last executing test programs: 1m31.73406229s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 1m30.876302613s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 1m29.876984465s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m17.445051595s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 1m15.346088318s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000fbffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000186100000b00000000000000d4397c1e18120000ddb98a8c1c164af9caf9bceb4e196a66bb5ab6a72bb88bbc1f42756c9d299dffa64326a35bd2e3d7bd083e7ada1321b770ce145bb89e30644671beb9a6553b0aeef1462d515cb102e24c6b0cdd16b89fa62c38194db9e0ea4b2f69c815a44ca1bc5b8fb86276780665d26c51198256b67ef7abc022253f08245a74aec178c13a3e1d84d3ad39c446718996fb876d473ab154402e553d15299dbb24be36f74eb815221138ebe38b295dc80085467c01b34b52ea6f2ec21294a1da1cf2a1cee21fca02d7694835ea173596a045867b1098e1", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 1m14.051399522s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m4.66472957s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 1m2.848263756s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 1m1.828848131s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 52.472437583s ago: executing program 0 (id=1002): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x5) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'sit0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000010018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000580)={'wg1\x00'}) 52.356580906s ago: executing program 0 (id=1004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@private=0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 52.016945317s ago: executing program 0 (id=1005): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604180000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 49.341880749s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 48.324326116s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 46.179572558s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 37.246998528s ago: executing program 0 (id=1005): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604180000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 33.384424599s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 31.19996409s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 29.203932164s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 23.130551588s ago: executing program 0 (id=1005): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604180000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 16.328597526s ago: executing program 3 (id=99): socket$inet6_dccp(0xa, 0x6, 0x0) (async) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020202000900030073797a32000000000900010073797a30000000001400020032"], 0x40}, 0x1, 0x40030000000000}, 0x0) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008000300000000fd07000b"], 0x50}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac"], 0x150}}, 0x0) sendfile(r6, r7, 0x0, 0x7ffff000) (async) sendfile(r6, r7, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e00250e000000000000000008000000", @ANYRES32, @ANYBLOB="080045f664f5"], 0x20}], 0x1}, 0x0) 14.273710506s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004a274000ffffffff0573fcff040000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xeb, 0x0, &(0x7f0000000680)="fea2de83be94e64ca7795866e73f10ca2b5917294cb3351bef817d1a96524d40698a0c6dcb33fda3f756748b0a295a26fafd361d74d41df1d1e889833c303e93370e2f6c7db262d98b31f5f1605c4820a71ccfe21ababe186f3200405aebc677691f4f8373f12edf7bb1773b0e22bd241414db5fb7857633c1aab0c4d2d8d63f3aac8f402d07d6459d3ee9414a9808a79c695a94de59bafe0518c8562bc35e87c40903ebdef7929b9fdc1aed890e1e1f6bf5cc424ccef31f8a616438e43a562e3fda60b63e90282c1a29f4e11edfc09a0f1fed2e13a973db471f2248d2d173ed29585dfada1089cfba46a0", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) accept4(r2, &(0x7f0000000440)=@x25={0x9, @remote}, &(0x7f00000004c0)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r5], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad04000000000081000200000001"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010004007f08c976ef83425dda0e19293eeb0e36e67e7db36c43756048d38380b8e4a499cc1cf778898fae5b3af35046f51024e702817a145e280bc61a31f04915700060ed80b7e5e2234df2e221820911ce9384"], 0x14}}, 0x0) 11.729343159s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x3, 0x261, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="2c005080050002000600000009000a00e59e75e84c000000090001"], 0x48}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x307, 0x1, 0x9, 0x2, r2, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006000000653a100000000000719a8f001000000085200000050000008520000005000000b7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b702070001000000008d000000000000b70000000000000495000000f0ffffff"], &(0x7f00000009c0)='GPL\x00', 0x9f2, 0x40, &(0x7f0000000a00)=""/64, 0x40f00, 0x2, '\x00', r1, 0x1b, r4, 0x8, &(0x7f0000000b00)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)=[r10, r2, r3, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xc, 0x2}, {0x5, 0x1, 0x0, 0xb}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x4, 0x7}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0x2, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0x9}, 0x90) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="189caaaaaa002000000000000000000000004e20000c90780100"/39], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071319029530cc4423f8c8d5aeef5b37d66b8e8d1c896fef831edb4d3bb39ec0cc0f058372d5c031921da497db6a1662005f0052e2c0ae629d25637d1dd241fa3fc19a05c28dd464f2f85903836f78c3d2f57a7139d42baa5e69d93277f17b0", @ANYRES32, @ANYRESDEC=r5], 0x0}, 0x90) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x8, 0x4, 0xff, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0xfe86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000700)='signal_generate\x00', r12}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 11.154576858s ago: executing program 0 (id=1005): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604180000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 948.852307ms ago: executing program 1 (id=1126): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xec, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x5dc}], 0x1) (fail_nth: 11) 509.80747ms ago: executing program 1 (id=1127): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140), 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60110207000d000200063582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) socketpair(0x10, 0x5, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) 300.757956ms ago: executing program 1 (id=1128): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x6000000}}, 0x80, 0x0}, 0x0) 265.674868ms ago: executing program 1 (id=1129): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x91) (async) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfc, "93af93facf99c515daeb3d4d0cea61a1259654145e24ef20ecf7247956ea4060cffa8be83bf3cdd44ba1220c9287d394f204f45a068a7d62a1efcc5b072c38e9cbaffc9d7d18e2a5c925e8b7", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, r2, 0x2, 0x8, 0x8001}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, &(0x7f0000000380)=0x84) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r6 = accept(r1, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x80) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r7, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x741, 0x56}}}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@chsw_timing={0x68, 0x4, {0x755c, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @cf={0x4, 0x6, {0x6, 0x4, 0x5, 0x1b1}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x800) (async, rerun: 32) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xf, 0x3, 0x3, 0x10, r9, 0xe825, '\x00', r10, r11, 0x2, 0x0, 0x4, 0xe}, 0x48) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1411, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000008c0)={'dummy0\x00'}) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000900)=0x434, 0x4) (rerun: 32) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000940)=0x1, 0x4) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r12, 0x3c8f45ae7f374381, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040894}, 0x40080c4) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x2, 0x2}, {}, {0x8, 0x2}, {0x2, 0x7}, {0x61, 0x2}, {0xbe, 0x7}, {0xc, 0x4}, {0x6, 0x4}, {0x2, 0x5}, {0x12, 0x1}], "fa296ad896bff393"}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x20040000) (async) r13 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r13}) setsockopt$inet6_int(r14, 0x29, 0x35, &(0x7f0000000c00), 0x4) (async) r15 = accept4(r2, &(0x7f0000000c40)=@alg, &(0x7f0000000cc0)=0x80, 0x80800) sendmsg$NL80211_CMD_SET_REG(r15, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x154, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfec}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xde}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xab}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffeffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x154}}, 0x20004090) 152.807187ms ago: executing program 1 (id=1130): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=1131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): in process `syz.1.959'. [ 258.661588][ T9477] hsr_slave_0: entered promiscuous mode [ 258.705709][ T9477] hsr_slave_1: entered promiscuous mode [ 258.733585][ T9477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.748486][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.758837][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.761567][ T9477] Cannot create hsr debugfs directory [ 258.769271][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.781478][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.789549][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.797120][ T9504] netlink: 'syz.0.960': attribute type 10 has an invalid length. [ 258.805114][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.813323][ T9504] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 258.814689][ T9508] xt_l2tp: wrong L2TP version: 0 [ 258.901976][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 259.003468][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.105557][ T9516] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 259.113332][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.962'. [ 259.192460][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.353599][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.407947][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.417591][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.425739][ T9490] bridge_slave_0: entered allmulticast mode [ 259.433063][ T9490] bridge_slave_0: entered promiscuous mode [ 259.495237][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.526243][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.543196][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.551746][ T9490] bridge_slave_1: entered allmulticast mode [ 259.565246][ T9490] bridge_slave_1: entered promiscuous mode [ 259.722717][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.734685][ T53] Bluetooth: hci1: command tx timeout [ 259.766842][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.869315][ T9490] team0: Port device team_slave_0 added [ 259.889751][ T9490] team0: Port device team_slave_1 added [ 260.020362][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.032767][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.082393][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.151733][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.159048][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.185245][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.206845][ T9538] smc: net device wg0 applied user defined pnetid SYZ0 [ 260.213884][ T9535] smc: net device wg0 erased user defined pnetid SYZ0 [ 260.330142][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.389066][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.445551][ T53] Bluetooth: hci0: command tx timeout [ 260.545725][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.547678][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 260.582712][ T9505] chnl_net:caif_netlink_parms(): no params data found [ 260.646445][ T9490] hsr_slave_0: entered promiscuous mode [ 260.647593][ T9563] TCP segment has incorrect auth options set for [fe80::bb].0->[fe80::aa].20002 [] [ 260.671671][ T9490] hsr_slave_1: entered promiscuous mode [ 260.684737][ T9490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.694286][ T9490] Cannot create hsr debugfs directory [ 260.777972][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.862376][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.925778][ T53] Bluetooth: hci2: command tx timeout [ 261.093701][ T9477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.141365][ T9505] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.174206][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.181487][ T9505] bridge_slave_0: entered allmulticast mode [ 261.202190][ T9505] bridge_slave_0: entered promiscuous mode [ 261.236559][ T9477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.257444][ T9477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.289894][ T9477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.318205][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.344345][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.374511][ T9505] bridge_slave_1: entered allmulticast mode [ 261.381895][ T9505] bridge_slave_1: entered promiscuous mode [ 261.505082][ T9574] sctp: [Deprecated]: syz.0.979 (pid 9574) Use of int in max_burst socket option. [ 261.505082][ T9574] Use struct sctp_assoc_value instead [ 261.594445][ T9505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.647324][ T9505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.695097][ T9578] netlink: 107176 bytes leftover after parsing attributes in process `syz.0.981'. [ 261.804681][ T53] Bluetooth: hci1: command tx timeout [ 261.829721][ T9505] team0: Port device team_slave_0 added [ 261.885899][ T9505] team0: Port device team_slave_1 added [ 261.891910][ T9585] smc: net device wg0 applied user defined pnetid SYZ0 [ 261.924703][ T9585] smc: net device wg0 erased user defined pnetid SYZ0 [ 261.947057][ T51] bridge_slave_1: left allmulticast mode [ 261.952760][ T51] bridge_slave_1: left promiscuous mode [ 261.970045][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.992994][ T51] bridge_slave_0: left allmulticast mode [ 262.011722][ T51] bridge_slave_0: left promiscuous mode [ 262.022256][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.062571][ T51] bridge_slave_1: left allmulticast mode [ 262.068905][ T51] bridge_slave_1: left promiscuous mode [ 262.084513][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.112128][ T51] bridge_slave_0: left allmulticast mode [ 262.126074][ T51] bridge_slave_0: left promiscuous mode [ 262.142202][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.322269][ T9602] FAULT_INJECTION: forcing a failure. [ 262.322269][ T9602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.349633][ T9602] CPU: 0 PID: 9602 Comm: syz.1.988 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 262.359664][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 262.369717][ T9602] Call Trace: [ 262.372982][ T9602] [ 262.375904][ T9602] dump_stack_lvl+0x241/0x360 [ 262.380585][ T9602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.385770][ T9602] ? __pfx__printk+0x10/0x10 [ 262.390354][ T9602] ? __pfx_lock_release+0x10/0x10 [ 262.395382][ T9602] should_fail_ex+0x3b0/0x4e0 [ 262.400083][ T9602] _copy_from_user+0x2f/0xe0 [ 262.404690][ T9602] generic_map_update_batch+0x567/0x900 [ 262.410244][ T9602] ? __pfx_generic_map_update_batch+0x10/0x10 [ 262.416305][ T9602] ? vfs_write+0x7c4/0xc90 [ 262.420733][ T9602] ? __pfx_generic_map_update_batch+0x10/0x10 [ 262.426801][ T9602] bpf_map_do_batch+0x3e0/0x690 [ 262.431648][ T9602] __sys_bpf+0x377/0x810 [ 262.435905][ T9602] ? __pfx___sys_bpf+0x10/0x10 [ 262.440684][ T9602] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.446663][ T9602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.452996][ T9602] ? do_syscall_64+0x100/0x230 [ 262.457750][ T9602] __x64_sys_bpf+0x7c/0x90 [ 262.462153][ T9602] do_syscall_64+0xf3/0x230 [ 262.466647][ T9602] ? clear_bhb_loop+0x35/0x90 [ 262.471312][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.477214][ T9602] RIP: 0033:0x7f16a8775a19 [ 262.481613][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.501213][ T9602] RSP: 002b:00007f16a9580048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.509616][ T9602] RAX: ffffffffffffffda RBX: 00007f16a8903f60 RCX: 00007f16a8775a19 [ 262.517582][ T9602] RDX: 0000000000000038 RSI: 0000000020000380 RDI: 000000000000001a [ 262.524620][ T53] Bluetooth: hci0: command tx timeout [ 262.525551][ T9602] RBP: 00007f16a95800a0 R08: 0000000000000000 R09: 0000000000000000 [ 262.538914][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.546874][ T9602] R13: 000000000000000b R14: 00007f16a8903f60 R15: 00007fff99468898 [ 262.554843][ T9602] [ 263.004364][ T53] Bluetooth: hci2: command tx timeout [ 263.053235][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.065214][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.076167][ T51] bond0 (unregistering): Released all slaves [ 263.184319][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.195968][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.206699][ T51] bond0 (unregistering): Released all slaves [ 263.367235][ T9604] xfrm1: entered promiscuous mode [ 263.372311][ T9604] xfrm1: entered allmulticast mode [ 263.421844][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.439406][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.468467][ T9505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.531437][ T9505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.547061][ T9505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.574493][ T9505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.666422][ T9505] hsr_slave_0: entered promiscuous mode [ 263.672858][ T9505] hsr_slave_1: entered promiscuous mode [ 263.680466][ T9505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.688243][ T9505] Cannot create hsr debugfs directory [ 263.763340][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 263.897513][ T53] Bluetooth: hci1: command tx timeout [ 264.123931][ T9617] smc: net device wg0 applied user defined pnetid SYZ0 [ 264.137944][ T9629] smc: net device wg0 erased user defined pnetid SYZ0 [ 264.204370][ T9490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.234634][ T9490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.260626][ T9490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.283318][ T9490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.467523][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.495087][ T51] hsr_slave_0: left promiscuous mode [ 264.504770][ T51] hsr_slave_1: left promiscuous mode [ 264.518728][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.527257][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.537106][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.545227][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.559704][ T51] hsr_slave_0: left promiscuous mode [ 264.565755][ T51] hsr_slave_1: left promiscuous mode [ 264.571976][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.579697][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.588867][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.596887][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.604415][ T53] Bluetooth: hci0: command tx timeout [ 264.639030][ T51] veth1_macvtap: left promiscuous mode [ 264.644947][ T51] veth0_macvtap: left promiscuous mode [ 264.650850][ T51] veth1_vlan: left promiscuous mode [ 264.657850][ T51] veth0_vlan: left promiscuous mode [ 264.664304][ T51] veth1_macvtap: left promiscuous mode [ 264.669870][ T51] veth0_macvtap: left promiscuous mode [ 264.675668][ T51] veth1_vlan: left promiscuous mode [ 264.681046][ T51] veth0_vlan: left promiscuous mode [ 265.086839][ T53] Bluetooth: hci2: command tx timeout [ 265.280202][ T51] team0 (unregistering): Port device team_slave_1 removed [ 265.320942][ T51] team0 (unregistering): Port device team_slave_0 removed [ 265.965562][ T53] Bluetooth: hci1: command tx timeout [ 266.086716][ T51] team0 (unregistering): Port device team_slave_1 removed [ 266.130191][ T51] team0 (unregistering): Port device team_slave_0 removed [ 266.698890][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.780378][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 266.881427][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.888642][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.920135][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.927406][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.969238][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 266.979956][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 267.017157][ T9648] netlink: 'syz.1.1003': attribute type 4 has an invalid length. [ 267.146774][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.165976][ T53] Bluetooth: hci2: command tx timeout [ 267.209568][ T9651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1006'. [ 267.233804][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.252899][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.260115][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.369503][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.376711][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.442868][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.553941][ T9505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.610138][ T9505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.638966][ T9505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.695913][ T9660] smc: net device wg0 applied user defined pnetid SYZ0 [ 267.695913][ T9505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.725086][ T9663] smc: net device wg0 erased user defined pnetid SYZ0 [ 267.816025][ T9477] veth0_vlan: entered promiscuous mode [ 267.888681][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.909935][ T9477] veth1_vlan: entered promiscuous mode [ 267.942756][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.951915][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.971836][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.984664][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.997750][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.007738][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.050503][ T9667] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1008'. [ 268.061506][ T9667] x_tables: unsorted entry at hook 1 [ 268.111770][ T9477] veth0_macvtap: entered promiscuous mode [ 268.139806][ T9477] veth1_macvtap: entered promiscuous mode [ 268.182554][ T9490] veth0_vlan: entered promiscuous mode [ 268.193754][ T9505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.245060][ T9490] veth1_vlan: entered promiscuous mode [ 268.265072][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.273822][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.286855][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.298600][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.325115][ T9477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.336498][ T9477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.350092][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.379974][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.387250][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.399225][ T9477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.409412][ T9477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.418532][ T9477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.429166][ T9477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.460248][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.467453][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.572812][ T9490] veth0_macvtap: entered promiscuous mode [ 268.611095][ T9669] chnl_net:caif_netlink_parms(): no params data found [ 268.632901][ T9490] veth1_macvtap: entered promiscuous mode [ 268.742183][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.766960][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.785122][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.800787][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.812602][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.827828][ T9505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.896495][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.904835][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.919233][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.931152][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.943473][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.955077][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.966662][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.988582][ T9490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.997788][ T9490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.007620][ T9490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.016971][ T9490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.130964][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.139557][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.153918][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.164679][ T9669] bridge_slave_0: entered allmulticast mode [ 269.165501][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.172042][ T9669] bridge_slave_0: entered promiscuous mode [ 269.195734][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.202891][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.217073][ T9669] bridge_slave_1: entered allmulticast mode [ 269.227627][ T9669] bridge_slave_1: entered promiscuous mode [ 269.315618][ T9669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.370673][ T9669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.437759][ T9505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.448878][ T9669] team0: Port device team_slave_0 added [ 269.467498][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.472282][ T9669] team0: Port device team_slave_1 added [ 269.496174][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.569940][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.580006][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.607229][ T9669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.632602][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.642623][ T9669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.644431][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.658679][ T9669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.687467][ T9669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.979835][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.001209][ T9669] hsr_slave_0: entered promiscuous mode [ 270.013187][ T9669] hsr_slave_1: entered promiscuous mode [ 270.126454][ T5098] Bluetooth: hci4: command tx timeout [ 270.185438][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.213888][ T9505] veth0_vlan: entered promiscuous mode [ 270.276608][ T9505] veth1_vlan: entered promiscuous mode [ 270.321579][ T9669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.370184][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.424792][ T9669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.455195][ T9505] veth0_macvtap: entered promiscuous mode [ 270.466750][ T9505] veth1_macvtap: entered promiscuous mode [ 270.490413][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.501281][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.516593][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.527776][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.539864][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.558061][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.576011][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.600231][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.622736][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.634095][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.653843][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.664406][ T9505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.686798][ T9505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.706585][ T9505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.738015][ T9669] bridge0: port 3(netdevsim1) entered disabled state [ 270.790517][ T9669] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 270.807498][ T9669] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 270.823232][ T9669] bridge0: port 3(netdevsim1) entered disabled state [ 270.837797][ T9669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.900969][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.963614][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.979388][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.992555][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.003696][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.013432][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.013502][ T9669] team0: Port device netdevsim0 removed [ 271.028367][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.050473][ T9669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.071574][ T9505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.081450][ T9505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.090775][ T9505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.100837][ T9505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.258184][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.279636][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.412661][ T35] bridge_slave_1: left allmulticast mode [ 271.418956][ T35] bridge_slave_1: left promiscuous mode [ 271.426241][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.437950][ T35] bridge_slave_0: left allmulticast mode [ 271.443591][ T35] bridge_slave_0: left promiscuous mode [ 271.449994][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.743954][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.755667][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.771112][ T35] bond0 (unregistering): Released all slaves [ 271.786354][ T9669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.797726][ T9669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.809798][ T9669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.822460][ T9669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.839071][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.847417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.214546][ T53] Bluetooth: hci4: command tx timeout [ 272.285979][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.298901][ T35] hsr_slave_0: left promiscuous mode [ 272.306552][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.320640][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.329849][ T35] hsr_slave_1: left promiscuous mode [ 272.337018][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.351299][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.351464][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.366453][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.381974][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.405097][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.412562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.441328][ T35] veth1_macvtap: left promiscuous mode [ 272.447414][ T35] veth0_macvtap: left promiscuous mode [ 272.452987][ T35] veth1_vlan: left promiscuous mode [ 272.458902][ T35] veth0_vlan: left promiscuous mode [ 272.888885][ T35] team0 (unregistering): Port device team_slave_1 removed [ 272.959321][ T35] team0 (unregistering): Port device team_slave_0 removed [ 273.094882][ T53] Bluetooth: hci0: command tx timeout [ 273.341474][ T9702] chnl_net:caif_netlink_parms(): no params data found [ 273.374374][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 273.413573][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 273.422630][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 273.432459][ T9720] netlink: 'syz.1.1016': attribute type 4 has an invalid length. [ 273.581804][ T9669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.662094][ T9702] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.671608][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.679020][ T9702] bridge_slave_0: entered allmulticast mode [ 273.686759][ T9702] bridge_slave_0: entered promiscuous mode [ 273.699093][ T9702] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.707395][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.714902][ T9702] bridge_slave_1: entered allmulticast mode [ 273.722264][ T9702] bridge_slave_1: entered promiscuous mode [ 273.765297][ T9702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.777935][ T9702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.828230][ T9702] team0: Port device team_slave_0 added [ 273.852008][ T9669] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.862490][ T9702] team0: Port device team_slave_1 added [ 273.908505][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.916018][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.944170][ T9702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.996114][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.003210][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.012511][ T9702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.019626][ T9702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.049916][ T9702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.140497][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.172615][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.179834][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.203041][ T9702] hsr_slave_0: entered promiscuous mode [ 274.213823][ T9702] hsr_slave_1: entered promiscuous mode [ 274.220632][ T9702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.228644][ T9702] Cannot create hsr debugfs directory [ 274.248250][ T9710] chnl_net:caif_netlink_parms(): no params data found [ 274.285024][ T53] Bluetooth: hci4: command tx timeout [ 274.377104][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.419021][ T9731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 274.447505][ T53] Bluetooth: hci1: command tx timeout [ 274.507699][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.658074][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.668522][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.676337][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.691376][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.700324][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.707853][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.718442][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.784949][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1018'. [ 274.794383][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.801596][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.834638][ T9710] bridge_slave_0: entered allmulticast mode [ 274.842066][ T9710] bridge_slave_0: entered promiscuous mode [ 274.941992][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.946194][ T9743] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 274.949918][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.965020][ T9710] bridge_slave_1: entered allmulticast mode [ 274.972407][ T9710] bridge_slave_1: entered promiscuous mode [ 275.082493][ T9746] netlink: 'syz.1.1020': attribute type 13 has an invalid length. [ 275.087312][ T9710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.174945][ T5098] Bluetooth: hci0: command tx timeout [ 275.187807][ T9710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.321340][ T9669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.370529][ T9710] team0: Port device team_slave_0 added [ 275.381571][ T9710] team0: Port device team_slave_1 added [ 275.423416][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.515266][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.542850][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.550834][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.579184][ T9710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.661900][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.669165][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.698438][ T9710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.748567][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.891263][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.956903][ T9736] chnl_net:caif_netlink_parms(): no params data found [ 276.002535][ T9710] hsr_slave_0: entered promiscuous mode [ 276.009339][ T9710] hsr_slave_1: entered promiscuous mode [ 276.017088][ T9710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.025822][ T9710] Cannot create hsr debugfs directory [ 276.051123][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 276.077977][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 276.087767][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 276.171187][ T9702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.198901][ T9669] veth0_vlan: entered promiscuous mode [ 276.208707][ T9702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.228101][ T9768] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 276.275031][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1028'. [ 276.299238][ T9702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.312825][ T9702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.364495][ T5098] Bluetooth: hci4: command tx timeout [ 276.419276][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.427548][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.434911][ T9736] bridge_slave_0: entered allmulticast mode [ 276.442263][ T9736] bridge_slave_0: entered promiscuous mode [ 276.487727][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.500482][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.508508][ T9736] bridge_slave_1: entered allmulticast mode [ 276.516503][ T9736] bridge_slave_1: entered promiscuous mode [ 276.526731][ T5098] Bluetooth: hci1: command tx timeout [ 276.602075][ T9669] veth1_vlan: entered promiscuous mode [ 276.624660][ T35] bridge_slave_1: left allmulticast mode [ 276.634156][ T35] bridge_slave_1: left promiscuous mode [ 276.639925][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.652373][ T35] bridge_slave_0: left allmulticast mode [ 276.658727][ T35] bridge_slave_0: left promiscuous mode [ 276.664788][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.676146][ T35] bridge_slave_1: left allmulticast mode [ 276.681955][ T35] bridge_slave_1: left promiscuous mode [ 276.690058][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.707742][ T35] bridge_slave_0: left allmulticast mode [ 276.713395][ T35] bridge_slave_0: left promiscuous mode [ 276.720851][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.764998][ T5098] Bluetooth: hci2: command tx timeout [ 277.257960][ T5098] Bluetooth: hci0: command tx timeout [ 277.271567][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.286564][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.301116][ T35] bond0 (unregistering): Released all slaves [ 277.410766][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.423107][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.433951][ T35] bond0 (unregistering): Released all slaves [ 277.461341][ T9736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.476947][ T9736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.700660][ T9736] team0: Port device team_slave_0 added [ 277.713047][ T9736] team0: Port device team_slave_1 added [ 277.865796][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.872775][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.900376][ T9736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.922144][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.929561][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.956916][ T9736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.242251][ T9669] veth0_macvtap: entered promiscuous mode [ 278.266900][ T9736] hsr_slave_0: entered promiscuous mode [ 278.273939][ T9736] hsr_slave_1: entered promiscuous mode [ 278.280471][ T9736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.289087][ T9736] Cannot create hsr debugfs directory [ 278.392576][ T9669] veth1_macvtap: entered promiscuous mode [ 278.439807][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 278.516067][ T35] hsr_slave_0: left promiscuous mode [ 278.522163][ T35] hsr_slave_1: left promiscuous mode [ 278.528928][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.536898][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.550686][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.558791][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.571083][ T35] hsr_slave_0: left promiscuous mode [ 278.577677][ T35] hsr_slave_1: left promiscuous mode [ 278.584403][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.591827][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.599995][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.608266][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.614606][ T5098] Bluetooth: hci1: command tx timeout [ 278.651812][ T35] veth1_macvtap: left promiscuous mode [ 278.657509][ T35] veth0_macvtap: left promiscuous mode [ 278.663082][ T35] veth1_vlan: left promiscuous mode [ 278.668799][ T35] veth0_vlan: left promiscuous mode [ 278.675127][ T35] veth1_macvtap: left promiscuous mode [ 278.680905][ T35] veth0_macvtap: left promiscuous mode [ 278.687175][ T35] veth1_vlan: left promiscuous mode [ 278.692460][ T35] veth0_vlan: left promiscuous mode [ 278.845672][ T5098] Bluetooth: hci2: command tx timeout [ 279.243444][ T35] team0 (unregistering): Port device team_slave_1 removed [ 279.282153][ T35] team0 (unregistering): Port device team_slave_0 removed [ 279.334771][ T5098] Bluetooth: hci0: command tx timeout [ 279.956417][ T35] team0 (unregistering): Port device team_slave_1 removed [ 279.991634][ T35] team0 (unregistering): Port device team_slave_0 removed [ 280.362703][ T9702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.394804][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.406761][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.419712][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.428680][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 280.440811][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 280.460059][ T9810] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 280.534584][ T9669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.547311][ T9669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.565989][ T9669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.627563][ T9669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.643653][ T9669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.664357][ T9669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.673108][ T9669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.694876][ T5098] Bluetooth: hci1: command tx timeout [ 280.721844][ T9710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.733691][ T9710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.747480][ T9702] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.769242][ T9710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.816183][ T9710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.859405][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.866579][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.922761][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.929977][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.934344][ T5098] Bluetooth: hci2: command tx timeout [ 281.114688][ T9702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.133679][ T9702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.236690][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.276340][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.416927][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.433902][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 281.443277][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.477446][ T9736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.505686][ T9736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.566809][ T9736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.634390][ T9736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.718004][ T9710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.740560][ T9702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.778828][ T9710] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.822093][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.829441][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.875392][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.882570][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.993618][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.108592][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.149447][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.219402][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.250095][ T9702] veth0_vlan: entered promiscuous mode [ 282.378612][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.419632][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.436031][ T9702] veth1_vlan: entered promiscuous mode [ 282.443932][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.465572][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.465654][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.493763][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.503144][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.510866][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.565631][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.572803][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.629108][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.636341][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.759331][ T9702] veth0_macvtap: entered promiscuous mode [ 282.779246][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.853241][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.862868][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 282.883852][ T12] bridge_slave_1: left allmulticast mode [ 282.890189][ T12] bridge_slave_1: left promiscuous mode [ 282.896257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.907156][ T12] bridge_slave_0: left allmulticast mode [ 282.912831][ T12] bridge_slave_0: left promiscuous mode [ 282.918764][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.014312][ T53] Bluetooth: hci2: command tx timeout [ 283.233835][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.249809][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.261196][ T12] bond0 (unregistering): Released all slaves [ 283.274051][ T9702] veth1_macvtap: entered promiscuous mode [ 283.299600][ T9855] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 283.331386][ T9710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.407995][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.421367][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.432050][ T9858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1050'. [ 283.432106][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.460826][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.472722][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.580912][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.592223][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.602343][ T9702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.613903][ T9702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.625795][ T9702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.637671][ T9702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.648453][ T9702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.657337][ T9702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.666211][ T9702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.756542][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 283.804309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.017935][ T12] hsr_slave_0: left promiscuous mode [ 284.033059][ T12] hsr_slave_1: left promiscuous mode [ 284.040006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.049329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.058904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.066758][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.090042][ T12] veth1_macvtap: left promiscuous mode [ 284.096020][ T12] veth0_macvtap: left promiscuous mode [ 284.101597][ T12] veth1_vlan: left promiscuous mode [ 284.107535][ T12] veth0_vlan: left promiscuous mode [ 284.503752][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.549226][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.607731][ T53] Bluetooth: hci4: command tx timeout [ 284.844950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.954436][ T9710] veth0_vlan: entered promiscuous mode [ 284.979391][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 285.035781][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 285.060636][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.070866][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.106537][ T9710] veth1_vlan: entered promiscuous mode [ 285.207840][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.230590][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.249181][ T9736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.390701][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.411481][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.419105][ T9842] bridge_slave_0: entered allmulticast mode [ 285.426577][ T9842] bridge_slave_0: entered promiscuous mode [ 285.435789][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.442983][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.454114][ T9842] bridge_slave_1: entered allmulticast mode [ 285.461483][ T9842] bridge_slave_1: entered promiscuous mode [ 285.659684][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.683663][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.711198][ T9710] veth0_macvtap: entered promiscuous mode [ 285.722361][ T9710] veth1_macvtap: entered promiscuous mode [ 285.762789][ T9842] team0: Port device team_slave_0 added [ 285.774293][ T9842] team0: Port device team_slave_1 added [ 285.873024][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.883476][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.909476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.920708][ T9842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.939221][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.947968][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.975672][ T9842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.025065][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.078044][ T9710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.092031][ T9710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.102535][ T9710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.113732][ T9710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.125647][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.151212][ T9842] hsr_slave_0: entered promiscuous mode [ 286.158109][ T9842] hsr_slave_1: entered promiscuous mode [ 286.179648][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.201759][ T9710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.212782][ T9710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.223386][ T9710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.234128][ T9710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.245629][ T9710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.290967][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.317437][ T9710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.334433][ T9710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.343169][ T9710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.352190][ T9710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.390191][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.422781][ T9736] veth0_vlan: entered promiscuous mode [ 286.546303][ T9736] veth1_vlan: entered promiscuous mode [ 286.651966][ T12] bridge_slave_1: left allmulticast mode [ 286.658258][ T12] bridge_slave_1: left promiscuous mode [ 286.665185][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.675293][ T12] bridge_slave_0: left allmulticast mode [ 286.680969][ T12] bridge_slave_0: left promiscuous mode [ 286.688217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.694449][ T53] Bluetooth: hci4: command tx timeout [ 286.934160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.031379][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.043717][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.061502][ T12] bond0 (unregistering): Released all slaves [ 287.111376][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.130377][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.195609][ T9736] veth0_macvtap: entered promiscuous mode [ 287.235081][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.242943][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.259173][ T9736] veth1_macvtap: entered promiscuous mode [ 287.305970][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.334079][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.343940][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.354679][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.364581][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.376074][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.405133][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.446534][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.465762][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.484995][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.504067][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.513927][ T9736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.532716][ T9736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.555074][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.569473][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.580991][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.591850][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.605313][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.620655][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.629153][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.705076][ T9736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.715037][ T9736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.723758][ T9736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.740718][ T9736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.767535][ T12] hsr_slave_0: left promiscuous mode [ 287.773453][ T12] hsr_slave_1: left promiscuous mode [ 287.780427][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.787952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.797686][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.805792][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.830979][ T12] veth1_macvtap: left promiscuous mode [ 287.836742][ T12] veth0_macvtap: left promiscuous mode [ 287.842289][ T12] veth1_vlan: left promiscuous mode [ 287.847747][ T12] veth0_vlan: left promiscuous mode [ 287.964142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.413555][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.456018][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.778261][ T5098] Bluetooth: hci4: command tx timeout [ 288.886930][ T9842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.898456][ T9842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.913346][ T9842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.953734][ T9842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.004229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.065254][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.073119][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.185389][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.197841][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.301150][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.329947][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.357542][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.364744][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.383702][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.390916][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.422826][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 289.635893][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.646789][ T5098] Bluetooth: hci0: command tx timeout [ 289.770983][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.781991][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.802108][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.814212][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.825238][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.833571][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.842333][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.852403][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.869486][ T9900] bridge_slave_0: entered allmulticast mode [ 289.876951][ T9900] bridge_slave_0: entered promiscuous mode [ 289.891165][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 289.956664][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.002201][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.014278][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.021543][ T9900] bridge_slave_1: entered allmulticast mode [ 290.039736][ T9900] bridge_slave_1: entered promiscuous mode [ 290.054182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.064934][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 290.073932][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 290.105225][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.119133][ T9920] netlink: 'syz.1.1060': attribute type 4 has an invalid length. [ 290.181566][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.216108][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.238463][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.322783][ T9900] team0: Port device team_slave_0 added [ 290.352207][ T9900] team0: Port device team_slave_1 added [ 290.400019][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.408530][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.440317][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.490633][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.504339][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.542993][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.663496][ T12] bridge_slave_1: left allmulticast mode [ 290.670705][ T12] bridge_slave_1: left promiscuous mode [ 290.677020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.688400][ T12] bridge_slave_0: left allmulticast mode [ 290.700451][ T12] bridge_slave_0: left promiscuous mode [ 290.707179][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.844530][ T53] Bluetooth: hci4: command tx timeout [ 291.012059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.028029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.039159][ T12] bond0 (unregistering): Released all slaves [ 291.084056][ T9900] hsr_slave_0: entered promiscuous mode [ 291.092381][ T9900] hsr_slave_1: entered promiscuous mode [ 291.098119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.127621][ T9900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.135435][ T9900] Cannot create hsr debugfs directory [ 291.175867][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 291.283910][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.395488][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.402695][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.410808][ T9915] bridge_slave_0: entered allmulticast mode [ 291.418233][ T9915] bridge_slave_0: entered promiscuous mode [ 291.427124][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.435221][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.442441][ T9915] bridge_slave_1: entered allmulticast mode [ 291.449843][ T9915] bridge_slave_1: entered promiscuous mode [ 291.506918][ T12] hsr_slave_0: left promiscuous mode [ 291.535134][ T12] hsr_slave_1: left promiscuous mode [ 291.544968][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.552431][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.572779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.593632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.645301][ T12] veth1_macvtap: left promiscuous mode [ 291.650894][ T12] veth0_macvtap: left promiscuous mode [ 291.669249][ T12] veth1_vlan: left promiscuous mode [ 291.681040][ T12] veth0_vlan: left promiscuous mode [ 291.695985][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.708594][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.721524][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.729716][ T5102] Bluetooth: hci0: command tx timeout [ 291.737476][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.764145][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.771564][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.886520][ T53] Bluetooth: hci1: command tx timeout [ 292.124214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.246947][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.282925][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.732430][ T9938] syzkaller1: entered promiscuous mode [ 292.741188][ T9938] syzkaller1: entered allmulticast mode [ 292.856667][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.888245][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.939193][ T9842] veth0_vlan: entered promiscuous mode [ 293.048123][ T9842] veth1_vlan: entered promiscuous mode [ 293.063273][ T9915] team0: Port device team_slave_0 added [ 293.072935][ T9915] team0: Port device team_slave_1 added [ 293.140856][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.164547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.165254][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.196959][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 293.199118][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.223389][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.231856][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.259707][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.298628][ T9953] netlink: 'syz.1.1066': attribute type 10 has an invalid length. [ 293.426155][ T9842] veth0_macvtap: entered promiscuous mode [ 293.522351][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.560006][ T9915] hsr_slave_0: entered promiscuous mode [ 293.569472][ T9915] hsr_slave_1: entered promiscuous mode [ 293.580342][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.588355][ T9915] Cannot create hsr debugfs directory [ 293.657259][ T9842] veth1_macvtap: entered promiscuous mode [ 293.712993][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.814578][ T5102] Bluetooth: hci0: command tx timeout [ 293.820156][ T53] Bluetooth: hci2: command tx timeout [ 293.849949][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.872591][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.890922][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.902311][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.913374][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.925071][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.933824][ T9900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.945301][ T9900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.965460][ T53] Bluetooth: hci1: command tx timeout [ 293.976565][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 294.000575][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.038800][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.050543][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.060525][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.071207][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.082548][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.100476][ T9842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.109536][ T9842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.118368][ T9842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.128027][ T9842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.163177][ T9900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.180189][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 294.190200][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 294.204980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.209704][ T9967] netlink: 'syz.1.1071': attribute type 4 has an invalid length. [ 294.253369][ T9900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 294.431292][ T9936] chnl_net:caif_netlink_parms(): no params data found [ 294.441236][ T9975] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1073'. [ 294.602190][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.610400][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.641204][ T12] bridge_slave_1: left allmulticast mode [ 294.654134][ T12] bridge_slave_1: left promiscuous mode [ 294.660079][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.704239][ T12] bridge_slave_0: left allmulticast mode [ 294.709945][ T12] bridge_slave_0: left promiscuous mode [ 294.716511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.029842][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.041300][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.052089][ T12] bond0 (unregistering): Released all slaves [ 295.209340][ T9936] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.217212][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.225677][ T9936] bridge_slave_0: entered allmulticast mode [ 295.233088][ T9936] bridge_slave_0: entered promiscuous mode [ 295.254180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.262428][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.279062][ T9936] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.286583][ T9936] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.294094][ T9936] bridge_slave_1: entered allmulticast mode [ 295.301714][ T9936] bridge_slave_1: entered promiscuous mode [ 295.306053][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.442380][ T9936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.460052][ T9936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.601172][ T9988] netlink: 'syz.1.1076': attribute type 11 has an invalid length. [ 295.609674][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1076'. [ 295.642644][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.658597][ T9936] team0: Port device team_slave_0 added [ 295.684325][ T12] hsr_slave_0: left promiscuous mode [ 295.690574][ T12] hsr_slave_1: left promiscuous mode [ 295.701327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.714403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.724483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.732073][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.751791][ T12] veth1_macvtap: left promiscuous mode [ 295.758079][ T12] veth0_macvtap: left promiscuous mode [ 295.763671][ T12] veth1_vlan: left promiscuous mode [ 295.769175][ T12] veth0_vlan: left promiscuous mode [ 295.884426][ T5102] Bluetooth: hci0: command tx timeout [ 295.890144][ T53] Bluetooth: hci2: command tx timeout [ 296.044140][ T53] Bluetooth: hci1: command tx timeout [ 296.285921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.328679][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.338317][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.348893][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.384866][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.402625][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.412795][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.488814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.528682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.942965][ T9936] team0: Port device team_slave_1 added [ 296.992249][ T9915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.040184][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.047462][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.086482][ T9936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.105424][ T9915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.118113][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 297.143238][ T9936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.164283][ T9936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.191180][ T9936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.221743][ T9915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.247551][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.324107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.342408][ T9915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.363560][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.370825][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.401430][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.408708][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.449025][ T9936] hsr_slave_0: entered promiscuous mode [ 297.466659][ T9936] hsr_slave_1: entered promiscuous mode [ 297.473406][ T9936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.492967][ T9936] Cannot create hsr debugfs directory [ 297.779559][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 297.912306][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.933488][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 297.942658][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 297.964634][ T53] Bluetooth: hci2: command tx timeout [ 297.967026][ T9993] chnl_net:caif_netlink_parms(): no params data found [ 298.043129][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.061730][T10011] netlink: 'syz.1.1082': attribute type 4 has an invalid length. [ 298.125617][ T53] Bluetooth: hci1: command tx timeout [ 298.201194][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.330150][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.364114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.373419][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.398716][ T9993] bridge_slave_0: entered allmulticast mode [ 298.415656][ T9993] bridge_slave_0: entered promiscuous mode [ 298.443859][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.444769][ T53] Bluetooth: hci4: command tx timeout [ 298.481984][T10029] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 298.500128][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.509089][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.535157][ T9993] bridge_slave_1: entered allmulticast mode [ 298.543158][ T9993] bridge_slave_1: entered promiscuous mode [ 298.571085][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.611326][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.618896][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 298.650982][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.699330][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.708997][T10036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1088'. [ 298.803040][ T9993] team0: Port device team_slave_0 added [ 298.868956][ T9993] team0: Port device team_slave_1 added [ 298.901800][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.943189][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 298.954680][T10041] bM: renamed from lo (while UP) [ 298.963043][T10041] bM: entered allmulticast mode [ 298.991828][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.999498][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.037472][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.072015][ T12] bridge_slave_1: left allmulticast mode [ 299.078966][ T12] bridge_slave_1: left promiscuous mode [ 299.086660][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.100160][ T12] bridge_slave_0: left allmulticast mode [ 299.107261][ T12] bridge_slave_0: left promiscuous mode [ 299.113026][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.135698][T10045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1091'. [ 299.404605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.521054][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.533261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.544025][ T12] bond0 (unregistering): Released all slaves [ 299.578610][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.593633][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.626390][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.685634][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.692834][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.760841][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.768052][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.812558][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 299.890152][ T9993] hsr_slave_0: entered promiscuous mode [ 299.897730][ T9993] hsr_slave_1: entered promiscuous mode [ 299.904275][ T9993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.911886][ T9993] Cannot create hsr debugfs directory [ 299.942613][ T9900] veth0_vlan: entered promiscuous mode [ 300.023063][T10052] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 300.044256][ T53] Bluetooth: hci2: command tx timeout [ 300.061484][ T9900] veth1_vlan: entered promiscuous mode [ 300.110501][ T9936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.157825][ T9936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.175154][ T9936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.203931][ T12] hsr_slave_0: left promiscuous mode [ 300.215195][ T12] hsr_slave_1: left promiscuous mode [ 300.221135][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.229401][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.237374][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.246536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.268878][ T12] veth1_macvtap: left promiscuous mode [ 300.274606][ T12] veth0_macvtap: left promiscuous mode [ 300.280184][ T12] veth1_vlan: left promiscuous mode [ 300.286981][ T12] veth0_vlan: left promiscuous mode [ 300.445542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.528842][ T53] Bluetooth: hci4: command tx timeout [ 300.752723][ T12] team0 (unregistering): Port device team_slave_1 removed [ 300.794631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.142997][T10060] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 301.236825][ T9936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 301.402446][ T9900] veth0_macvtap: entered promiscuous mode [ 301.477502][ T9900] veth1_macvtap: entered promiscuous mode [ 301.497111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.567727][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.593378][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.607412][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.633877][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.667569][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.685702][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.715857][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.729299][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.739334][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.748186][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.846385][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.927121][ T9936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.009268][ T9936] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.026914][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.047369][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.054559][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.062175][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.078413][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.085548][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.107924][ T9993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.120543][ T9993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.136407][ T9915] veth0_vlan: entered promiscuous mode [ 302.157669][ T9993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.169590][ T9993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.190962][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.211376][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.222525][ T9915] veth1_vlan: entered promiscuous mode [ 302.319737][ T9915] veth0_macvtap: entered promiscuous mode [ 302.358661][ T9915] veth1_macvtap: entered promiscuous mode [ 302.524132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.530086][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.558233][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.575028][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.595971][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.616690][ T53] Bluetooth: hci4: command tx timeout [ 302.633798][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.713419][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.730182][T10074] __nla_validate_parse: 2 callbacks suppressed [ 302.730200][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 302.749134][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.774507][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1097'. [ 302.779887][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.805203][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.827919][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.902952][ T1109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.920882][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 302.938868][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.008402][ T1109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.030842][ T9936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.043895][ T9993] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.057418][ T9915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.066934][ T9915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.075902][ T9915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.085305][ T9915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.130995][ T1109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.167913][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.175132][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.239426][ T1109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.260101][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.267322][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.369280][ T9993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.418034][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.445903][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.543727][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.562278][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.574193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.593104][ T1109] bridge_slave_1: left allmulticast mode [ 303.598925][ T1109] bridge_slave_1: left promiscuous mode [ 303.606278][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.616674][ T1109] bridge_slave_0: left allmulticast mode [ 303.622624][ T1109] bridge_slave_0: left promiscuous mode [ 303.628653][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.010115][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.022624][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.033624][ T1109] bond0 (unregistering): Released all slaves [ 304.127819][ T9936] veth0_vlan: entered promiscuous mode [ 304.158684][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.238845][ T9936] veth1_vlan: entered promiscuous mode [ 304.312317][ T9993] veth0_vlan: entered promiscuous mode [ 304.388187][ T9993] veth1_vlan: entered promiscuous mode [ 304.403172][ T9936] veth0_macvtap: entered promiscuous mode [ 304.442385][ T1109] hsr_slave_0: left promiscuous mode [ 304.471072][ T1109] hsr_slave_1: left promiscuous mode [ 304.482108][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.494403][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.502572][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.514180][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.558679][ T1109] veth1_macvtap: left promiscuous mode [ 304.564707][ T1109] veth0_macvtap: left promiscuous mode [ 304.570549][ T1109] veth1_vlan: left promiscuous mode [ 304.576281][ T1109] veth0_vlan: left promiscuous mode [ 304.604450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.636838][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.647969][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.656420][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.673903][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.682342][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.694128][ T5102] Bluetooth: hci4: command tx timeout [ 304.700373][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.230328][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 305.271348][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 305.639268][ T9936] veth1_macvtap: entered promiscuous mode [ 305.645191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.696625][ T9993] veth0_macvtap: entered promiscuous mode [ 305.747062][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.757962][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.767960][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.778563][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.815850][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.836641][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.847347][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.857756][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.868335][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.880143][ T9936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.919196][ T9993] veth1_macvtap: entered promiscuous mode [ 305.939025][ T9936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.948094][ T9936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.957437][ T9936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.966651][ T9936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.988876][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.999849][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.009911][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.021459][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.031477][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.042551][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.055594][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.083594][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.094729][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.104654][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.115282][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.128679][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.139655][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.151462][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.187771][ T9993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.206205][ T9993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.215363][ T9993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.225386][ T9993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.353730][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.434345][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.442206][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.476506][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.493453][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.501451][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.566499][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1099'. [ 306.684399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.708254][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.757135][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.766615][ T5098] Bluetooth: hci0: command tx timeout [ 306.774436][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.788988][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.798952][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.817486][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.821052][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.845842][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.853808][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.897693][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.935193][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.951918][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.966636][T10095] chnl_net:caif_netlink_parms(): no params data found [ 307.089116][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 307.157242][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 307.372422][ T1109] bridge_slave_1: left allmulticast mode [ 307.383113][ T1109] bridge_slave_1: left promiscuous mode [ 307.416519][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.446115][ T1109] bridge_slave_0: left allmulticast mode [ 307.464231][ T1109] bridge_slave_0: left promiscuous mode [ 307.470081][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.734256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.874589][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.909193][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.922903][ T1109] bond0 (unregistering): Released all slaves [ 307.942045][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.949510][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.958316][T10095] bridge_slave_0: entered allmulticast mode [ 307.982706][T10095] bridge_slave_0: entered promiscuous mode [ 308.042038][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.053561][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.061436][T10095] bridge_slave_1: entered allmulticast mode [ 308.071856][T10095] bridge_slave_1: entered promiscuous mode [ 308.156873][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.176079][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.276072][T10095] team0: Port device team_slave_0 added [ 308.292679][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.297908][T10095] team0: Port device team_slave_1 added [ 308.306445][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.315257][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.325100][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.333303][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.343478][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.391130][ T1109] hsr_slave_0: left promiscuous mode [ 308.412078][ T1109] hsr_slave_1: left promiscuous mode [ 308.423395][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.443506][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.453733][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.468916][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.512603][ T1109] veth1_macvtap: left promiscuous mode [ 308.523300][ T1109] veth0_macvtap: left promiscuous mode [ 308.532602][ T1109] veth1_vlan: left promiscuous mode [ 308.545272][ T1109] veth0_vlan: left promiscuous mode [ 308.572470][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.582897][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.593387][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.606917][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.621138][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.628771][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.774073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.854128][ T5102] Bluetooth: hci0: command tx timeout [ 308.925895][ T5102] Bluetooth: hci1: command tx timeout [ 309.078148][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 309.126078][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 309.588706][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.595930][T10136] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1105'. [ 309.601351][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.631683][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.691255][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.707171][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.733869][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.790677][T10138] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 309.800832][T10105] chnl_net:caif_netlink_parms(): no params data found [ 309.814418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.929208][T10095] hsr_slave_0: entered promiscuous mode [ 309.936005][T10095] hsr_slave_1: entered promiscuous mode [ 310.111402][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.119952][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.128776][T10105] bridge_slave_0: entered allmulticast mode [ 310.136563][T10105] bridge_slave_0: entered promiscuous mode [ 310.167726][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.175313][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.182556][T10105] bridge_slave_1: entered allmulticast mode [ 310.190191][T10105] bridge_slave_1: entered promiscuous mode [ 310.281268][T10105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.353588][T10105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.444739][ T5102] Bluetooth: hci2: command tx timeout [ 310.466081][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.539478][T10105] team0: Port device team_slave_0 added [ 310.588387][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.602258][T10105] team0: Port device team_slave_1 added [ 310.618676][T10126] chnl_net:caif_netlink_parms(): no params data found [ 310.633492][T10132] chnl_net:caif_netlink_parms(): no params data found [ 310.677565][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.689667][ T5102] Bluetooth: hci4: command tx timeout [ 310.758438][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.844215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.872541][T10105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.879763][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.907149][T10105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.925557][ T5102] Bluetooth: hci0: command tx timeout [ 310.961888][T10105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.973024][T10105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.002090][T10105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.002106][T10160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1108'. [ 311.014510][ T5102] Bluetooth: hci1: command tx timeout [ 311.038666][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.052743][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.113672][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.122972][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.131540][T10132] bridge_slave_0: entered allmulticast mode [ 311.140369][T10132] bridge_slave_0: entered promiscuous mode [ 311.150587][T10132] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.157810][T10132] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.165924][T10132] bridge_slave_1: entered allmulticast mode [ 311.174101][T10132] bridge_slave_1: entered promiscuous mode [ 311.193504][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.208861][T10126] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.216654][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.223895][T10126] bridge_slave_0: entered allmulticast mode [ 311.237231][T10126] bridge_slave_0: entered promiscuous mode [ 311.282254][T10126] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.290513][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.298823][T10126] bridge_slave_1: entered allmulticast mode [ 311.306476][T10126] bridge_slave_1: entered promiscuous mode [ 311.329174][T10105] hsr_slave_0: entered promiscuous mode [ 311.336814][T10105] hsr_slave_1: entered promiscuous mode [ 311.343818][T10105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.351596][T10105] Cannot create hsr debugfs directory [ 311.412677][T10132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.436681][T10126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.455992][T10126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.483309][T10132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.603740][T10132] team0: Port device team_slave_0 added [ 311.613002][T10132] team0: Port device team_slave_1 added [ 311.623317][T10126] team0: Port device team_slave_0 added [ 311.632216][T10126] team0: Port device team_slave_1 added [ 311.663839][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.782030][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.795818][T10095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.805837][T10095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.823554][T10132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.833540][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.860815][T10132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.872622][T10126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.883919][T10126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.914142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.918298][T10126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.935792][T10126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.942756][T10126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.969749][T10126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.983063][T10095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.008899][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.026023][T10132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.032999][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.062415][T10132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.096873][T10095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.143171][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.187984][T10126] hsr_slave_0: entered promiscuous mode [ 312.201089][T10126] hsr_slave_1: entered promiscuous mode [ 312.207711][T10126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.216530][T10126] Cannot create hsr debugfs directory [ 312.328600][T10132] hsr_slave_0: entered promiscuous mode [ 312.346472][T10132] hsr_slave_1: entered promiscuous mode [ 312.353031][T10132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.361828][T10132] Cannot create hsr debugfs directory [ 312.525389][ T5102] Bluetooth: hci2: command tx timeout [ 312.541907][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 312.764486][ T5102] Bluetooth: hci4: command tx timeout [ 312.776247][T10177] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1112'. [ 312.790037][ T1109] bridge_slave_1: left allmulticast mode [ 312.804943][ T1109] bridge_slave_1: left promiscuous mode [ 312.820065][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.830076][ T1109] bridge_slave_0: left allmulticast mode [ 312.848278][ T1109] bridge_slave_0: left promiscuous mode [ 312.854051][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.866104][ T1109] bridge_slave_1: left allmulticast mode [ 312.871776][ T1109] bridge_slave_1: left promiscuous mode [ 312.878861][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.887728][ T1109] bridge_slave_0: left allmulticast mode [ 312.893452][ T1109] bridge_slave_0: left promiscuous mode [ 312.902522][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.934091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.004244][ T5102] Bluetooth: hci0: command tx timeout [ 313.085481][ T5102] Bluetooth: hci1: command tx timeout [ 313.502897][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.517646][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.530710][ T1109] bond0 (unregistering): Released all slaves [ 313.637332][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.657653][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.670886][ T1109] bond0 (unregistering): Released all slaves [ 313.815916][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.876494][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.964204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.979738][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.128064][T10105] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.178866][T10105] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.240557][T10105] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.252710][T10105] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.288130][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.349621][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.356805][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.389163][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.408466][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.415700][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.500467][ T1109] hsr_slave_0: left promiscuous mode [ 314.508269][ T1109] hsr_slave_1: left promiscuous mode [ 314.518767][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.526634][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.538592][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.552581][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.570982][ T1109] hsr_slave_0: left promiscuous mode [ 314.577072][ T1109] hsr_slave_1: left promiscuous mode [ 314.582969][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.590682][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.598854][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.606463][ T5102] Bluetooth: hci2: command tx timeout [ 314.613456][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.649241][ T1109] veth1_macvtap: left promiscuous mode [ 314.655142][ T1109] veth0_macvtap: left promiscuous mode [ 314.660723][ T1109] veth1_vlan: left promiscuous mode [ 314.666381][ T1109] veth0_vlan: left promiscuous mode [ 314.672673][ T1109] veth1_macvtap: left promiscuous mode [ 314.678305][ T1109] veth0_macvtap: left promiscuous mode [ 314.683931][ T1109] veth1_vlan: left promiscuous mode [ 314.689565][ T1109] veth0_vlan: left promiscuous mode [ 314.844317][ T5102] Bluetooth: hci4: command tx timeout [ 315.004293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.087181][T10198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.165303][ T5102] Bluetooth: hci1: command tx timeout [ 315.331684][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 315.378783][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 316.054201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.082481][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 316.122233][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 316.602849][ T2455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.613675][ T2455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.685668][ T5102] Bluetooth: hci2: command tx timeout [ 316.694560][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.770333][T10105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.812713][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 316.925305][ T5102] Bluetooth: hci4: command tx timeout [ 316.928316][T10105] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.000685][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.007938][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.039225][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.086262][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.093433][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.094162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.198692][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1121'. [ 317.232731][T10095] veth0_vlan: entered promiscuous mode [ 317.268598][T10105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.340746][T10095] veth1_vlan: entered promiscuous mode [ 317.392033][T10132] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.483245][T10132] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.493504][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.493614][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507190][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1122'. [ 317.592089][T10132] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.603573][T10132] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.697791][T10095] veth0_macvtap: entered promiscuous mode [ 317.728578][T10126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.757815][T10227] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1123'. [ 317.767916][T10126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.782768][T10095] veth1_macvtap: entered promiscuous mode [ 317.801018][T10126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.818028][T10126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.873711][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.886384][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.899535][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.942839][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.961174][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.977414][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.013924][T10105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.039649][T10095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.058680][T10095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.072640][T10095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.082629][T10095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.124488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.176423][T10239] FAULT_INJECTION: forcing a failure. [ 318.176423][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 318.189817][T10239] CPU: 0 PID: 10239 Comm: syz.1.1126 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 318.199996][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 318.210069][T10239] Call Trace: [ 318.213358][T10239] [ 318.216288][T10239] dump_stack_lvl+0x241/0x360 [ 318.220975][T10239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.226175][T10239] ? __pfx__printk+0x10/0x10 [ 318.230770][T10239] ? get_random_u32+0x59a/0xab0 [ 318.235621][T10239] ? get_random_u32+0x1a3/0xab0 [ 318.240479][T10239] should_fail_ex+0x3b0/0x4e0 [ 318.245161][T10239] should_failslab+0x9/0x20 [ 318.249663][T10239] kmalloc_node_track_caller_noprof+0xda/0x440 [ 318.255815][T10239] ? ip6_fraglist_init+0xb4/0x9a0 [ 318.260836][T10239] kmemdup_noprof+0x2a/0x60 [ 318.265335][T10239] ip6_fraglist_init+0xb4/0x9a0 [ 318.270189][T10239] ip6_fragment+0x1712/0x2290 [ 318.274874][T10239] ? __pfx_ip6_finish_output2+0x10/0x10 [ 318.280412][T10239] ? __pfx_ip6_fragment+0x10/0x10 [ 318.285437][T10239] ? __pfx_lock_release+0x10/0x10 [ 318.290460][T10239] ? ip6_mtu+0x81/0x3f0 [ 318.294608][T10239] ip6_finish_output+0x2b8/0x810 [ 318.299537][T10239] ip6_send_skb+0x112/0x230 [ 318.304036][T10239] rawv6_push_pending_frames+0x75c/0x9e0 [ 318.309671][T10239] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 318.315822][T10239] ? __pfx_raw6_getfrag+0x10/0x10 [ 318.320843][T10239] rawv6_sendmsg+0x19c7/0x23c0 [ 318.325614][T10239] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 318.330728][T10239] ? aa_sk_perm+0x967/0xab0 [ 318.335239][T10239] ? __pfx_lock_release+0x10/0x10 [ 318.340258][T10239] ? inet_sendmsg+0x330/0x390 [ 318.345021][T10239] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.350295][T10239] ? security_socket_sendmsg+0x87/0xb0 [ 318.355751][T10239] __sock_sendmsg+0x1a6/0x270 [ 318.360424][T10239] sock_write_iter+0x2dd/0x400 [ 318.365184][T10239] ? __pfx_sock_write_iter+0x10/0x10 [ 318.370481][T10239] do_iter_readv_writev+0x5a4/0x800 [ 318.375679][T10239] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 318.381395][T10239] ? bpf_lsm_file_permission+0x9/0x10 [ 318.386759][T10239] ? security_file_permission+0x7f/0xa0 [ 318.392320][T10239] ? rw_verify_area+0x1d2/0x6b0 [ 318.397181][T10239] vfs_writev+0x37c/0xbb0 [ 318.401517][T10239] ? __pfx_lock_acquire+0x10/0x10 [ 318.406543][T10239] ? __pfx_vfs_writev+0x10/0x10 [ 318.411399][T10239] ? vfs_write+0x7c4/0xc90 [ 318.415827][T10239] ? __fget_files+0x29/0x470 [ 318.420433][T10239] do_writev+0x1b1/0x350 [ 318.424674][T10239] ? __pfx_do_writev+0x10/0x10 [ 318.429436][T10239] ? do_syscall_64+0x100/0x230 [ 318.434193][T10239] ? do_syscall_64+0xb6/0x230 [ 318.438884][T10239] do_syscall_64+0xf3/0x230 [ 318.443379][T10239] ? clear_bhb_loop+0x35/0x90 [ 318.448049][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.453954][T10239] RIP: 0033:0x7f16a8775a19 [ 318.458367][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.477972][T10239] RSP: 002b:00007f16a9580048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 318.486380][T10239] RAX: ffffffffffffffda RBX: 00007f16a8903f60 RCX: 00007f16a8775a19 [ 318.494342][T10239] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 318.502301][T10239] RBP: 00007f16a95800a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.510275][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.518243][T10239] R13: 000000000000000b R14: 00007f16a8903f60 R15: 00007fff99468898 [ 318.526401][T10239] [ 318.646687][T10241] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1127'. [ 318.658970][T10241] netlink: 'syz.1.1127': attribute type 2 has an invalid length. [ 318.683716][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.695932][T10241] netlink: 509 bytes leftover after parsing attributes in process `syz.1.1127'. [ 318.705168][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.720192][T10105] veth0_vlan: entered promiscuous mode [ 318.809115][T10132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.835774][ T2864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.846654][T10132] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.857777][ T2864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.879636][T10105] veth1_vlan: entered promiscuous mode [ 318.925934][T10126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.935984][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.943178][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.955690][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.962848][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.031863][T10126] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.114665][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.121832][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.144360][T10253] ------------[ cut here ]------------ [ 319.150279][T10253] WARNING: CPU: 0 PID: 10253 at include/net/mac80211.h:6962 minstrel_ht_update_caps+0x44a/0x17e0 [ 319.151505][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.160850][T10253] Modules linked in: [ 319.168021][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.171846][T10253] CPU: 0 PID: 10253 Comm: syz.1.1131 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 319.189337][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 319.199499][T10253] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.205929][T10253] Code: da e8 ba d3 d0 f9 e9 24 ff ff ff e8 60 ff 7d f6 eb 17 e8 59 ff 7d f6 eb 14 e8 52 ff 7d f6 49 c1 fd 38 eb 0c e8 47 ff 7d f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 319.225616][T10253] RSP: 0018:ffffc90003216f80 EFLAGS: 00010287 [ 319.231733][T10253] RAX: ffffffff8b1828d9 RBX: 000000000000000c RCX: 0000000000040000 [ 319.239783][T10253] RDX: ffffc90009ed2000 RSI: 0000000000000f9e RDI: 0000000000000f9f [ 319.247918][T10253] RBP: 0000000000000000 R08: ffffffff8b1827f5 R09: 0000000000000000 [ 319.255948][T10253] R10: ffff888067bcc008 R11: ffffed100cf79d49 R12: 1ffff1100f821618 [ 319.263943][T10253] R13: 0b00000000000000 R14: ffff88807c10b0c0 R15: 0100000000000000 [ 319.271994][T10253] FS: 00007f16a95806c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 319.280997][T10253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.287832][T10253] CR2: 0000000020001080 CR3: 000000001f2f4000 CR4: 00000000003506f0 [ 319.295880][T10253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.303875][T10253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.311912][T10253] Call Trace: [ 319.315254][T10253] [ 319.318199][T10253] ? __warn+0x163/0x4e0 [ 319.322381][T10253] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 319.328168][T10253] ? report_bug+0x2b3/0x500 [ 319.332699][T10253] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 319.338502][T10253] ? handle_bug+0x3e/0x70 [ 319.342864][T10253] ? exc_invalid_op+0x1a/0x50 [ 319.347611][T10253] ? asm_exc_invalid_op+0x1a/0x20 [ 319.352673][T10253] ? minstrel_ht_update_caps+0x365/0x17e0 [ 319.358460][T10253] ? minstrel_ht_update_caps+0x449/0x17e0 [ 319.364249][T10253] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 319.370002][T10253] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 319.375449][T10253] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 319.381278][T10253] rate_control_rate_init+0x3cf/0x5f0 [ 319.386711][T10253] ? rate_control_rate_init+0xe3/0x5f0 [ 319.392202][T10253] sta_apply_auth_flags+0x1b6/0x410 [ 319.397474][T10253] sta_apply_parameters+0xe20/0x1550 [ 319.402806][T10253] ieee80211_add_station+0x3da/0x630 [ 319.408172][T10253] rdev_add_station+0x11b/0x2b0 [ 319.413060][T10253] nl80211_new_station+0x1d53/0x2550 [ 319.418444][T10253] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.424138][T10253] ? netdev_run_todo+0xf88/0x1000 [ 319.429234][T10253] genl_rcv_msg+0xb14/0xec0 [ 319.433761][T10253] ? mark_lock+0x9a/0x350 [ 319.438153][T10253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.443229][T10253] ? __pfx_lock_acquire+0x10/0x10 [ 319.448294][T10253] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 319.453682][T10253] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.459374][T10253] ? __pfx_nl80211_post_doit+0x10/0x10 [ 319.464883][T10253] ? __pfx___might_resched+0x10/0x10 [ 319.470218][T10253] netlink_rcv_skb+0x1e3/0x430 [ 319.475048][T10253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.480090][T10253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.485473][T10253] genl_rcv+0x28/0x40 [ 319.489479][T10253] netlink_unicast+0x7ea/0x980 [ 319.494708][T10253] ? __pfx_netlink_unicast+0x10/0x10 [ 319.500016][T10253] ? __virt_addr_valid+0x183/0x530 [ 319.505202][T10253] ? __check_object_size+0x49c/0x900 [ 319.510527][T10253] ? bpf_lsm_netlink_send+0x9/0x10 [ 319.515703][T10253] netlink_sendmsg+0x8db/0xcb0 [ 319.520513][T10253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.525862][T10253] ? __import_iovec+0x536/0x820 [ 319.530731][T10253] ? aa_sock_msg_perm+0x91/0x160 [ 319.535740][T10253] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 319.541061][T10253] ? security_socket_sendmsg+0x87/0xb0 [ 319.546594][T10253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.551907][T10253] __sock_sendmsg+0x221/0x270 [ 319.556670][T10253] ____sys_sendmsg+0x525/0x7d0 [ 319.561477][T10253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.566937][T10253] __sys_sendmsg+0x2b0/0x3a0 [ 319.571555][T10253] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.576790][T10253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.583239][T10253] ? do_syscall_64+0x100/0x230 [ 319.588089][T10253] ? do_syscall_64+0xb6/0x230 [ 319.592794][T10253] do_syscall_64+0xf3/0x230 [ 319.597437][T10253] ? clear_bhb_loop+0x35/0x90 [ 319.602134][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.608110][T10253] RIP: 0033:0x7f16a8775a19 [ 319.612553][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.632582][T10253] RSP: 002b:00007f16a9580048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.641072][T10253] RAX: ffffffffffffffda RBX: 00007f16a8903f60 RCX: 00007f16a8775a19 [ 319.649120][T10253] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 319.657162][T10253] RBP: 00007f16a87e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 319.665299][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.673319][T10253] R13: 000000000000000b R14: 00007f16a8903f60 R15: 00007fff99468898 [ 319.681372][T10253] [ 319.684447][T10253] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.691728][T10253] CPU: 0 PID: 10253 Comm: syz.1.1131 Not tainted 6.10.0-rc7-syzkaller-00276-g0a1868b93fad #0 [ 319.701869][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 319.711916][T10253] Call Trace: [ 319.715198][T10253] [ 319.718121][T10253] dump_stack_lvl+0x241/0x360 [ 319.722804][T10253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.727998][T10253] ? __pfx__printk+0x10/0x10 [ 319.732593][T10253] ? vscnprintf+0x5d/0x90 [ 319.736921][T10253] panic+0x349/0x860 [ 319.740817][T10253] ? __warn+0x172/0x4e0 [ 319.744972][T10253] ? __pfx_panic+0x10/0x10 [ 319.749402][T10253] __warn+0x346/0x4e0 [ 319.753379][T10253] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 319.759100][T10253] report_bug+0x2b3/0x500 [ 319.763428][T10253] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 319.769179][T10253] handle_bug+0x3e/0x70 [ 319.773328][T10253] exc_invalid_op+0x1a/0x50 [ 319.777824][T10253] asm_exc_invalid_op+0x1a/0x20 [ 319.782678][T10253] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 319.789004][T10253] Code: da e8 ba d3 d0 f9 e9 24 ff ff ff e8 60 ff 7d f6 eb 17 e8 59 ff 7d f6 eb 14 e8 52 ff 7d f6 49 c1 fd 38 eb 0c e8 47 ff 7d f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 319.808691][T10253] RSP: 0018:ffffc90003216f80 EFLAGS: 00010287 [ 319.814754][T10253] RAX: ffffffff8b1828d9 RBX: 000000000000000c RCX: 0000000000040000 [ 319.822714][T10253] RDX: ffffc90009ed2000 RSI: 0000000000000f9e RDI: 0000000000000f9f [ 319.830674][T10253] RBP: 0000000000000000 R08: ffffffff8b1827f5 R09: 0000000000000000 [ 319.838636][T10253] R10: ffff888067bcc008 R11: ffffed100cf79d49 R12: 1ffff1100f821618 [ 319.846604][T10253] R13: 0b00000000000000 R14: ffff88807c10b0c0 R15: 0100000000000000 [ 319.854575][T10253] ? minstrel_ht_update_caps+0x365/0x17e0 [ 319.860299][T10253] ? minstrel_ht_update_caps+0x449/0x17e0 [ 319.866027][T10253] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 319.871403][T10253] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 319.877201][T10253] rate_control_rate_init+0x3cf/0x5f0 [ 319.882565][T10253] ? rate_control_rate_init+0xe3/0x5f0 [ 319.888021][T10253] sta_apply_auth_flags+0x1b6/0x410 [ 319.893224][T10253] sta_apply_parameters+0xe20/0x1550 [ 319.898513][T10253] ieee80211_add_station+0x3da/0x630 [ 319.903801][T10253] rdev_add_station+0x11b/0x2b0 [ 319.908656][T10253] nl80211_new_station+0x1d53/0x2550 [ 319.914040][T10253] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.919668][T10253] ? netdev_run_todo+0xf88/0x1000 [ 319.924714][T10253] genl_rcv_msg+0xb14/0xec0 [ 319.929206][T10253] ? mark_lock+0x9a/0x350 [ 319.933533][T10253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.938576][T10253] ? __pfx_lock_acquire+0x10/0x10 [ 319.943601][T10253] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 319.948968][T10253] ? __pfx_nl80211_new_station+0x10/0x10 [ 319.954601][T10253] ? __pfx_nl80211_post_doit+0x10/0x10 [ 319.960050][T10253] ? __pfx___might_resched+0x10/0x10 [ 319.965342][T10253] netlink_rcv_skb+0x1e3/0x430 [ 319.970117][T10253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.975224][T10253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.980529][T10253] genl_rcv+0x28/0x40 [ 319.984502][T10253] netlink_unicast+0x7ea/0x980 [ 319.989264][T10253] ? __pfx_netlink_unicast+0x10/0x10 [ 319.994539][T10253] ? __virt_addr_valid+0x183/0x530 [ 319.999650][T10253] ? __check_object_size+0x49c/0x900 [ 320.004933][T10253] ? bpf_lsm_netlink_send+0x9/0x10 [ 320.010050][T10253] netlink_sendmsg+0x8db/0xcb0 [ 320.014832][T10253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.020112][T10253] ? __import_iovec+0x536/0x820 [ 320.024951][T10253] ? aa_sock_msg_perm+0x91/0x160 [ 320.029974][T10253] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.035252][T10253] ? security_socket_sendmsg+0x87/0xb0 [ 320.040702][T10253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.045984][T10253] __sock_sendmsg+0x221/0x270 [ 320.050654][T10253] ____sys_sendmsg+0x525/0x7d0 [ 320.055421][T10253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.060714][T10253] __sys_sendmsg+0x2b0/0x3a0 [ 320.065302][T10253] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.070442][T10253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.076761][T10253] ? do_syscall_64+0x100/0x230 [ 320.081519][T10253] ? do_syscall_64+0xb6/0x230 [ 320.086183][T10253] do_syscall_64+0xf3/0x230 [ 320.090673][T10253] ? clear_bhb_loop+0x35/0x90 [ 320.095343][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.101234][T10253] RIP: 0033:0x7f16a8775a19 [ 320.105642][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.125251][T10253] RSP: 002b:00007f16a9580048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.133660][T10253] RAX: ffffffffffffffda RBX: 00007f16a8903f60 RCX: 00007f16a8775a19 [ 320.141620][T10253] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 320.149611][T10253] RBP: 00007f16a87e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 320.157583][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.165546][T10253] R13: 000000000000000b R14: 00007f16a8903f60 R15: 00007fff99468898 [ 320.173529][T10253] [ 320.176823][T10253] Kernel Offset: disabled [ 320.181220][T10253] Rebooting in 86400 seconds..