][ T6589] sctp: [Deprecated]: syz.2.169 (pid 6589) Use of int in maxseg socket option. [ 86.146475][ T6589] Use struct sctp_assoc_value instead [ 86.664613][ T1038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.793956][ T1038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.945337][ T1038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.156052][ T1038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.257130][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'. [ 87.346850][ T6621] lo speed is unknown, defaulting to 1000 [ 87.402072][ T6621] lo speed is unknown, defaulting to 1000 [ 87.444275][ T1038] bridge_slave_1: left allmulticast mode [ 87.466570][ T1038] bridge_slave_1: left promiscuous mode [ 87.484508][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.575617][ T1038] bridge_slave_0: left allmulticast mode [ 87.594903][ T1038] bridge_slave_0: left promiscuous mode [ 87.616229][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.618761][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.641451][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.650271][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.687177][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.705986][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.719602][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.865350][ T6632] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 87.997536][ T6634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.184'. [ 88.791255][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.802757][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.818142][ T1038] bond0 (unregistering): Released all slaves [ 88.983027][ T6628] lo speed is unknown, defaulting to 1000 [ 88.990955][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 89.156233][ T6574] Set syz1 is full, maxelem 65536 reached [ 89.247159][ T6654] netlink: 'syz.1.187': attribute type 4 has an invalid length. [ 89.258771][ T6628] lo speed is unknown, defaulting to 1000 [ 89.503230][ T5886] lo speed is unknown, defaulting to 1000 [ 89.647980][ T6662] lo speed is unknown, defaulting to 1000 [ 89.680607][ T6667] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 89.697346][ T6669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.192'. [ 89.713038][ T6662] lo speed is unknown, defaulting to 1000 [ 89.728460][ T1038] hsr_slave_0: left promiscuous mode [ 89.751124][ T1038] hsr_slave_1: left promiscuous mode [ 89.759872][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.768185][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.784692][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.803633][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.813815][ T5846] Bluetooth: hci0: command tx timeout [ 89.884011][ T1038] veth1_macvtap: left promiscuous mode [ 89.889589][ T1038] veth0_macvtap: left promiscuous mode [ 89.903753][ T1038] veth1_vlan: left promiscuous mode [ 89.910034][ T1038] veth0_vlan: left promiscuous mode [ 90.732561][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 90.831136][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 91.433361][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.440928][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.485877][ T6675] veth0: left promiscuous mode [ 91.544900][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.559962][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.661349][ T6675] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.675079][ T6675] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.689455][ T6675] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.700940][ T6675] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.781414][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.799075][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.820576][ T6679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.893666][ T5846] Bluetooth: hci0: command tx timeout [ 91.908955][ T5884] lo speed is unknown, defaulting to 1000 [ 91.940637][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 91.975316][ T6628] chnl_net:caif_netlink_parms(): no params data found [ 91.991637][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 92.444155][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.451395][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.478615][ T6628] bridge_slave_0: entered allmulticast mode [ 92.499100][ T6628] bridge_slave_0: entered promiscuous mode [ 92.551088][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.567120][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.581437][ T6628] bridge_slave_1: entered allmulticast mode [ 92.591937][ T6628] bridge_slave_1: entered promiscuous mode [ 92.698064][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.722925][ T6703] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 92.737262][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.905779][ T6628] team0: Port device team_slave_0 added [ 92.959839][ T6628] team0: Port device team_slave_1 added [ 92.964184][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 92.983753][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 92.997485][ T6707] netlink: 'syz.1.201': attribute type 14 has an invalid length. [ 93.058386][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.092592][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.147175][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.182521][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.221329][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.283663][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.380024][ T6628] hsr_slave_0: entered promiscuous mode [ 93.397045][ T6628] hsr_slave_1: entered promiscuous mode [ 93.417080][ T6628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.438150][ T6628] Cannot create hsr debugfs directory [ 93.449173][ T6718] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 93.480381][ T6719] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 93.705660][ T6724] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.721268][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 93.910321][ T6724] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.973742][ T5846] Bluetooth: hci0: command tx timeout [ 93.992446][ T6724] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.133430][ T6724] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.251453][ T6724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.287121][ T6724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.313444][ T6724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.415749][ T6724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.467335][ T6628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.486503][ T6628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.502210][ T6628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.589133][ T6628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.647813][ T6758] can: request_module (can-proto-3) failed. [ 94.798130][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.818713][ T6763] pimreg: entered allmulticast mode [ 94.844071][ T6763] pimreg: left allmulticast mode [ 94.922628][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.948533][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.955702][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.985418][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.992798][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.248960][ T6771] lo speed is unknown, defaulting to 1000 [ 95.295670][ T6771] lo speed is unknown, defaulting to 1000 [ 95.507720][ T6781] veth3: entered promiscuous mode [ 95.517365][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 95.559353][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.596328][ T6628] veth0_vlan: entered promiscuous mode [ 95.608128][ T6628] veth1_vlan: entered promiscuous mode [ 95.646528][ T6628] veth0_macvtap: entered promiscuous mode [ 95.666710][ T6628] veth1_macvtap: entered promiscuous mode [ 95.708760][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.752412][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.781287][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.810556][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.822067][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.859555][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.876590][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.888504][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.914773][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.951339][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.963327][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.974707][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.985790][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.997732][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.053768][ T5846] Bluetooth: hci0: command tx timeout [ 96.087936][ T6628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.124657][ T6628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.133416][ T6628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.142898][ T6628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.163819][ T6801] lo speed is unknown, defaulting to 1000 [ 96.219635][ T6806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.228'. [ 96.231600][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 96.276786][ T6801] lo speed is unknown, defaulting to 1000 [ 96.277443][ T6804] lo speed is unknown, defaulting to 1000 [ 96.408777][ T6804] lo speed is unknown, defaulting to 1000 [ 96.653940][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.661775][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.738292][ T6802] lo speed is unknown, defaulting to 1000 [ 96.745206][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.758708][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.771255][ T6802] lo speed is unknown, defaulting to 1000 [ 96.840676][ T6801] netlink: 156 bytes leftover after parsing attributes in process `syz.1.226'. [ 96.988207][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 97.477408][ T6837] pim6reg1: entered promiscuous mode [ 97.482904][ T6837] pim6reg1: entered allmulticast mode [ 97.751118][ T6854] netlink: 104 bytes leftover after parsing attributes in process `syz.1.240'. [ 97.840620][ T5885] IPVS: starting estimator thread 0... [ 97.862868][ T6857] bridge0: port 3(gretap0) entered blocking state [ 97.894397][ T6857] bridge0: port 3(gretap0) entered disabled state [ 97.901253][ T6857] gretap0: entered allmulticast mode [ 97.927535][ T6857] gretap0: entered promiscuous mode [ 97.936641][ T6857] bridge0: port 3(gretap0) entered blocking state [ 97.944720][ T6857] bridge0: port 3(gretap0) entered forwarding state [ 97.958272][ T6856] gretap0: left allmulticast mode [ 97.963738][ T6856] gretap0: left promiscuous mode [ 97.969617][ T6858] IPVS: using max 23 ests per chain, 55200 per kthread [ 97.986070][ T6856] bridge0: port 3(gretap0) entered disabled state [ 98.056420][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.546371][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 98.769108][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.827654][ T6880] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 98.854126][ T6880] netlink: 'syz.1.247': attribute type 6 has an invalid length. [ 98.923067][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.003390][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.013427][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.022811][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.047518][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.062217][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.070620][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.161137][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.260910][ T6889] lo speed is unknown, defaulting to 1000 [ 99.324547][ T6889] lo speed is unknown, defaulting to 1000 [ 99.344281][ T51] bridge_slave_1: left allmulticast mode [ 99.349992][ T51] bridge_slave_1: left promiscuous mode [ 99.362978][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.378746][ T51] bridge_slave_0: left allmulticast mode [ 99.390360][ T51] bridge_slave_0: left promiscuous mode [ 99.398403][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.026447][ T6917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.254'. [ 100.148772][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.171498][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.186786][ T51] bond0 (unregistering): Released all slaves [ 100.210963][ T6899] lo speed is unknown, defaulting to 1000 [ 100.228639][ T6899] lo speed is unknown, defaulting to 1000 [ 100.369644][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.3.255'. [ 100.435005][ T6924] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.562406][ T6930] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 100.718009][ T51] hsr_slave_0: left promiscuous mode [ 100.718872][ T6933] xt_bpf: check failed: parse error [ 100.733328][ T6934] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 100.755115][ T51] hsr_slave_1: left promiscuous mode [ 100.761103][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.769331][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.787976][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.807503][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.815809][ T6939] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 100.857365][ T51] veth1_macvtap: left promiscuous mode [ 100.863116][ T51] veth0_macvtap: left promiscuous mode [ 100.869743][ T51] veth1_vlan: left promiscuous mode [ 100.875939][ T51] veth0_vlan: left promiscuous mode [ 101.186281][ T5846] Bluetooth: hci0: command tx timeout [ 101.314914][ T51] team0 (unregistering): Port device team_slave_1 removed [ 101.357446][ T51] team0 (unregistering): Port device team_slave_0 removed [ 101.789759][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 101.977360][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.995465][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.002720][ T6889] bridge_slave_0: entered allmulticast mode [ 102.042730][ T6889] bridge_slave_0: entered promiscuous mode [ 102.087115][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.118316][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.139009][ T6889] bridge_slave_1: entered allmulticast mode [ 102.157136][ T6889] bridge_slave_1: entered promiscuous mode [ 102.253801][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 102.266022][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.350760][ T6957] lo speed is unknown, defaulting to 1000 [ 102.390431][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.473817][ T6957] lo speed is unknown, defaulting to 1000 [ 102.524573][ T6889] team0: Port device team_slave_0 added [ 102.623941][ T6889] team0: Port device team_slave_1 added [ 102.731491][ T6987] bond1 (unregistering): Released all slaves [ 102.767857][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.784841][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.874619][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.914175][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.952342][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.020702][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.176661][ T6889] hsr_slave_0: entered promiscuous mode [ 103.201683][ T6889] hsr_slave_1: entered promiscuous mode [ 103.215689][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.241925][ T6889] Cannot create hsr debugfs directory [ 103.258069][ T5846] Bluetooth: hci0: command tx timeout [ 103.347206][ T7004] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 103.403322][ T7004] Bluetooth: MGMT ver 1.23 [ 103.458998][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.273'. [ 103.469360][ T7006] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 103.858053][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.877173][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 104.018955][ T6889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.051345][ T6889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.082922][ T6889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.120990][ T6889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.203106][ T7039] vlan2: entered promiscuous mode [ 104.205738][ T7042] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 104.339903][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.381808][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.406002][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.413164][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.448616][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.455836][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.497336][ T7051] ip6tnl2: entered promiscuous mode [ 104.502675][ T7051] ip6tnl2: entered allmulticast mode [ 104.855970][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.955715][ T6889] veth0_vlan: entered promiscuous mode [ 104.989276][ T6889] veth1_vlan: entered promiscuous mode [ 105.129748][ T6889] veth0_macvtap: entered promiscuous mode [ 105.143355][ T7078] xt_socket: unknown flags 0x8 [ 105.161116][ T7080] pimreg3: entered allmulticast mode [ 105.192455][ T6889] veth1_macvtap: entered promiscuous mode [ 105.237146][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.251855][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.264784][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.277407][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.288374][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.300050][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.312505][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.334574][ T5843] Bluetooth: hci0: command tx timeout [ 105.344502][ T7086] tipc: Started in network mode [ 105.352291][ T7086] tipc: Node identity 080211000001, cluster identity 4711 [ 105.360639][ T7086] tipc: Enabled bearer , priority 0 [ 105.386019][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.398212][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.408915][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.421013][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.432005][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.443109][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.455060][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.496742][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.512683][ T6889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.539095][ T6889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.550859][ T6889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.564972][ T6889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.701129][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.722538][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.760337][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.784181][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.874296][ T7094] lo speed is unknown, defaulting to 1000 [ 105.899207][ T7094] lo speed is unknown, defaulting to 1000 [ 105.917361][ T7096] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 106.051226][ T7096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.092985][ T7103] syz_tun: entered promiscuous mode [ 106.112953][ T7102] syz_tun: left promiscuous mode [ 106.475338][ T5886] tipc: Node number set to 134418688 [ 106.495691][ T7123] IPv6: addrconf: prefix option has invalid lifetime [ 106.502456][ T7123] IPv6: addrconf: prefix option has invalid lifetime [ 106.520809][ T7124] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.616925][ T7124] lo speed is unknown, defaulting to 1000 [ 106.639407][ T7132] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.648270][ T7132] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.657289][ T7132] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.665949][ T7132] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.679286][ T7124] lo speed is unknown, defaulting to 1000 [ 106.692593][ T7132] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 107.120390][ T7124] syz.3.311 (7124) used greatest stack depth: 18480 bytes left [ 107.399887][ T7153] syzkaller1: entered promiscuous mode [ 107.414585][ T5843] Bluetooth: hci0: command 0x0419 tx timeout [ 107.423105][ T7153] syzkaller1: entered allmulticast mode [ 107.431262][ T7152] netlink: 188 bytes leftover after parsing attributes in process `syz.1.319'. [ 107.470812][ T7152] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 107.482595][ T7152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.507130][ T7158] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 107.726902][ T7162] xt_CT: No such helper "snmp" [ 107.758968][ T7162] lo speed is unknown, defaulting to 1000 [ 107.765821][ T7162] lo speed is unknown, defaulting to 1000 [ 108.022119][ T7179] x_tables: duplicate underflow at hook 2 [ 108.195622][ T7190] lo speed is unknown, defaulting to 1000 [ 108.202037][ T7190] lo speed is unknown, defaulting to 1000 [ 108.227574][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 108.399765][ T3578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.490985][ T3578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.578057][ T3578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.621050][ T7200] syzkaller1: entered promiscuous mode [ 108.637670][ T7200] syzkaller1: entered allmulticast mode [ 108.678780][ T3578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.771567][ T3578] bridge_slave_1: left allmulticast mode [ 108.777915][ T3578] bridge_slave_1: left promiscuous mode [ 108.784704][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.794997][ T3578] bridge_slave_0: left allmulticast mode [ 108.800673][ T3578] bridge_slave_0: left promiscuous mode [ 108.806662][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.125020][ T3578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.137114][ T3578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.206842][ T3578] bond0 (unregistering): Released all slaves [ 109.262418][ T7207] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.320482][ T7207] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.375635][ T7205] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 109.492958][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 109.568029][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.579953][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.588509][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.615329][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.625445][ T7207] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.639992][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.650301][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.662294][ T7207] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.745823][ T7219] lo speed is unknown, defaulting to 1000 [ 109.752643][ T7219] lo speed is unknown, defaulting to 1000 [ 109.840569][ T7207] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.866460][ T7207] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.885885][ T7214] lo speed is unknown, defaulting to 1000 [ 109.929761][ T7214] lo speed is unknown, defaulting to 1000 [ 109.954550][ T7207] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.966368][ T7207] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.161814][ T3578] hsr_slave_0: left promiscuous mode [ 110.168640][ T3578] hsr_slave_1: left promiscuous mode [ 110.175919][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.183394][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.191581][ T3578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.202067][ T3578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.244752][ T3578] veth1_macvtap: left promiscuous mode [ 110.250405][ T3578] veth0_macvtap: left promiscuous mode [ 110.256194][ T3578] veth1_vlan: left promiscuous mode [ 110.261587][ T3578] veth0_vlan: left promiscuous mode [ 111.081711][ T3578] team0 (unregistering): Port device team_slave_1 removed [ 111.122212][ T3578] team0 (unregistering): Port device team_slave_0 removed [ 111.579264][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 111.654135][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 111.704426][ T7207] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.733695][ T5850] Bluetooth: hci0: command tx timeout [ 111.743696][ T7207] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.815053][ T7207] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.840070][ T7207] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.887607][ T7207] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.914130][ T7207] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.929847][ T7207] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.939589][ T7207] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.957492][ T7214] chnl_net:caif_netlink_parms(): no params data found [ 112.236264][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.245204][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.252635][ T7214] bridge_slave_0: entered allmulticast mode [ 112.260390][ T7214] bridge_slave_0: entered promiscuous mode [ 112.272471][ T7289] lo: entered allmulticast mode [ 112.293328][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.305247][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.312744][ T7214] bridge_slave_1: entered allmulticast mode [ 112.320448][ T7214] bridge_slave_1: entered promiscuous mode [ 112.351396][ T7289] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.359982][ T7289] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.368410][ T7289] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.377453][ T7289] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.392674][ T7289] vxlan0: entered promiscuous mode [ 112.398882][ T7289] vxlan0: entered allmulticast mode [ 112.409699][ T7289] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.418365][ T7289] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.427505][ T7289] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.436886][ T7289] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.500711][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.736334][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.847688][ T7214] team0: Port device team_slave_0 added [ 112.871592][ T7315] xt_time: unknown flags 0x4 [ 112.883722][ T7214] team0: Port device team_slave_1 added [ 113.189111][ T7333] netlink: 'syz.4.367': attribute type 7 has an invalid length. [ 113.206619][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.225024][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.259842][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.273176][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.280642][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.334953][ T7336] Cannot find del_set index 1 as target [ 113.342327][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.476349][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 113.513796][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.373'. [ 113.549660][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 113.577920][ T7346] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 113.598131][ T7214] hsr_slave_0: entered promiscuous mode [ 113.625030][ T7214] hsr_slave_1: entered promiscuous mode [ 113.631366][ T7214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.647962][ T7214] Cannot create hsr debugfs directory [ 113.737097][ T7344] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.756773][ T7344] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.815473][ T5850] Bluetooth: hci0: command tx timeout [ 113.866205][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 113.938690][ T7344] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.950035][ T7344] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.029436][ T7344] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.044159][ T7344] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.118988][ T7344] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.129064][ T7344] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.490014][ T7214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.512280][ T7214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.546080][ T7214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.576869][ T7214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.898329][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.944229][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.959190][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.970061][ T7392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.996680][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.004126][ T5883] IPVS: starting estimator thread 0... [ 115.012728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.019850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.029295][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'. [ 115.076279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.083847][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.144132][ T7397] IPVS: using max 20 ests per chain, 48000 per kthread [ 115.222634][ T7399] lo speed is unknown, defaulting to 1000 [ 115.235453][ T7399] lo speed is unknown, defaulting to 1000 [ 115.328691][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'. [ 115.722476][ T5885] IPVS: starting estimator thread 0... [ 115.778237][ T7344] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.814742][ T7424] IPVS: using max 23 ests per chain, 55200 per kthread [ 115.840871][ T7344] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.893777][ T5850] Bluetooth: hci0: command tx timeout [ 115.914590][ T7344] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.925267][ T7344] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.950919][ T7344] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.960322][ T7344] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.992911][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.005448][ T7344] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.023260][ T7344] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.116924][ T7214] veth0_vlan: entered promiscuous mode [ 116.170269][ T7214] veth1_vlan: entered promiscuous mode [ 116.239698][ T7214] veth0_macvtap: entered promiscuous mode [ 116.268864][ T7214] veth1_macvtap: entered promiscuous mode [ 116.330176][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.357004][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.397293][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.413316][ T7444] netlink: 52 bytes leftover after parsing attributes in process `syz.1.396'. [ 116.413607][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.432759][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.443441][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.457616][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.485828][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.503705][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.521136][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.538729][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.559089][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.570112][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.581520][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.761634][ T7214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.794120][ T7214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.802877][ T7214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.823589][ T7214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.246582][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.301596][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.369709][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.382292][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.704767][ T7489] lo speed is unknown, defaulting to 1000 [ 117.711556][ T7489] lo speed is unknown, defaulting to 1000 [ 118.458289][ T81] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.742914][ T81] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.819466][ T81] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.898570][ T81] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.994722][ T81] bridge_slave_1: left allmulticast mode [ 119.000561][ T81] bridge_slave_1: left promiscuous mode [ 119.006594][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.017500][ T81] bridge_slave_0: left allmulticast mode [ 119.023188][ T81] bridge_slave_0: left promiscuous mode [ 119.029407][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.587896][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.613428][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.630338][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.642507][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.649441][ T81] bond0 (unregistering): Released all slaves [ 119.667265][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.678614][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.720063][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.738539][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.811791][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.835859][ T7563] team0: Port device bridge0 removed [ 119.845809][ T7563] bridge_slave_0: left allmulticast mode [ 119.852353][ T7563] bridge_slave_0: left promiscuous mode [ 119.858534][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.892624][ T7563] bridge_slave_1: left allmulticast mode [ 119.899070][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.926836][ T7567] __nla_validate_parse: 1 callbacks suppressed [ 119.926854][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 119.945274][ T7563] bond0: (slave bond_slave_0): Releasing backup interface [ 119.969696][ T7563] bond0: (slave bond_slave_1): Releasing backup interface [ 120.005492][ T7563] team0: Port device team_slave_0 removed [ 120.018370][ T7563] team0: Port device team_slave_1 removed [ 120.026096][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.033455][ T7574] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.433'. [ 120.043929][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.054314][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.061776][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.087091][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 120.100999][ T7563] vlan2: entered allmulticast mode [ 120.106927][ T7563] bond0: entered allmulticast mode [ 120.211526][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 120.258600][ T7551] lo speed is unknown, defaulting to 1000 [ 120.312200][ T7551] lo speed is unknown, defaulting to 1000 [ 120.451955][ T81] hsr_slave_0: left promiscuous mode [ 120.468065][ T7583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.483059][ T81] hsr_slave_1: left promiscuous mode [ 120.489734][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.513704][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.531060][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.540239][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.636743][ T81] veth1_macvtap: left promiscuous mode [ 120.642272][ T81] veth0_macvtap: left promiscuous mode [ 120.661756][ T81] veth1_vlan: left promiscuous mode [ 120.671756][ T81] veth0_vlan: left promiscuous mode [ 121.133388][ T81] team0 (unregistering): Port device team_slave_1 removed [ 121.180532][ T81] team0 (unregistering): Port device team_slave_0 removed [ 121.382831][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 121.393065][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.442'. [ 121.813699][ T5850] Bluetooth: hci0: command tx timeout [ 122.100024][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 122.349510][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 122.388588][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.407287][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.420062][ T7551] bridge_slave_0: entered allmulticast mode [ 122.431079][ T7551] bridge_slave_0: entered promiscuous mode [ 122.469978][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.482286][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.490846][ T7551] bridge_slave_1: entered allmulticast mode [ 122.498432][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 122.509441][ T7551] bridge_slave_1: entered promiscuous mode [ 122.559250][ T7650] netlink: 71 bytes leftover after parsing attributes in process `syz.2.455'. [ 122.593056][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.653383][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.701360][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 122.825400][ T7551] team0: Port device team_slave_0 added [ 122.865587][ T7662] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 122.870227][ T7551] team0: Port device team_slave_1 added [ 122.951784][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.967896][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.015446][ T7669] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 123.034747][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.100411][ T7669] bond2: entered promiscuous mode [ 123.105578][ T7669] bond2: entered allmulticast mode [ 123.111623][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.119031][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.148646][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.180960][ T7671] batadv1: entered allmulticast mode [ 123.211406][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.221568][ T7671] bond2: (slave batadv1): making interface the new active one [ 123.229191][ T7671] batadv1: entered promiscuous mode [ 123.236603][ T7671] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 123.247643][ T7669] bond2: left promiscuous mode [ 123.252448][ T7669] batadv1: left promiscuous mode [ 123.260210][ T7669] bond2: left allmulticast mode [ 123.264923][ T7680] netlink: 'syz.2.464': attribute type 7 has an invalid length. [ 123.267910][ T7669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.422985][ T7551] hsr_slave_0: entered promiscuous mode [ 123.451403][ T7551] hsr_slave_1: entered promiscuous mode [ 123.482030][ T7551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.525341][ T7551] Cannot create hsr debugfs directory [ 123.552914][ T7686] lo speed is unknown, defaulting to 1000 [ 123.611509][ T7686] lo speed is unknown, defaulting to 1000 [ 124.371611][ T7697] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.509589][ T7738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.591999][ T7739] can: request_module (can-proto-3) failed. [ 124.659900][ T7551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.691253][ T7551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.711881][ T7551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.725154][ T7751] Cannot find del_set index 4 as target [ 124.741809][ T7551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.868792][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.051577][ T7757] team0 (unregistering): Port device team_slave_0 removed [ 125.069780][ T7757] team0 (unregistering): Port device team_slave_1 removed [ 125.104862][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.120589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.128062][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.156962][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.164285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.268020][ T7551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.293181][ T7551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.795211][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.849844][ T7551] veth0_vlan: entered promiscuous mode [ 125.884439][ T7551] veth1_vlan: entered promiscuous mode [ 125.986923][ T7551] veth0_macvtap: entered promiscuous mode [ 126.027397][ T7551] veth1_macvtap: entered promiscuous mode [ 126.049850][ T7806] veth0_macvtap: left promiscuous mode [ 126.096117][ T7804] bridge0: entered promiscuous mode [ 126.101466][ T7804] macvlan2: entered promiscuous mode [ 126.111625][ T7804] bridge0: port 3(macvlan2) entered blocking state [ 126.130117][ T7804] bridge0: port 3(macvlan2) entered disabled state [ 126.156088][ T7804] macvlan2: entered allmulticast mode [ 126.161535][ T7804] bridge0: entered allmulticast mode [ 126.177552][ T7804] macvlan2: left allmulticast mode [ 126.189963][ T7804] bridge0: left allmulticast mode [ 126.205508][ T7804] bridge0: left promiscuous mode [ 126.305362][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.332057][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.354742][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.382573][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.409415][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.432391][ T7819] lo speed is unknown, defaulting to 1000 [ 126.439034][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.476410][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.486607][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.514846][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.545494][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.564744][ T7817] lo speed is unknown, defaulting to 1000 [ 126.571047][ T7819] lo speed is unknown, defaulting to 1000 [ 126.590545][ T7551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.632620][ T7551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.662087][ T7551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.671353][ T7551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.697644][ T7817] lo speed is unknown, defaulting to 1000 [ 127.091246][ T7820] syzkaller1: entered promiscuous mode [ 127.108324][ T7820] syzkaller1: entered allmulticast mode [ 127.395795][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.415359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.452305][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.462679][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.796263][ T7860] __nla_validate_parse: 11 callbacks suppressed [ 127.796283][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 128.018162][ T7876] netlink: 'syz.4.525': attribute type 10 has an invalid length. [ 128.031694][ T7876] netlink: 55 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.049917][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.069234][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.478851][ T7906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.536'. [ 128.527572][ T7912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.538'. [ 128.588653][ T7915] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 128.597518][ T7915] netlink: 224 bytes leftover after parsing attributes in process `syz.3.539'. [ 129.021718][ T7941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.042993][ T7942] netlink: 92 bytes leftover after parsing attributes in process `syz.1.545'. [ 129.082275][ T7942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.190916][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 129.211060][ T7950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.550'. [ 129.589517][ T7977] macvtap1: entered promiscuous mode [ 129.596226][ T7977] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 129.603320][ T7977] macvtap1: entered allmulticast mode [ 129.609358][ T7977] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 129.619947][ T7977] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 129.627373][ T7977] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 129.900220][ T7986] lo speed is unknown, defaulting to 1000 [ 129.959944][ T7986] lo speed is unknown, defaulting to 1000 [ 130.503762][ T8018] openvswitch: netlink: Unknown key attributes 20 [ 130.647094][ T8009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.664370][ T8009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.677814][ T8009] bond0 (unregistering): (slave bond1): Releasing backup interface [ 130.698426][ T8009] bond0 (unregistering): (slave team0): Releasing backup interface [ 130.713246][ T8009] bond0 (unregistering): Released all slaves [ 130.998496][ T8030] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (12) [ 131.018412][ T8033] xt_l2tp: missing protocol rule (udp|l2tpip) [ 131.025273][ T8032] xt_l2tp: missing protocol rule (udp|l2tpip) [ 131.348301][ T8062] vlan2: entered promiscuous mode [ 131.606666][ T8077] netlink: 'syz.2.589': attribute type 27 has an invalid length. [ 131.659418][ T8082] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 131.788313][ T8095] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 131.868291][ T8094] dummy0: entered promiscuous mode [ 131.882869][ T8094] syz_tun: entered promiscuous mode [ 131.900295][ T8094] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 131.962496][ T8103] lo speed is unknown, defaulting to 1000 [ 131.969689][ T8103] lo speed is unknown, defaulting to 1000 [ 132.352093][ T8123] syzkaller1: entered promiscuous mode [ 132.358829][ T8123] syzkaller1: entered allmulticast mode [ 132.590437][ T8129] lo speed is unknown, defaulting to 1000 [ 132.598105][ T8129] lo speed is unknown, defaulting to 1000 [ 132.962531][ T8142] lo speed is unknown, defaulting to 1000 [ 132.969389][ T8142] lo speed is unknown, defaulting to 1000 [ 133.113926][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126932][ T8149] __nla_validate_parse: 11 callbacks suppressed [ 133.126951][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 133.165897][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 133.170478][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 133.247432][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 133.391631][ T8150] lo speed is unknown, defaulting to 1000 [ 133.625573][ T8162] bond3 (unregistering): Released all slaves [ 133.773997][ T8150] lo speed is unknown, defaulting to 1000 [ 134.374519][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 134.394817][ T8195] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 134.448342][ T8195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.757106][ T8211] netlink: 'syz.3.634': attribute type 10 has an invalid length. [ 134.775078][ T8211] team0: Device veth1_macvtap failed to register rx_handler [ 134.798355][ T8211] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 134.806248][ T8211] netlink: 224 bytes leftover after parsing attributes in process `syz.3.634'. [ 134.815804][ T8211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 134.879583][ T8209] tun0: tun_chr_ioctl cmd 2147767520 [ 135.144311][ T8220] bridge_slave_0: default FDB implementation only supports local addresses [ 135.144362][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 135.221750][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.230085][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.316390][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.334177][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.391087][ T8220] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.399904][ T8220] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.409368][ T8220] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.418063][ T8220] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.445048][ T8220] veth3: left promiscuous mode [ 135.457274][ T8220] batadv1: left allmulticast mode [ 135.536994][ T8228] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 135.668072][ T8237] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 135.780879][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 135.863343][ T8246] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 136.061683][ T8254] netlink: 336 bytes leftover after parsing attributes in process `syz.2.647'. [ 136.121891][ T8246] team0: entered promiscuous mode [ 136.131262][ T8246] team_slave_0: entered promiscuous mode [ 136.141788][ T8246] team_slave_1: entered promiscuous mode [ 136.154592][ T8246] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 136.201691][ T8245] team0: left promiscuous mode [ 136.207915][ T8245] team_slave_0: left promiscuous mode [ 136.220796][ T8245] team_slave_1: left promiscuous mode [ 136.227952][ T8245] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 136.499903][ T8273] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 136.523984][ T8273] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 136.663398][ T8283] xt_TCPMSS: Only works on TCP SYN packets [ 136.715011][ T8286] lo speed is unknown, defaulting to 1000 [ 136.721354][ T8286] lo speed is unknown, defaulting to 1000 [ 137.817469][ T8297] lo speed is unknown, defaulting to 1000 [ 137.890731][ T8297] lo speed is unknown, defaulting to 1000 [ 137.955728][ T8306] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 138.189005][ T8314] __nla_validate_parse: 2 callbacks suppressed [ 138.189024][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 138.542776][ T8334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.674'. [ 138.709270][ T8342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 138.727216][ T8342] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 138.905910][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 138.920236][ T8348] veth2: entered promiscuous mode [ 139.353379][ T8361] team0: Port device bridge1 added [ 139.989704][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 140.635578][ T8424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.646897][ T8424] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.707'. [ 140.688281][ T8424] netlink: zone id is out of range [ 140.710770][ T8424] netlink: zone id is out of range [ 140.717622][ T8433] netlink: 96 bytes leftover after parsing attributes in process `syz.2.710'. [ 140.730629][ T8424] netlink: zone id is out of range [ 140.742425][ T8424] netlink: zone id is out of range [ 140.751595][ T8424] netlink: zone id is out of range [ 140.764595][ T8424] netlink: zone id is out of range [ 140.781970][ T8424] netlink: zone id is out of range [ 140.806821][ T8424] netlink: zone id is out of range [ 140.832847][ T8424] netlink: zone id is out of range [ 141.378627][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 141.427695][ T8463] lo speed is unknown, defaulting to 1000 [ 141.435360][ T8463] lo speed is unknown, defaulting to 1000 [ 141.461389][ T8470] xt_policy: output policy not valid in PREROUTING and INPUT [ 141.646750][ T8480] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 142.197184][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 142.799191][ T8518] lo speed is unknown, defaulting to 1000 [ 142.811729][ T8518] lo speed is unknown, defaulting to 1000 [ 142.988156][ T8542] tipc: Started in network mode [ 142.999976][ T8542] tipc: Node identity ac14140f, cluster identity 4711 [ 143.038429][ T8542] tipc: Enabled bearer , priority 10 [ 143.280970][ T8559] lo speed is unknown, defaulting to 1000 [ 143.317336][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.325128][ T8566] bridge0: port 1(bond2) entered blocking state [ 143.331486][ T8566] bridge0: port 1(bond2) entered disabled state [ 143.343822][ T8566] bond2: entered allmulticast mode [ 143.350513][ T8566] bond2: entered promiscuous mode [ 143.427845][ T8559] lo speed is unknown, defaulting to 1000 [ 143.511786][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 143.746202][ T8588] lo speed is unknown, defaulting to 1000 [ 143.752933][ T8588] lo speed is unknown, defaulting to 1000 [ 143.840522][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 143.852830][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 143.927856][ T8603] netlink: 'syz.3.758': attribute type 32 has an invalid length. [ 144.039375][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 144.065322][ T8605] macvtap1: entered promiscuous mode [ 144.070913][ T8605] bridge0: entered promiscuous mode [ 144.080918][ T8605] macvtap1: entered allmulticast mode [ 144.087367][ T8605] bridge0: entered allmulticast mode [ 144.137071][ T8608] bridge0: left allmulticast mode [ 144.143851][ T8608] bridge0: left promiscuous mode [ 144.160442][ T5914] tipc: Node number set to 2886997007 [ 144.241754][ T8613] bond2: left allmulticast mode [ 144.248267][ T8613] bond2: left promiscuous mode [ 144.253240][ T8613] bridge0: port 1(bond2) entered disabled state [ 144.812412][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.769'. [ 144.839637][ T8638] netlink: 'syz.1.768': attribute type 6 has an invalid length. [ 145.050574][ T8651] xt_l2tp: invalid flags combination: 4 [ 145.510574][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 145.523627][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 145.642957][ T8672] lo speed is unknown, defaulting to 1000 [ 145.650063][ T8672] lo speed is unknown, defaulting to 1000 [ 145.715180][ T8672] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 145.724957][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.3.782 Not tainted 6.14.0-rc4-syzkaller-01095-gc62e6f056ea3 #0 [ 145.724985][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.725001][ T8672] Call Trace: [ 145.725013][ T8672] [ 145.725021][ T8672] dump_stack_lvl+0x241/0x360 [ 145.725058][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.725080][ T8672] ? __pfx__printk+0x10/0x10 [ 145.725105][ T8672] ? __kmalloc_cache_noprof+0x243/0x390 [ 145.725130][ T8672] ? sysfs_warn_dup+0x51/0xa0 [ 145.725157][ T8672] sysfs_warn_dup+0x8e/0xa0 [ 145.725177][ T8672] sysfs_do_create_link_sd+0xbe/0x110 [ 145.725203][ T8672] device_add_class_symlinks+0x1c5/0x250 [ 145.725245][ T8672] device_add+0x553/0xbf0 [ 145.725279][ T8672] wiphy_register+0x1922/0x2650 [ 145.725313][ T8672] ? __pfx_wiphy_register+0x10/0x10 [ 145.725329][ T8672] ? minstrel_ht_alloc+0x84b/0x940 [ 145.725358][ T8672] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 145.725388][ T8672] ieee80211_register_hw+0x35d9/0x42e0 [ 145.725425][ T8672] ? ieee80211_register_hw+0x15e1/0x42e0 [ 145.725459][ T8672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 145.725494][ T8672] ? __asan_memset+0x23/0x50 [ 145.725513][ T8672] ? __hrtimer_init+0x170/0x250 [ 145.725538][ T8672] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 145.725593][ T8672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 145.725612][ T8672] ? trace_kmalloc+0x1f/0xd0 [ 145.725631][ T8672] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 145.725654][ T8672] ? kstrndup+0xbb/0x150 [ 145.725689][ T8672] hwsim_new_radio_nl+0xece/0x2290 [ 145.725722][ T8672] ? __pfx___nla_validate_parse+0x10/0x10 [ 145.725758][ T8672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.725813][ T8672] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 145.725850][ T8672] genl_rcv_msg+0xb1f/0xec0 [ 145.725886][ T8672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.725942][ T8672] ? __pfx_lock_acquire+0x10/0x10 [ 145.725969][ T8672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.725991][ T8672] ? __pfx___might_resched+0x10/0x10 [ 145.726038][ T8672] netlink_rcv_skb+0x206/0x480 [ 145.726059][ T8672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.726084][ T8672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.726134][ T8672] genl_rcv+0x28/0x40 [ 145.726154][ T8672] netlink_unicast+0x7f6/0x990 [ 145.726182][ T8672] ? __pfx_netlink_unicast+0x10/0x10 [ 145.726197][ T8672] ? __virt_addr_valid+0x45f/0x530 [ 145.726216][ T8672] ? __phys_addr_symbol+0x2f/0x70 [ 145.726233][ T8672] ? __check_object_size+0x47a/0x730 [ 145.726263][ T8672] netlink_sendmsg+0x8de/0xcb0 [ 145.726298][ T8672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.726337][ T8672] ? aa_sock_msg_perm+0x91/0x160 [ 145.726370][ T8672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.726390][ T8672] __sock_sendmsg+0x221/0x270 [ 145.726417][ T8672] ____sys_sendmsg+0x53a/0x860 [ 145.726471][ T8672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.726495][ T8672] ? __fget_files+0x2a/0x410 [ 145.726523][ T8672] ? __fget_files+0x2a/0x410 [ 145.726557][ T8672] __sys_sendmsg+0x269/0x350 [ 145.726590][ T8672] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.726663][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.726689][ T8672] ? do_syscall_64+0x100/0x230 [ 145.726711][ T8672] ? do_syscall_64+0xb6/0x230 [ 145.726731][ T8672] do_syscall_64+0xf3/0x230 [ 145.726761][ T8672] ? clear_bhb_loop+0x35/0x90 [ 145.726790][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.726812][ T8672] RIP: 0033:0x7f2a4cf8d169 [ 145.726838][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.726854][ T8672] RSP: 002b:00007f2a4dded038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.726875][ T8672] RAX: ffffffffffffffda RBX: 00007f2a4d1a5fa0 RCX: 00007f2a4cf8d169 [ 145.726890][ T8672] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 145.726903][ T8672] RBP: 00007f2a4d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.726916][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.726928][ T8672] R13: 0000000000000000 R14: 00007f2a4d1a5fa0 R15: 00007ffee8d65e08 [ 145.726959][ T8672] [ 145.747619][ T8677] batadv_slave_1: entered promiscuous mode [ 146.171645][ T8672] syzkaller1: entered promiscuous mode [ 146.184235][ T8672] syzkaller1: entered allmulticast mode [ 146.238861][ T8681] batadv_slave_0: entered promiscuous mode [ 146.247822][ T8684] team0: entered promiscuous mode [ 146.257314][ T8684] team_slave_0: entered promiscuous mode [ 146.263200][ T8684] team_slave_1: entered promiscuous mode [ 146.302331][ T8684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.785'. [ 146.314764][ T8676] batadv_slave_0: left promiscuous mode [ 146.320696][ T8676] batadv_slave_1: left promiscuous mode [ 146.354078][ T8686] batadv_slave_1: entered promiscuous mode [ 146.421646][ T8686] netlink: 336 bytes leftover after parsing attributes in process `syz.1.785'. [ 146.502927][ T8695] ip6gretap0: entered promiscuous mode [ 146.511404][ T8695] batadv_slave_0: entered promiscuous mode [ 146.518236][ T8695] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 146.526000][ T8695] Cannot create hsr debugfs directory [ 146.531756][ T8683] batadv_slave_1: left promiscuous mode [ 146.554059][ T8683] team0: left promiscuous mode [ 146.562538][ T8683] team_slave_0: left promiscuous mode [ 146.573081][ T8683] team_slave_1: left promiscuous mode [ 146.660642][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 147.061464][ T8722] netlink: 'syz.3.798': attribute type 20 has an invalid length. [ 147.350159][ T8728] gre1: entered promiscuous mode [ 147.510551][ T8730] net_ratelimit: 13 callbacks suppressed [ 147.510574][ T8730] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 147.724901][ T8735] lo speed is unknown, defaulting to 1000 [ 147.731720][ T8735] lo speed is unknown, defaulting to 1000 [ 148.080030][ T8764] tipc: Started in network mode [ 148.085771][ T8764] tipc: Node identity 7, cluster identity 4711 [ 148.092195][ T8764] tipc: Node number set to 7 [ 148.097726][ T8764] tipc: Cannot configure node identity twice [ 148.161630][ T8767] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 148.164700][ T8768] netlink: zone id is out of range [ 148.224652][ T8767] bond3: (slave gretap1): making interface the new active one [ 148.236979][ T8767] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 148.323209][ T8776] bridge_slave_0: left allmulticast mode [ 148.329145][ T8776] bridge_slave_0: left promiscuous mode [ 148.335348][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.345979][ T8776] bridge_slave_1: left allmulticast mode [ 148.351654][ T8776] bridge_slave_1: left promiscuous mode [ 148.360315][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.403884][ T8776] bond0: (slave bond_slave_0): Releasing backup interface [ 148.413356][ T8776] bond0: (slave bond_slave_1): Releasing backup interface [ 148.423685][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.431854][ T8776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.441732][ T8776] bond2: (slave batadv1): Releasing active interface [ 148.451045][ T8776] bond3: (slave gretap1): Releasing active interface [ 148.470352][ T8782] vlan0: entered allmulticast mode [ 148.594599][ T8786] __nla_validate_parse: 8 callbacks suppressed [ 148.594617][ T8786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.820'. [ 148.670567][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.820'. [ 148.705785][ T8784] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 148.887803][ T8799] IPVS: Scheduler module ip_vs_sip not found [ 148.916718][ T8801] netlink: 'syz.4.825': attribute type 33 has an invalid length. [ 148.924754][ T8801] netlink: 167332 bytes leftover after parsing attributes in process `syz.4.825'. [ 148.962589][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.826'. [ 148.972340][ T8803] batadv_slave_1: entered promiscuous mode [ 149.131930][ T8813] netlink: 732 bytes leftover after parsing attributes in process `syz.1.829'. [ 149.161590][ T8813] netlink: 732 bytes leftover after parsing attributes in process `syz.1.829'. [ 149.419880][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 149.432930][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 149.451126][ T8833] netlink: 'syz.2.831': attribute type 2 has an invalid length. [ 149.460114][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 149.817796][ T8856] IPVS: Unknown mcast interface: team0 [ 150.241613][ T8881] lo speed is unknown, defaulting to 1000 [ 150.282539][ T8887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.284435][ T8884] xt_nfacct: accounting object `syz1' does not exists [ 150.321787][ T8881] lo speed is unknown, defaulting to 1000 [ 150.341763][ T8887] SET target dimension over the limit! [ 150.416806][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'. [ 150.815178][ T8913] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 150.818508][ T8912] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 150.955709][ T8917] netlink: 'syz.3.847': attribute type 49 has an invalid length. [ 150.963865][ T8918] netlink: 'syz.3.847': attribute type 49 has an invalid length. [ 151.687980][ T8952] lo speed is unknown, defaulting to 1000 [ 151.695079][ T8952] lo speed is unknown, defaulting to 1000 [ 151.887116][ T8955] lo speed is unknown, defaulting to 1000 [ 151.967707][ T8955] lo speed is unknown, defaulting to 1000 [ 152.551353][ T8976] lo speed is unknown, defaulting to 1000 [ 152.566214][ T8976] lo speed is unknown, defaulting to 1000 [ 153.369802][ T9014] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 153.377918][ T9014] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 153.454792][ T9017] netlink: 'syz.3.873': attribute type 39 has an invalid length. [ 153.674390][ T9021] __nla_validate_parse: 6 callbacks suppressed [ 153.674408][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 153.850367][ T8976] x_tables: duplicate entry at hook 2 [ 153.880891][ T9028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.970074][ T9028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.287260][ T9041] FAULT_INJECTION: forcing a failure. [ 154.287260][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.310583][ T9028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.331098][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.2.880 Not tainted 6.14.0-rc4-syzkaller-01095-gc62e6f056ea3 #0 [ 154.331127][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.331137][ T9041] Call Trace: [ 154.331144][ T9041] [ 154.331152][ T9041] dump_stack_lvl+0x241/0x360 [ 154.331177][ T9041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.331195][ T9041] ? __pfx__printk+0x10/0x10 [ 154.331214][ T9041] ? __pfx_lock_release+0x10/0x10 [ 154.331245][ T9041] should_fail_ex+0x40a/0x550 [ 154.331272][ T9041] _copy_from_user+0x2d/0xb0 [ 154.331300][ T9041] copy_msghdr_from_user+0xae/0x680 [ 154.331326][ T9041] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 154.331344][ T9041] ? __fget_files+0x2a/0x410 [ 154.331369][ T9041] ? __fget_files+0x2a/0x410 [ 154.331398][ T9041] __sys_sendmsg+0x209/0x350 [ 154.331427][ T9041] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.331463][ T9041] ? do_sys_openat2+0x17a/0x1d0 [ 154.331510][ T9041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.331534][ T9041] ? do_syscall_64+0x100/0x230 [ 154.331552][ T9041] ? do_syscall_64+0xb6/0x230 [ 154.331571][ T9041] do_syscall_64+0xf3/0x230 [ 154.331586][ T9041] ? clear_bhb_loop+0x35/0x90 [ 154.331609][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.331630][ T9041] RIP: 0033:0x7f792b18d169 [ 154.331645][ T9041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.331658][ T9041] RSP: 002b:00007f792c0b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.331677][ T9041] RAX: ffffffffffffffda RBX: 00007f792b3a5fa0 RCX: 00007f792b18d169 [ 154.331688][ T9041] RDX: 000000002000400c RSI: 00004000000000c0 RDI: 0000000000000003 [ 154.331699][ T9041] RBP: 00007f792c0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.331710][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.331720][ T9041] R13: 0000000000000000 R14: 00007f792b3a5fa0 R15: 00007ffc73cb3288 [ 154.331747][ T9041] [ 154.656217][ T9028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.770840][ T9049] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 154.804677][ T9049] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 154.911176][ T9054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.958458][ T9051] lo speed is unknown, defaulting to 1000 [ 155.013761][ T9051] lo speed is unknown, defaulting to 1000 [ 155.080581][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.4.888'. [ 155.108165][ T9057] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.117418][ T9057] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.126551][ T9057] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.126619][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 155.135709][ T9057] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.327615][ T9066] netlink: 84 bytes leftover after parsing attributes in process `syz.1.890'. [ 155.429488][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.893'. [ 155.529487][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 155.578791][ T9070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 155.588696][ T9070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.628469][ T9082] FAULT_INJECTION: forcing a failure. [ 155.628469][ T9082] name failslab, interval 1, probability 0, space 0, times 1 [ 155.647366][ T9082] CPU: 1 UID: 0 PID: 9082 Comm: syz.2.895 Not tainted 6.14.0-rc4-syzkaller-01095-gc62e6f056ea3 #0 [ 155.647392][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.647402][ T9082] Call Trace: [ 155.647409][ T9082] [ 155.647417][ T9082] dump_stack_lvl+0x241/0x360 [ 155.647444][ T9082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.647462][ T9082] ? __pfx__printk+0x10/0x10 [ 155.647481][ T9082] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 155.647504][ T9082] ? __pfx___might_resched+0x10/0x10 [ 155.647529][ T9082] should_fail_ex+0x40a/0x550 [ 155.647555][ T9082] should_failslab+0xac/0x100 [ 155.647578][ T9082] kmem_cache_alloc_node_noprof+0x77/0x380 [ 155.647598][ T9082] ? __alloc_skb+0x1c3/0x440 [ 155.647623][ T9082] __alloc_skb+0x1c3/0x440 [ 155.647650][ T9082] ? __pfx___alloc_skb+0x10/0x10 [ 155.647673][ T9082] ? netlink_autobind+0xd6/0x2f0 [ 155.647691][ T9082] ? netlink_autobind+0x2b0/0x2f0 [ 155.647714][ T9082] netlink_sendmsg+0x634/0xcb0 [ 155.647745][ T9082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.647767][ T9082] ? aa_sock_msg_perm+0x91/0x160 [ 155.647796][ T9082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.647813][ T9082] __sock_sendmsg+0x221/0x270 [ 155.647835][ T9082] ____sys_sendmsg+0x53a/0x860 [ 155.647865][ T9082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.647883][ T9082] ? __fget_files+0x2a/0x410 [ 155.647903][ T9082] ? __fget_files+0x2a/0x410 [ 155.647929][ T9082] __sys_sendmsg+0x269/0x350 [ 155.647957][ T9082] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.647992][ T9082] ? do_sys_openat2+0x17a/0x1d0 [ 155.648039][ T9082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.648063][ T9082] ? do_syscall_64+0x100/0x230 [ 155.648082][ T9082] ? do_syscall_64+0xb6/0x230 [ 155.648100][ T9082] do_syscall_64+0xf3/0x230 [ 155.648141][ T9082] ? clear_bhb_loop+0x35/0x90 [ 155.648164][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.648185][ T9082] RIP: 0033:0x7f792b18d169 [ 155.648201][ T9082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.648214][ T9082] RSP: 002b:00007f792c0b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.648233][ T9082] RAX: ffffffffffffffda RBX: 00007f792b3a5fa0 RCX: 00007f792b18d169 [ 155.648245][ T9082] RDX: 000000002000400c RSI: 00004000000000c0 RDI: 0000000000000003 [ 155.648255][ T9082] RBP: 00007f792c0b6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.648266][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.648276][ T9082] R13: 0000000000000000 R14: 00007f792b3a5fa0 R15: 00007ffc73cb3288 [ 155.648302][ T9082] [ 156.165310][ T9099] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 156.477723][ T9113] x_tables: unsorted entry at hook 2 [ 156.483303][ T9115] x_tables: unsorted entry at hook 2 [ 157.603607][ T9127] xt_TCPMSS: Only works on TCP SYN packets [ 158.771336][ T9028] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.786625][ T9028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.806017][ T9028] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.820586][ T9028] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.080106][ T9147] netlink: 277 bytes leftover after parsing attributes in process `syz.4.916'. [ 159.239731][ T9153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.918'. [ 159.418266][ T9166] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.424892][ T9167] raw_sendmsg: syz.2.919 forgot to set AF_INET. Fix it! [ 159.520346][ T9166] lo speed is unknown, defaulting to 1000 [ 159.552924][ T9166] lo speed is unknown, defaulting to 1000 [ 159.577730][ T9176] lo speed is unknown, defaulting to 1000 [ 159.608648][ T9176] lo speed is unknown, defaulting to 1000 [ 160.405173][ T9195] lo speed is unknown, defaulting to 1000 [ 160.468412][ T9195] lo speed is unknown, defaulting to 1000 [ 161.688241][ T9212] lo: entered allmulticast mode [ 161.695938][ T9212] lo: left allmulticast mode [ 161.781924][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 161.791454][ T9215] netlink: 'syz.1.935': attribute type 13 has an invalid length. [ 161.988630][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 162.231404][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 162.526382][ T9234] pim6reg1: entered promiscuous mode [ 162.531802][ T9234] pim6reg1: entered allmulticast mode [ 162.645290][ T9237] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 162.723931][ T9236] netlink: 'syz.1.941': attribute type 4 has an invalid length. [ 162.743152][ T9237] netlink: 'syz.1.941': attribute type 4 has an invalid length. [ 162.787476][ T974] lo speed is unknown, defaulting to 1000 [ 162.834209][ T974] lo speed is unknown, defaulting to 1000 [ 163.039795][ T9256] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 163.064712][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 163.078984][ T9252] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 163.107674][ T9252] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 163.243344][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 163.265737][ T9266] lo speed is unknown, defaulting to 1000 [ 163.304978][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 163.394274][ T9270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.952'. [ 163.601715][ T9273] IPVS: length: 128 != 24 [ 163.703308][ T9275] tls_set_device_offload_rx: netdev not found [ 163.877336][ T9281] lo speed is unknown, defaulting to 1000 [ 163.972746][ T9281] lo speed is unknown, defaulting to 1000 [ 164.489741][ T5885] ================================================================== [ 164.497854][ T5885] BUG: KASAN: slab-use-after-free in __mutex_lock+0x830/0x1010 [ 164.505423][ T5885] Read of size 8 at addr ffff88802a7eeb20 by task kworker/0:5/5885 [ 164.513310][ T5885] [ 164.515642][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:5 Not tainted 6.14.0-rc4-syzkaller-01095-gc62e6f056ea3 #0 [ 164.515662][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.515674][ T5885] Workqueue: events l2cap_chan_timeout [ 164.515696][ T5885] Call Trace: [ 164.515703][ T5885] [ 164.515710][ T5885] dump_stack_lvl+0x241/0x360 [ 164.515731][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.515748][ T5885] ? __pfx__printk+0x10/0x10 [ 164.515765][ T5885] ? _printk+0xd5/0x120 [ 164.515780][ T5885] ? __virt_addr_valid+0x183/0x530 [ 164.515796][ T5885] ? __virt_addr_valid+0x183/0x530 [ 164.515812][ T5885] print_report+0x16e/0x5b0 [ 164.515831][ T5885] ? __virt_addr_valid+0x183/0x530 [ 164.515846][ T5885] ? __virt_addr_valid+0x183/0x530 [ 164.515860][ T5885] ? __virt_addr_valid+0x45f/0x530 [ 164.515875][ T5885] ? __phys_addr+0xba/0x170 [ 164.515898][ T5885] ? __mutex_lock+0x830/0x1010 [ 164.515920][ T5885] kasan_report+0x143/0x180 [ 164.515940][ T5885] ? __mutex_lock+0x830/0x1010 [ 164.515965][ T5885] __mutex_lock+0x830/0x1010 [ 164.515988][ T5885] ? __mutex_lock+0x602/0x1010 [ 164.516012][ T5885] ? l2cap_chan_timeout+0x63/0x360 [ 164.516030][ T5885] ? __pfx___mutex_lock+0x10/0x10 [ 164.516052][ T5885] ? __pfx_lock_acquire+0x10/0x10 [ 164.516076][ T5885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.516102][ T5885] l2cap_chan_timeout+0x63/0x360 [ 164.516128][ T5885] ? process_scheduled_works+0x9c6/0x18e0 [ 164.516147][ T5885] process_scheduled_works+0xabe/0x18e0 [ 164.516179][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.516203][ T5885] ? assign_work+0x364/0x3d0 [ 164.516224][ T5885] worker_thread+0x870/0xd30 [ 164.516247][ T5885] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 164.516270][ T5885] ? __kthread_parkme+0x169/0x1d0 [ 164.516291][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 164.516311][ T5885] kthread+0x7a9/0x920 [ 164.516332][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516354][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 164.516374][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516394][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516417][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516438][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.516457][ T5885] ? lockdep_hardirqs_on+0x99/0x150 [ 164.516478][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516500][ T5885] ret_from_fork+0x4b/0x80 [ 164.516520][ T5885] ? __pfx_kthread+0x10/0x10 [ 164.516541][ T5885] ret_from_fork_asm+0x1a/0x30 [ 164.516566][ T5885] [ 164.516573][ T5885] [ 164.755834][ T5885] Allocated by task 7727: [ 164.760146][ T5885] kasan_save_track+0x3f/0x80 [ 164.764817][ T5885] __kasan_kmalloc+0x98/0xb0 [ 164.769391][ T5885] __kmalloc_cache_noprof+0x243/0x390 [ 164.774754][ T5885] l2cap_conn_add+0xa9/0x8e0 [ 164.779361][ T5885] l2cap_chan_connect+0x61e/0xeb0 [ 164.784383][ T5885] l2cap_sock_connect+0x620/0x950 [ 164.789411][ T5885] kernel_connect+0x119/0x180 [ 164.794077][ T5885] rfcomm_dlc_open+0xadc/0x10d0 [ 164.798929][ T5885] rfcomm_sock_connect+0x305/0x610 [ 164.804030][ T5885] __sys_connect+0x288/0x2d0 [ 164.808611][ T5885] __x64_sys_connect+0x7a/0x90 [ 164.813362][ T5885] do_syscall_64+0xf3/0x230 [ 164.817848][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.823735][ T5885] [ 164.826050][ T5885] Freed by task 7551: [ 164.830010][ T5885] kasan_save_track+0x3f/0x80 [ 164.834670][ T5885] kasan_save_free_info+0x40/0x50 [ 164.839687][ T5885] __kasan_slab_free+0x59/0x70 [ 164.844442][ T5885] kfree+0x196/0x430 [ 164.848324][ T5885] hci_conn_hash_flush+0x1be/0x350 [ 164.853422][ T5885] hci_dev_close_sync+0xa8b/0x1260 [ 164.858524][ T5885] hci_unregister_dev+0x20b/0x510 [ 164.863549][ T5885] vhci_release+0x80/0xd0 [ 164.867867][ T5885] __fput+0x3e9/0x9f0 [ 164.871838][ T5885] task_work_run+0x24f/0x310 [ 164.876421][ T5885] do_exit+0xa2a/0x28e0 [ 164.880567][ T5885] do_group_exit+0x207/0x2c0 [ 164.885148][ T5885] __x64_sys_exit_group+0x3f/0x40 [ 164.890162][ T5885] x64_sys_call+0x26a8/0x26b0 [ 164.894822][ T5885] do_syscall_64+0xf3/0x230 [ 164.899308][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.905223][ T5885] [ 164.907544][ T5885] The buggy address belongs to the object at ffff88802a7ee800 [ 164.907544][ T5885] which belongs to the cache kmalloc-1k of size 1024 [ 164.921600][ T5885] The buggy address is located 800 bytes inside of [ 164.921600][ T5885] freed 1024-byte region [ffff88802a7ee800, ffff88802a7eec00) [ 164.935477][ T5885] [ 164.937789][ T5885] The buggy address belongs to the physical page: [ 164.944195][ T5885] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7e8 [ 164.952938][ T5885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.961420][ T5885] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 164.968956][ T5885] page_type: f5(slab) [ 164.972934][ T5885] raw: 00fff00000000040 ffff88801b041dc0 ffffea00004b7a00 dead000000000002 [ 164.981604][ T5885] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 164.990187][ T5885] head: 00fff00000000040 ffff88801b041dc0 ffffea00004b7a00 dead000000000002 [ 164.998851][ T5885] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 165.007516][ T5885] head: 00fff00000000003 ffffea0000a9fa01 ffffffffffffffff 0000000000000000 [ 165.016176][ T5885] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 165.024828][ T5885] page dumped because: kasan: bad access detected [ 165.031233][ T5885] page_owner tracks the page as allocated [ 165.036930][ T5885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u8:0), ts 64829113229, free_ts 64816254866 [ 165.055846][ T5885] post_alloc_hook+0x1f4/0x240 [ 165.060783][ T5885] get_page_from_freelist+0x365c/0x37a0 [ 165.066314][ T5885] __alloc_frozen_pages_noprof+0x292/0x710 [ 165.072107][ T5885] alloc_pages_mpol+0x311/0x660 [ 165.076951][ T5885] allocate_slab+0x8f/0x3a0 [ 165.081714][ T5885] ___slab_alloc+0xc27/0x14a0 [ 165.086401][ T5885] __slab_alloc+0x58/0xa0 [ 165.090722][ T5885] __kmalloc_noprof+0x2e6/0x4c0 [ 165.095567][ T5885] ieee802_11_parse_elems_full+0xd9/0x2750 [ 165.101370][ T5885] ieee80211_ibss_rx_queued_mgmt+0x4cf/0x2e00 [ 165.107436][ T5885] ieee80211_iface_work+0x933/0x1100 [ 165.112728][ T5885] cfg80211_wiphy_work+0x2f0/0x490 [ 165.117826][ T5885] process_scheduled_works+0xabe/0x18e0 [ 165.123359][ T5885] worker_thread+0x870/0xd30 [ 165.127942][ T5885] kthread+0x7a9/0x920 [ 165.131998][ T5885] ret_from_fork+0x4b/0x80 [ 165.136400][ T5885] page last free pid 5979 tgid 5979 stack trace: [ 165.142706][ T5885] free_frozen_pages+0xe0d/0x10e0 [ 165.147722][ T5885] __put_partials+0x160/0x1c0 [ 165.152387][ T5885] put_cpu_partial+0x17c/0x250 [ 165.157151][ T5885] __slab_free+0x290/0x380 [ 165.161551][ T5885] qlist_free_all+0x9a/0x140 [ 165.166136][ T5885] kasan_quarantine_reduce+0x14f/0x170 [ 165.171587][ T5885] __kasan_slab_alloc+0x23/0x80 [ 165.176424][ T5885] __kmalloc_noprof+0x236/0x4c0 [ 165.181265][ T5885] tomoyo_realpath_from_path+0xcf/0x5e0 [ 165.186799][ T5885] tomoyo_path_perm+0x2c0/0x610 [ 165.191639][ T5885] security_inode_getattr+0x130/0x330 [ 165.196996][ T5885] vfs_fstatat+0xa3/0x150 [ 165.201313][ T5885] __x64_sys_newfstatat+0x11d/0x1a0 [ 165.206501][ T5885] do_syscall_64+0xf3/0x230 [ 165.210990][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.216871][ T5885] [ 165.219618][ T5885] Memory state around the buggy address: [ 165.225232][ T5885] ffff88802a7eea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.233278][ T5885] ffff88802a7eea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.241333][ T5885] >ffff88802a7eeb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.249383][ T5885] ^ [ 165.254479][ T5885] ffff88802a7eeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.262524][ T5885] ffff88802a7eec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 165.270567][ T5885] ================================================================== [ 165.279805][ T5885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.287456][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:5 Not tainted 6.14.0-rc4-syzkaller-01095-gc62e6f056ea3 #0 [ 165.298229][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.308303][ T5885] Workqueue: events l2cap_chan_timeout [ 165.313771][ T5885] Call Trace: [ 165.317039][ T5885] [ 165.319959][ T5885] dump_stack_lvl+0x241/0x360 [ 165.324630][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.329815][ T5885] ? __pfx__printk+0x10/0x10 [ 165.334392][ T5885] ? vscnprintf+0x5d/0x90 [ 165.338710][ T5885] panic+0x349/0x880 [ 165.342589][ T5885] ? check_panic_on_warn+0x21/0xb0 [ 165.347694][ T5885] ? __pfx_panic+0x10/0x10 [ 165.352093][ T5885] ? mark_lock+0x9a/0x360 [ 165.356417][ T5885] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 165.362304][ T5885] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 165.368188][ T5885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.374507][ T5885] ? print_report+0x519/0x5b0 [ 165.379177][ T5885] check_panic_on_warn+0x86/0xb0 [ 165.384282][ T5885] ? __mutex_lock+0x830/0x1010 [ 165.389044][ T5885] end_report+0x77/0x160 [ 165.393277][ T5885] kasan_report+0x154/0x180 [ 165.397771][ T5885] ? __mutex_lock+0x830/0x1010 [ 165.402531][ T5885] __mutex_lock+0x830/0x1010 [ 165.407127][ T5885] ? __mutex_lock+0x602/0x1010 [ 165.411973][ T5885] ? l2cap_chan_timeout+0x63/0x360 [ 165.417088][ T5885] ? __pfx___mutex_lock+0x10/0x10 [ 165.422107][ T5885] ? __pfx_lock_acquire+0x10/0x10 [ 165.427132][ T5885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.433452][ T5885] l2cap_chan_timeout+0x63/0x360 [ 165.438382][ T5885] ? process_scheduled_works+0x9c6/0x18e0 [ 165.444099][ T5885] process_scheduled_works+0xabe/0x18e0 [ 165.449641][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 165.455611][ T5885] ? assign_work+0x364/0x3d0 [ 165.460192][ T5885] worker_thread+0x870/0xd30 [ 165.464776][ T5885] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 165.470658][ T5885] ? __kthread_parkme+0x169/0x1d0 [ 165.475675][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 165.480774][ T5885] kthread+0x7a9/0x920 [ 165.484835][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.489421][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 165.494528][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.499115][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.503704][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.508321][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.513518][ T5885] ? lockdep_hardirqs_on+0x99/0x150 [ 165.518717][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.523304][ T5885] ret_from_fork+0x4b/0x80 [ 165.527715][ T5885] ? __pfx_kthread+0x10/0x10 [ 165.532298][ T5885] ret_from_fork_asm+0x1a/0x30 [ 165.537061][ T5885] [ 165.540381][ T5885] Kernel Offset: disabled [ 165.544692][ T5885] Rebooting in 86400 seconds..