last executing test programs: 1m34.511900354s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="c4edb16c2984605dfbb65690b6648826020fbc958f06322ea4107d7a1140345a17f3ce722b479106c6ff65466c0eb27d24baf902d38f6b8525408f0b4052a9356ac3df6e9fe948888193e3b8276a83e7be41ab6579089b5ba258cfc4e1d7326e4342fedb48214f0b6761507eacdbaf0be7a9b550a4fbb9c49072c763955b4fce8c5c30d59452798d2b5af2ec9af19eb4c0cfa06b3667b078ca657804a281046ed602eb2a6bf78f0480000863ca14e927caf6d8f2e98e3cb5271d7106632f8964a6923d3ba7045c13364a47e9cff92ab88642959dab52289f108f55c245e3aa20d7fabca2a88f8d3178c1569b68fda3089aa2aa8d24b07a858267e93e0f0524567b4503ec8aa1f178a1d5557156626388aa9fd7a01e7b38808c75d82bf217af5cb88f151b4d27ef98fde2e650aa2958e943eed1b0b404631b5c778a2481d2b18080e40d71a34c7ea803d387049a706fcc8a8e0097f5b45a3d0041b2453afa6857226d5f112937785159b46d6de534b2b0ddbc5283a72eb271053263dbbb7524fa1f256e7b24d46dbebf05da7e50c2de6017c927d2ff9aa58b06fa25e92e4f95f4b440017e37731358a52c8f8c8251eafcaa32dbfdeb27a950a8fa4c4b07ae9932467c266a8057b8c8060bffe206473977df9c25c2f2d4034bb15318e653e81e78cf2c0913b621507ce1274ed272a175d1532d90eb5f7c1fbc8cf483ce24858dabdb81050a9c2096aa9deed4c36ee65574828d247928d30b913b950ec1af0b0252322d8d044f87a90cafffcf3e7fcf9b148f0946c1750936e8b448974662bcfbdf3cb9ae8fa83350a87252dc9748e0a89dcef4b1e5d8fc650ccfc190b228735d34ba3cfb2a1b551155f457d168aac2216b66de02ee175b651c61d72e7fae1a8ecaa4ac2f7dcb383478706b78d0ea6ef348b41927420a905a93ff4f111bd0faf84823f638c7bc4723261feab24d53b13754355fa57b86d2cfb5b074f17164b5bf2e3ea90e241e3b3210b2f879f927b6ba80dbfccdca663a1c483ace6e943d5515c5d40f72b9146b612fa6a33fb2d8f29cdf487098407b679a1be25a2bf05477104bd43f57fbe2ef81a0bc95584ee30dad57a1b473ef98d9d6bec80ef438f3f74afb07c0c9cb7e84e742db837edebbd9c48995c7ca39567726ba9b04c215212aef720e4babef51033aaeaa0be4ff4405c59682e746d33f22b8d2105b91ec9c6d3624e2d2e13c87ca7506e12433e7148bfc07d391dc1aa554d69ecbcd82c47f5a1ed9fa7cfa501607f463ff4828d9a90604d1b8765ce3822e5491f0fb8ffaa29bee742dc18acb8e88395e668654ab8b3fc682d7248e2e7b17852367d130ec47bb0959c19471ceb3ff23286a1ee2d6a517669dea902db552d1ad384216d4346f4cb1d9a64a77f19fd4f9db4e154cbf571cb62d8ffce27154baf76829cc8d6e016de6511f49eecfb38ebf3f4772e7ae413e73ba7db03c43228c3f2a9a09e160fc7c3ff3d4c81ff44751a1ddc9c7f0fb7f2c6f2a982c82bba081d09895f369d2c6da5193b59edb815aa6f408e1e9d634b796fc439f9e360a6c70bfc7a32ed90885d1b0a01787f2e3f3d6cc56c0e41fffd2f1e2b9b2074c090f935bb09cf0e6e3f317de2f3561952ba14f60859d9b0b02931a6eaee2413e6f594cf0a8ac968f8a96a5e6418b67050417d2d7c6e4cc92d8da4b39bd69dfa763c7f4940820f7397c1fe87380bed34fa9848d6d797a393adaae69267037c483882a191c8500989d91f033e10b49190ef8ed864a1da3bbe6bfa2629565f2ce8c8182fa67f82b5f301db94f65da24c7c39fb977e01653db19e02038c11cb1c5c575a1824470b438e34c64016cb1648cd45b7f559cf22313020917b7fd1bf0a293852e639adcab385c2e5195f2433a0ae6972702b0763cd5a542c563b99a044dde56e8f5c1d6620dd92babc7e2d082f79a19faed107c5cfc7cbd15322952548b778bbcca949464b51d12f71dede9797bd3ca8ef6d537341acea1bcb7a073f6009aeca3c80afb895fb02d2d838d7cf98d318f7294fb9ab49096d3905b3b6828d13a4526d0a4e72275b82f4511701b904a1b2e2d3dfb762d54df4d081bf04712"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1m34.21912672s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 1m21.239807246s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="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"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1m19.172933584s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 1m3.735993854s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 1m3.34937113s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="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"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 48.547962012s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 44.879804102s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="c4edb16c2984605dfbb65690b6648826020fbc958f06322ea4107d7a1140345a17f3ce722b479106c6ff65466c0eb27d24baf902d38f6b8525408f0b4052a9356ac3df6e9fe948888193e3b8276a83e7be41ab6579089b5ba258cfc4e1d7326e4342fedb48214f0b6761507eacdbaf0be7a9b550a4fbb9c49072c763955b4fce8c5c30d59452798d2b5af2ec9af19eb4c0cfa06b3667b078ca657804a281046ed602eb2a6bf78f0480000863ca14e927caf6d8f2e98e3cb5271d7106632f8964a6923d3ba7045c13364a47e9cff92ab88642959dab52289f108f55c245e3aa20d7fabca2a88f8d3178c1569b68fda3089aa2aa8d24b07a858267e93e0f0524567b4503ec8aa1f178a1d5557156626388aa9fd7a01e7b38808c75d82bf217af5cb88f151b4d27ef98fde2e650aa2958e943eed1b0b404631b5c778a2481d2b18080e40d71a34c7ea803d387049a706fcc8a8e0097f5b45a3d0041b2453afa6857226d5f112937785159b46d6de534b2b0ddbc5283a72eb271053263dbbb7524fa1f256e7b24d46dbebf05da7e50c2de6017c927d2ff9aa58b06fa25e92e4f95f4b440017e37731358a52c8f8c8251eafcaa32dbfdeb27a950a8fa4c4b07ae9932467c266a8057b8c8060bffe206473977df9c25c2f2d4034bb15318e653e81e78cf2c0913b621507ce1274ed272a175d1532d90eb5f7c1fbc8cf483ce24858dabdb81050a9c2096aa9deed4c36ee65574828d247928d30b913b950ec1af0b0252322d8d044f87a90cafffcf3e7fcf9b148f0946c1750936e8b448974662bcfbdf3cb9ae8fa83350a87252dc9748e0a89dcef4b1e5d8fc650ccfc190b228735d34ba3cfb2a1b551155f457d168aac2216b66de02ee175b651c61d72e7fae1a8ecaa4ac2f7dcb383478706b78d0ea6ef348b41927420a905a93ff4f111bd0faf84823f638c7bc4723261feab24d53b13754355fa57b86d2cfb5b074f17164b5bf2e3ea90e241e3b3210b2f879f927b6ba80dbfccdca663a1c483ace6e943d5515c5d40f72b9146b612fa6a33fb2d8f29cdf487098407b679a1be25a2bf05477104bd43f57fbe2ef81a0bc95584ee30dad57a1b473ef98d9d6bec80ef438f3f74afb07c0c9cb7e84e742db837edebbd9c48995c7ca39567726ba9b04c215212aef720e4babef51033aaeaa0be4ff4405c59682e746d33f22b8d2105b91ec9c6d3624e2d2e13c87ca7506e12433e7148bfc07d391dc1aa554d69ecbcd82c47f5a1ed9fa7cfa501607f463ff4828d9a90604d1b8765ce3822e5491f0fb8ffaa29bee742dc18acb8e88395e668654ab8b3fc682d7248e2e7b17852367d130ec47bb0959c19471ceb3ff23286a1ee2d6a517669dea902db552d1ad384216d4346f4cb1d9a64a77f19fd4f9db4e154cbf571cb62d8ffce27154baf76829cc8d6e016de6511f49eecfb38ebf3f4772e7ae413e73ba7db03c43228c3f2a9a09e160fc7c3ff3d4c81ff44751a1ddc9c7f0fb7f2c6f2a982c82bba081d09895f369d2c6da5193b59edb815aa6f408e1e9d634b796fc439f9e360a6c70bfc7a32ed90885d1b0a01787f2e3f3d6cc56c0e41fffd2f1e2b9b2074c090f935bb09cf0e6e3f317de2f3561952ba14f60859d9b0b02931a6eaee2413e6f594cf0a8ac968f8a96a5e6418b67050417d2d7c6e4cc92d8da4b39bd69dfa763c7f4940820f7397c1fe87380bed34fa9848d6d797a393adaae69267037c483882a191c8500989d91f033e10b49190ef8ed864a1da3bbe6bfa2629565f2ce8c8182fa67f82b5f301db94f65da24c7c39fb977e01653db19e02038c11cb1c5c575a1824470b438e34c64016cb1648cd45b7f559cf22313020917b7fd1bf0a293852e639adcab385c2e5195f2433a0ae6972702b0763cd5a542c563b99a044dde56e8f5c1d6620dd92babc7e2d082f79a19faed107c5cfc7cbd15322952548b778bbcca949464b51d12f71dede9797bd3ca8ef6d537341acea1bcb7a073f6009aeca3c80afb895fb02d2d838d7cf98d318f7294fb9ab49096d3905b3b6828d13a4526d0a4e72275b82f4511701b904a1b2e2d3dfb762d54df4d081bf04712"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 32.448736835s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 29.364110046s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="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"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 16.543449435s ago: executing program 1 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000600)=[{}, {}], 0x72, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1000, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x4, 0x1, 0x0, 0x0, 0x4, 0x50, 0x1}, @tail_call, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xbd, &(0x7f0000000380)=""/189, 0x41000, 0x0, '\x00', r2, 0x12, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0xa, 0x4, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000008c0)=[{0xff, 0x1, 0x7, 0xc}, {0x3, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x3, 0x1}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x3, 0x5, 0x3}, {0x0, 0x4, 0xa}, {0x2, 0x4, 0x8, 0xc}], 0x10, 0x10000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(r0) 13.404206917s ago: executing program 0 (id=1931): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @broadcast, {0x7, 0xffb}, @device_a, @void, @value=@ver_80211n={0x0, 0x4, 0x3, 0x3}}, @random="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"}, 0x5f3) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.059377705s ago: executing program 2 (id=2568): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0xfffffffe) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001e00438b0000000000000000000000000000000091859b15f5f288926b000000000000000000000001000000000000000c00150000000000000000001c0017"], 0x68}}, 0x40005) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe4}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.984416657s ago: executing program 3 (id=2569): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x1000000) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="40001f8a7898f75dc43a430cf9687fca1658be3ce0fd7c7680cffeed1f80a173523347ee350c9b9767d80f397a4469e3e5867501720d3a873b4e1a9de9233e3eb09e67019f222ce2d467ec6ac4bb3e6d2ba9fc796ab07cf60e34026de2a52ecb21fc9b9d64d4eddcf6304272be1e986aeb6bbdd4627d7a8e4e787aa8bd6451cac93e0245bbbfb331fba3042474b20db48bc0b1832a4b0ae698cae1f4ee57300ff69b32502ff6033c6135cd8fc93801306fed000000000000", 0x2}], 0x1, 0x0, 0x3a, 0x2c}, 0x4004) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r8 = socket$pptp(0x18, 0x1, 0x2) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)="80b80e9a54dbb24982a7a96c740b292640e3daff66fe6c00de214846ba9bb25bc85c31ad42fcbfb981db708c67b6a0d60244df880add23625a64f142afff845f46ead0e5da466f2611b624ff2532ad902e3b65da3ee1b1a2e720c1011e22de1d055ab66b6fb3ec3c7fb542e7fbd5aa8b345b4b5ea82987b934c769ddfcf3e1a1eb", 0x81}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6c, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000800010086cc00000000", @ANYRES32, @ANYRES64=r9], &(0x7f0000000780)='syzkaller\x00'}, 0x90) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=r10, @ANYRESOCT=r0, @ANYBLOB="3e197914d43b7746d8b7f78b89b3c7d5416077fff36d24c126b0a325145b1b0cff472cd1a8e57a37e012582351db0bcc9c9dc956fd472d42452749c98ba7f83b97d48257cf0512bf3a7ced847f04ddc05ba5d3c16fb2b8b03f718386cc08cf632350d9939216b82cac0fad1eaf6a8aa0c10de0ddff491e3ad7063a6f620a7c6f3d0ca4c0238e2998359d59c1a4624b5eb45a88667afd1abf85ba8904dbad6fc330274fa224a4e62d76c88a", @ANYRES8=r4, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRESDEC=r8, @ANYRESHEX, @ANYRES32=r2], 0x10b8}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x3, &(0x7f0000004240)=0x40000008, 0x4) r12 = socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_buf(r12, 0x1, 0x37, &(0x7f0000001200)=""/4096, &(0x7f0000000000)=0x1000) recvmmsg(r11, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000000)=0x7e, 0x4) 1.924882763s ago: executing program 4 (id=2570): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x39d}], 0x1}}], 0x1, 0x0) (async) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000580)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@empty}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='g', 0x1}], 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.825149991s ago: executing program 2 (id=2571): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x4}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "0eabdac5a3619b2c"}, 0x5}}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) close(r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="8303000200004004001ea058edd7db00", 0x10) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x36) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003704000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c000280060008003f00000008000200ac14140008000300e0000002"], 0x48}}, 0x0) 1.63494305s ago: executing program 4 (id=2572): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000500010073797a30000000003c000000090a000000000007000000000000000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000003c0000000e0a00000000000000000000000000000900020073797a32000000000900010073797a3000000000100003800c00008008000180040003"], 0xc0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0xa, 0x7fff}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000006", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @private2}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c0002800c0004800500010084000000080001400002000008000240000000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)={0x4e0, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x4b0, 0x8, 0x0, 0x1, [{0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d028ec3716b669871e03918ee20be2a023d0ea7287eed308a7a95fbc10da3145"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe2}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x69, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf}, @WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0xfffffffffffffe04}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4040820}, 0x24044000) shutdown(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r14, @ANYBLOB="0c00238005000f00dd000000"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r11, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.077928673s ago: executing program 3 (id=2573): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x132b}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0xfffffffffffffff3}, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, @void, @void}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'vlan1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r10, 0x1, 0x2b, &(0x7f0000000180)=0x6, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x0, 0x811, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x22}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="555299a3e2cf7780a5ee1177681bdbe62d0c0319fe7214c4a7315206d149efd1b9079dd07811dc321e0141a9b9ac21beeaee18840c665fbb2d17911b810d77c01e2102cbab1c2e50101a00", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="0c00060000000000000000000c000600020000000000000008000300", @ANYRES32=r14, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x400c081}, 0x4000) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r16}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r7}) 724.597051ms ago: executing program 3 (id=2574): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000001800000000000000570077a700000000040000000a00000002000084dc0000000500000001000000010000000400000001000000060000000e0000000100000f03000000040000000400000006000000ed1ebb0a0000000000000901000000100000000000000b031000000000000000ee6d9528a6d9128d604554a849b7e3a0cdd531ff018b440aac688b"], &(0x7f0000000180)=""/6, 0x74, 0x6, 0x0, 0x8}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@bloom_filter={0x1e, 0x7, 0x5, 0xfffffbff, 0x802, 0xffffffffffffffff, 0x3ff, '\x00', r0, r1, 0x2, 0x5, 0x1, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x75, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdf, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x6, 0x4, 0x0, 0x60, 0xffffffffffffffff, 0x800001, '\x00', r8, 0xffffffffffffffff, 0x2, 0x1000005}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, r11, 0x36}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r10}, 0xc) close(r13) (async) close(r13) 658.428687ms ago: executing program 2 (id=2575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000140000000000000000000015850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000220000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$binfmt_misc(r5, 0x0, 0xfffffc8f) splice(r4, 0x0, r7, 0x0, 0x1800, 0x0) 613.362712ms ago: executing program 3 (id=2576): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8500000044000000160000000000000027000000000000009500000000000000b1e8f56354a02d0f050a3f66036feb2f16738abddadda9fb46c85ac591f917407faf32b6a3725b87347c7d243b17f9f5e285dac2ab548140631e9fa17d80cbf95f7f46053d21dbbf1534108d6f2bacbbf34e9ae6ab129d6924e2cb5c2a9d2f518213a85c02a0bd1818ec4801a5510190afd626e79f055632f1e8b27bc454c9d745e41be44b994d6a6553528add847eafc1e37ccb253eadad0ef59fcf863c975d89ed1b18f41c549a67a9ab59d2339e6af04c32ce596fa7d45f3aeb"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x19, 0x0, 0x4000}, 0x20) write$binfmt_elf64(r2, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000002c0)="e2b3b8c51d71eadd5df9dda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91176ff4e6ce2d6ad7c2eb", 0x53, 0x8c1, 0x0, 0x0) 526.107799ms ago: executing program 3 (id=2577): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000240)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x51}}, &(0x7f0000000040)='syzkaller\x00', 0x6}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in=@multicast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x3506}]}]}, 0xec}}, 0x0) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x260, 0x37f, 0x148, 0x0, 0x148, 0x2f8, 0x240, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00'}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000700)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@setneightbl={0x7c, 0x43, 0x100, 0x70bd26, 0x8001, {0x7}, [@NDTA_THRESH2={0x8, 0x3, 0x3}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8}]}, @NDTA_PARMS={0x20, 0x6, 0x0, 0x1, [@NDTPA_ANYCAST_DELAY={0xc}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x80}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x2}]}, @NDTA_THRESH1={0x8, 0x2, 0x2}, @NDTA_PARMS={0x1c, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0xe3}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x2}, @NDTPA_PROXY_QLEN={0x8}]}, @NDTA_NAME={0xf, 0x1, 'netdevsim0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44834}, 0x40000d0) recvmsg$unix(r5, &(0x7f00000006c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/113, 0x71}, {&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/47, 0x2f}], 0x8, &(0x7f00000006c0)}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x22, 0x0, 0x2, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0, 0x64}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 409.037934ms ago: executing program 4 (id=2578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x420}, 0x420}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="1000508004000600050007"], 0x2c}}, 0x0) 406.312401ms ago: executing program 2 (id=2579): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040080, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback, 0x39ef}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 304.35459ms ago: executing program 2 (id=2580): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x50}}, 0x0) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x163b, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x15}]}}}]}, 0x3c}}, 0x0) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f00000004c0)=""/162, 0xa2, 0x0, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xfc, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0x81}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x70d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x83f}, {0x6}, {0x5}, {0x6, 0x11, 0xfbff}, {0x8, 0xb, 0x28d5}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x60000851) 249.651667ms ago: executing program 4 (id=2581): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80000) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}}, 0x0) 210.212526ms ago: executing program 2 (id=2582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x1, @private0}]}, &(0x7f0000000200)=0x10) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) 104.497182ms ago: executing program 3 (id=2583): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r1, 0x1, 0x6, @remote}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0xf047d99b140527cf}, 0x20040000) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/123, 0x7b}, {0x0}, {&(0x7f00000006c0)=""/90, 0x5a}, {0x0}, {&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000a40)=""/168, 0xa8}], 0x7, &(0x7f0000000c00)=""/108, 0x6c}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = epoll_create1(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}], 0x8, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$packet(0x11, 0x3, 0x300) 88.914665ms ago: executing program 4 (id=2584): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @private2}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, @in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x4d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) 0s ago: executing program 4 (id=2585): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3a5) (async) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) (async) listen(r0, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000000c0)=0x4000000000000200, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000000020104000000000000000002000000040002803000030000000080140003002001000000000000000000000000000014000400fc010000000000000000000000000000280001800c00028005000100000000000c00028005000100000000000c000280050001002f000000"], 0x70}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000500)=0x28) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x3, 0x0, 0xffffffff, 0x8, 0x2145, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000100)=@tcp6=r4}, 0x20) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x9, 0x0, 0xffffffff) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r6, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c"], 0x44}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x12, 0x60d, 0xd0, 0x202, 0x1a0, 0x2e8, 0x2e8, 0x1a0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@dev, @rand_addr=' \x01\x00', [], [], 'batadv_slave_1\x00', 'wg0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0x0, 0xfd}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4, 0x1}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6=r9}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100000, 0x0) (async) getsockname$inet6(r9, &(0x7f0000000640)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000680)=0x1c) socket$l2tp(0x2, 0x2, 0x73) kernel console output (not intermixed with test programs): ft promiscuous mode [ 333.924566][ T5276] net_ratelimit: 8 callbacks suppressed [ 333.924588][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.487125][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.567739][ T55] Bluetooth: hci3: command tx timeout [ 334.632203][ T7377] team0 (unregistering): Port device team_slave_1 removed [ 334.689507][ T7377] team0 (unregistering): Port device team_slave_0 removed [ 334.969596][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.401063][T13806] hsr_slave_0: entered promiscuous mode [ 335.429225][T13806] hsr_slave_1: entered promiscuous mode [ 335.454514][T13806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.474190][T13806] Cannot create hsr debugfs directory [ 335.505951][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'. [ 335.526084][ T55] Bluetooth: hci5: command tx timeout [ 335.842172][T13973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.862161][T13973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.871730][T13973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.938329][T13973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.950573][T13973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.962096][T13737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.004389][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.030185][T13737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.042975][T13737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.058430][T13737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.226076][T13737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.258129][T13737] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.294382][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.301612][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.315581][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.322806][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.495803][T13990] FAULT_INJECTION: forcing a failure. [ 336.495803][T13990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 336.518629][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.3.2154 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 336.529100][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 336.539185][T13990] Call Trace: [ 336.542503][T13990] [ 336.545464][T13990] dump_stack_lvl+0x241/0x360 [ 336.550181][T13990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.555851][T13990] ? __pfx__printk+0x10/0x10 [ 336.560470][T13990] ? vfs_write+0x7c4/0xc90 [ 336.564938][T13990] should_fail_ex+0x3b0/0x4e0 [ 336.569664][T13990] _copy_from_user+0x2f/0xe0 [ 336.574286][T13990] move_addr_to_kernel+0x82/0x150 [ 336.579335][T13990] __sys_connect+0xc1/0x310 [ 336.583869][T13990] ? __pfx___sys_connect+0x10/0x10 [ 336.589019][T13990] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.595395][T13990] ? do_syscall_64+0x100/0x230 [ 336.600162][T13990] __x64_sys_connect+0x7a/0x90 [ 336.604931][T13990] do_syscall_64+0xf3/0x230 [ 336.609427][T13990] ? clear_bhb_loop+0x35/0x90 [ 336.614105][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.620016][T13990] RIP: 0033:0x7f18c1377299 [ 336.624452][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.644157][T13990] RSP: 002b:00007f18c2124048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 336.652569][T13990] RAX: ffffffffffffffda RBX: 00007f18c1506058 RCX: 00007f18c1377299 [ 336.660578][T13990] RDX: 000000000000006e RSI: 0000000020000140 RDI: 0000000000000004 [ 336.668566][T13990] RBP: 00007f18c21240a0 R08: 0000000000000000 R09: 0000000000000000 [ 336.676630][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.684600][T13990] R13: 000000000000006e R14: 00007f18c1506058 R15: 00007ffc9eb2ca28 [ 336.692842][T13990] [ 336.700084][T13806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.716701][T13806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.726328][T13992] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 336.739195][T13806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.746507][T13992] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.2155'. [ 336.761304][T13806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.782741][T13992] Bluetooth: MGMT ver 1.23 [ 336.788694][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 336.804435][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.032827][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.098771][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.139688][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.146938][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.185745][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.192931][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.264728][T13737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.302885][T13806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.341160][T13806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.450661][T14018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2162'. [ 337.495910][T13737] veth0_vlan: entered promiscuous mode [ 337.552683][T13737] veth1_vlan: entered promiscuous mode [ 337.615024][ T55] Bluetooth: hci5: command tx timeout [ 337.656727][T13737] veth0_macvtap: entered promiscuous mode [ 337.687942][T13737] veth1_macvtap: entered promiscuous mode [ 337.777257][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.819648][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.832055][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.842553][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.854506][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.865052][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.879742][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.892074][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.902903][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.914815][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.927861][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.940400][T13737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.983086][T14040] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 337.996342][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.022250][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.045351][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.065002][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.075345][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.089853][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.099865][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.111878][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.122120][T13737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.133080][T13737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.155181][T13737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.186073][T13737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.233688][T13737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.251749][T13737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.274843][T13737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.374540][T14055] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 338.383085][T14056] FAULT_INJECTION: forcing a failure. [ 338.383085][T14056] name failslab, interval 1, probability 0, space 0, times 0 [ 338.396046][T14055] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.2172'. [ 338.396073][T14055] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 338.396089][T14055] netlink: 'syz.4.2172': attribute type 2 has an invalid length. [ 338.396102][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 338.426321][T13806] veth0_vlan: entered promiscuous mode [ 338.437958][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.2.2171 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 338.448504][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 338.458558][T14056] Call Trace: [ 338.461831][T14056] [ 338.464766][T14056] dump_stack_lvl+0x241/0x360 [ 338.469445][T14056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.474637][T14056] ? __pfx__printk+0x10/0x10 [ 338.479278][T14056] ? fs_reclaim_acquire+0x93/0x140 [ 338.484482][T14056] ? __pfx___might_resched+0x10/0x10 [ 338.489773][T14056] should_fail_ex+0x3b0/0x4e0 [ 338.494811][T14056] ? tomoyo_encode2+0x27e/0x550 [ 338.499764][T14056] should_failslab+0xac/0x100 [ 338.504466][T14056] ? tomoyo_encode2+0x27e/0x550 [ 338.509405][T14056] __kmalloc_noprof+0xd8/0x400 [ 338.514234][T14056] tomoyo_encode2+0x27e/0x550 [ 338.519036][T14056] tomoyo_check_unix_address+0x330/0x880 [ 338.524696][T14056] ? tomoyo_check_unix_address+0x15a/0x880 [ 338.530507][T14056] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 338.536672][T14056] tomoyo_socket_connect_permission+0x23a/0x370 [ 338.542940][T14056] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 338.549847][T14056] ? vfs_write+0x7c4/0xc90 [ 338.554280][T14056] ? __pfx_current_check_access_socket+0x10/0x10 [ 338.560609][T14056] ? __might_fault+0xaa/0x120 [ 338.565311][T14056] ? __might_fault+0xc6/0x120 [ 338.569998][T14056] security_socket_connect+0x75/0xb0 [ 338.575369][T14056] __sys_connect+0x1fe/0x310 [ 338.579975][T14056] ? __pfx___sys_connect+0x10/0x10 [ 338.585118][T14056] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.591569][T14056] ? do_syscall_64+0x100/0x230 [ 338.596347][T14056] __x64_sys_connect+0x7a/0x90 [ 338.601206][T14056] do_syscall_64+0xf3/0x230 [ 338.605707][T14056] ? clear_bhb_loop+0x35/0x90 [ 338.610383][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.616362][T14056] RIP: 0033:0x7fde48777299 [ 338.620797][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.640703][T14056] RSP: 002b:00007fde4956c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 338.649155][T14056] RAX: ffffffffffffffda RBX: 00007fde48906058 RCX: 00007fde48777299 [ 338.657166][T14056] RDX: 000000000000006e RSI: 0000000020000140 RDI: 0000000000000004 [ 338.665305][T14056] RBP: 00007fde4956c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 338.673270][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.681262][T14056] R13: 000000000000006e R14: 00007fde48906058 R15: 00007fff627f6aa8 [ 338.689292][T14056] [ 338.763075][T13806] veth1_vlan: entered promiscuous mode [ 338.899478][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.926575][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.991952][T13806] veth0_macvtap: entered promiscuous mode [ 339.025145][T13806] veth1_macvtap: entered promiscuous mode [ 339.051515][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.079744][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.080015][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.111498][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.124531][ T5367] net_ratelimit: 5 callbacks suppressed [ 339.124552][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.173843][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.201743][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.212989][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.224471][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.234436][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.245126][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.258798][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.273151][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.286089][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.298037][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.315516][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.370057][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.401268][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.411495][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.422398][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.443974][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.455336][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.465787][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.476931][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.487234][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.513624][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.523476][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.534685][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.555205][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.608312][T13806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.633851][T13806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.660092][T13806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.669661][T13806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.956684][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 339.994336][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.016397][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.061279][T14091] vcan0: entered allmulticast mode [ 340.100814][T14091] vcan0: left allmulticast mode [ 340.130244][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.139192][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.169089][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.292046][T14112] FAULT_INJECTION: forcing a failure. [ 340.292046][T14112] name failslab, interval 1, probability 0, space 0, times 0 [ 340.311442][T14111] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 340.327194][T14112] CPU: 0 UID: 0 PID: 14112 Comm: syz.3.2188 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 340.337924][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 340.348441][T14112] Call Trace: [ 340.351745][T14112] [ 340.354690][T14112] dump_stack_lvl+0x241/0x360 [ 340.359388][T14112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.364815][T14112] ? __pfx__printk+0x10/0x10 [ 340.369438][T14112] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 340.375073][T14112] ? __pfx___might_resched+0x10/0x10 [ 340.380571][T14112] should_fail_ex+0x3b0/0x4e0 [ 340.385294][T14112] ? getname_kernel+0x59/0x2f0 [ 340.390163][T14112] should_failslab+0xac/0x100 [ 340.394859][T14112] ? getname_kernel+0x59/0x2f0 [ 340.399646][T14112] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 340.405042][T14112] getname_kernel+0x59/0x2f0 [ 340.409635][T14112] kern_path+0x1d/0x50 [ 340.413703][T14112] unix_find_other+0x123/0x910 [ 340.418475][T14112] ? __pfx_unix_find_other+0x10/0x10 [ 340.423759][T14112] ? aa_sk_perm+0x967/0xab0 [ 340.428265][T14112] unix_dgram_connect+0x4d2/0xd80 [ 340.433287][T14112] ? __pfx_unix_dgram_connect+0x10/0x10 [ 340.438832][T14112] ? bpf_lsm_socket_connect+0x9/0x10 [ 340.445181][T14112] ? security_socket_connect+0x87/0xb0 [ 340.450654][T14112] __sys_connect+0x2df/0x310 [ 340.455246][T14112] ? __pfx___sys_connect+0x10/0x10 [ 340.460468][T14112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.466791][T14112] ? do_syscall_64+0x100/0x230 [ 340.471554][T14112] __x64_sys_connect+0x7a/0x90 [ 340.476313][T14112] do_syscall_64+0xf3/0x230 [ 340.480809][T14112] ? clear_bhb_loop+0x35/0x90 [ 340.485497][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.491491][T14112] RIP: 0033:0x7f18c1377299 [ 340.495917][T14112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.515970][T14112] RSP: 002b:00007f18c2124048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 340.524406][T14112] RAX: ffffffffffffffda RBX: 00007f18c1506058 RCX: 00007f18c1377299 [ 340.532389][T14112] RDX: 000000000000006e RSI: 0000000020000140 RDI: 0000000000000004 [ 340.540357][T14112] RBP: 00007f18c21240a0 R08: 0000000000000000 R09: 0000000000000000 [ 340.548336][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.556495][T14112] R13: 000000000000006e R14: 00007f18c1506058 R15: 00007ffc9eb2ca28 [ 340.564627][T14112] [ 340.588975][ T945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.629690][T14114] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 340.692035][ C0] eth0: bad gso: type: 1, size: 1408 [ 340.697627][T14119] netlink: 'syz.2.2191': attribute type 10 has an invalid length. [ 340.761785][T14119] team0: Port device wlan1 added [ 340.794986][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 341.144671][T14133] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.207595][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.371543][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2198'. [ 341.792944][ C0] eth0: bad gso: type: 1, size: 1408 [ 341.815194][ C0] eth0: bad gso: type: 1, size: 1408 [ 341.863541][T14160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2206'. [ 342.016793][T14174] tipc: Enabling of bearer rejected, failed to enable media [ 342.239306][T14187] bridge_slave_0: left allmulticast mode [ 342.247808][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.272221][T14187] bridge_slave_0: left promiscuous mode [ 342.287213][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.310500][T14187] bridge_slave_1: left allmulticast mode [ 342.313716][T14195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.332825][T14187] bridge_slave_1: left promiscuous mode [ 342.352806][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.378313][T14187] bond0: (slave bond_slave_0): Releasing backup interface [ 342.394357][T14187] bond0: (slave bond_slave_1): Releasing backup interface [ 342.473102][T14187] team0: Port device team_slave_0 removed [ 342.488573][T14187] team0: Port device team_slave_1 removed [ 342.495571][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.503418][T14187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.514816][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.522928][T14187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.539182][T14187] bond0: (slave netdevsim0): Releasing backup interface [ 342.581177][ T945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.596690][T14187] team0: Port device wlan1 removed [ 342.604247][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2213'. [ 342.665523][T14193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.694530][T14193] team0: Port device bond0 added [ 342.808762][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 342.998017][ T7377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.027791][T14214] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 343.468152][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.479732][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.488297][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.499532][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.509283][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.516890][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.568272][T14217] lo speed is unknown, defaulting to 1000 [ 343.768693][ T7377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.809690][T14217] chnl_net:caif_netlink_parms(): no params data found [ 343.928243][T14231] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 343.982049][ T7377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.054901][T14233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2224'. [ 344.119344][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2225'. [ 344.188351][ T7377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.232238][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.243067][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.263103][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.286766][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.296991][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.304282][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2226'. [ 344.318159][T14248] pim6reg: entered allmulticast mode [ 344.325435][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.325746][ T5367] net_ratelimit: 3 callbacks suppressed [ 344.325760][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.444866][T14256] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2227'. [ 345.210380][T14254] lo speed is unknown, defaulting to 1000 [ 345.269217][T14241] lo speed is unknown, defaulting to 1000 [ 345.295842][T14217] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.303004][T14217] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.333560][T14217] bridge_slave_0: entered allmulticast mode [ 345.351508][T14217] bridge_slave_0: entered promiscuous mode [ 345.364851][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.376836][T14217] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.398504][T14217] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.406683][T14217] bridge_slave_1: entered allmulticast mode [ 345.417710][T14217] bridge_slave_1: entered promiscuous mode [ 345.455511][T14264] lo speed is unknown, defaulting to 1000 [ 345.497333][T14268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2229'. [ 345.508022][T14267] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 345.525879][T14267] bridge0: entered allmulticast mode [ 345.614202][ T5237] Bluetooth: hci3: command tx timeout [ 345.640045][T14217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.654868][T14217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.857866][T14217] team0: Port device team_slave_0 added [ 345.882220][T14217] team0: Port device team_slave_1 added [ 345.909889][ T7377] bridge_slave_1: left allmulticast mode [ 345.922248][ T7377] bridge_slave_1: left promiscuous mode [ 345.930042][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.940812][ T7377] bridge_slave_0: left allmulticast mode [ 345.948334][ T7377] bridge_slave_0: left promiscuous mode [ 345.954849][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.256231][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.324229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.405988][ T5237] Bluetooth: hci5: command tx timeout [ 346.417810][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.426553][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.483034][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.504298][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.522317][ T7377] bond0 (unregistering): Released all slaves [ 346.671771][T14217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.689106][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.723945][T14217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.787766][T14217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.801761][T14217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.832205][T14217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.987521][T14217] hsr_slave_0: entered promiscuous mode [ 346.996254][T14217] hsr_slave_1: entered promiscuous mode [ 347.031569][T14217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.041229][T14217] Cannot create hsr debugfs directory [ 347.055688][T14291] netlink: 'syz.2.2234': attribute type 30 has an invalid length. [ 347.135695][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.235993][ T7377] hsr_slave_0: left promiscuous mode [ 347.258008][ T7377] hsr_slave_1: left promiscuous mode [ 347.279786][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.309129][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.344599][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.352596][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.391112][ T7377] veth1_macvtap: left promiscuous mode [ 347.396917][ T7377] veth0_macvtap: left promiscuous mode [ 347.402745][ T7377] veth1_vlan: left promiscuous mode [ 347.408487][ T7377] veth0_vlan: left promiscuous mode [ 347.444401][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.684287][ T55] Bluetooth: hci3: command tx timeout [ 348.012813][ T7377] team0 (unregistering): Port device team_slave_1 removed [ 348.063471][ T7377] team0 (unregistering): Port device team_slave_0 removed [ 348.336811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.487814][ T55] Bluetooth: hci5: command tx timeout [ 348.493559][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.677933][T14241] chnl_net:caif_netlink_parms(): no params data found [ 349.133446][T14336] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 349.156507][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.167822][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.179121][T14241] bridge_slave_0: entered allmulticast mode [ 349.186907][T14241] bridge_slave_0: entered promiscuous mode [ 349.214086][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.233494][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.247892][T14241] bridge_slave_1: entered allmulticast mode [ 349.266765][T14241] bridge_slave_1: entered promiscuous mode [ 349.395304][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.423511][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.509950][T14353] tipc: MTU too low for tipc bearer [ 349.525093][ T5276] net_ratelimit: 1 callbacks suppressed [ 349.525112][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.727923][T14241] team0: Port device team_slave_0 added [ 349.756193][T14241] team0: Port device team_slave_1 added [ 349.763820][ T55] Bluetooth: hci3: command tx timeout [ 349.837065][ T7377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.956331][T14371] __nla_validate_parse: 1 callbacks suppressed [ 349.956350][T14371] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2251'. [ 349.959532][T14368] erspan0: entered promiscuous mode [ 349.999028][T14368] vlan0: entered promiscuous mode [ 350.052246][T14368] erspan0: left promiscuous mode [ 350.093353][ T7377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.111068][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.129227][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.164022][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 350.189515][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.224058][T14380] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 350.283043][ T7377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.300405][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.308639][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.337323][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.504672][ T7377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.565900][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.575022][ T55] Bluetooth: hci5: command 0x040f tx timeout [ 350.671965][T14241] hsr_slave_0: entered promiscuous mode [ 350.679815][T14397] ipt_ECN: cannot use operation on non-tcp rule [ 350.692216][T14241] hsr_slave_1: entered promiscuous mode [ 350.692789][T14398] ipt_ECN: cannot use operation on non-tcp rule [ 350.705566][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.713530][T14241] Cannot create hsr debugfs directory [ 350.743490][T14398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 350.755021][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 350.813828][T14217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.835964][T14217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.897015][T14217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.953321][T14217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.154915][ T7377] bridge_slave_1: left allmulticast mode [ 351.162008][ T7377] bridge_slave_1: left promiscuous mode [ 351.170576][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.184110][ T7377] bridge_slave_0: left allmulticast mode [ 351.196748][ T7377] bridge_slave_0: left promiscuous mode [ 351.209245][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.605675][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.844063][ T55] Bluetooth: hci3: command tx timeout [ 352.039342][ T7377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.051120][ T7377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.062661][ T7377] bond0 (unregistering): Released all slaves [ 352.099947][T14450] netlink: 'syz.4.2267': attribute type 5 has an invalid length. [ 352.128105][T14451] netlink: 'syz.4.2267': attribute type 5 has an invalid length. [ 352.347476][ T5280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.438243][T14460] syzkaller1: entered promiscuous mode [ 352.448568][T14460] syzkaller1: entered allmulticast mode [ 352.620415][ T7377] hsr_slave_0: left promiscuous mode [ 352.627562][ T7377] hsr_slave_1: left promiscuous mode [ 352.634294][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.641804][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.644202][ T55] Bluetooth: hci5: command 0x040f tx timeout [ 352.656300][ T7377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.656743][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.677279][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.705873][ T7377] veth1_macvtap: left promiscuous mode [ 352.711540][ T7377] veth0_macvtap: left promiscuous mode [ 352.717918][ T7377] veth1_vlan: left promiscuous mode [ 352.723425][ T7377] veth0_vlan: left promiscuous mode [ 352.726380][T14470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2273'. [ 353.321003][ T7377] team0 (unregistering): Port device team_slave_1 removed [ 353.372301][ T7377] team0 (unregistering): Port device team_slave_0 removed [ 353.452680][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.690905][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.042209][T14217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.109901][T14217] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.148212][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.155598][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.264586][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.271867][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.356016][T14490] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2278'. [ 354.391859][T14492] batadv_slave_1: entered promiscuous mode [ 354.403996][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2278'. [ 354.414177][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2278'. [ 354.479499][T14486] netlink: 'syz.4.2278': attribute type 3 has an invalid length. [ 354.494687][T14486] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2278'. [ 354.584269][T14241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 354.612291][T14488] batadv_slave_1: left promiscuous mode [ 354.666986][T14241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 354.724090][ T5237] Bluetooth: hci5: command 0x040f tx timeout [ 354.725040][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.778113][T14241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 354.808711][T14241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.026435][T14217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.057980][ C0] eth0: bad gso: type: 1, size: 1408 [ 355.198188][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.215949][T14217] veth0_vlan: entered promiscuous mode [ 355.268387][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.284348][T14217] veth1_vlan: entered promiscuous mode [ 355.308381][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.315527][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.353637][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.360776][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.467040][T14217] veth0_macvtap: entered promiscuous mode [ 355.513944][T14217] veth1_macvtap: entered promiscuous mode [ 355.532756][T14241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.598312][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.634768][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.660939][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.683153][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.709736][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.723908][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.734248][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.746489][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.765388][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.774089][T14217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.795799][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.825839][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.836368][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.849418][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.879705][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.894379][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.905275][T14217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.917719][T14217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.945349][T14217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.976029][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2292'. [ 355.992585][T14217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.019894][T14217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.029119][T14217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.034741][T14544] netlink: 'syz.2.2291': attribute type 2 has an invalid length. [ 356.052789][T14217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.107881][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2291'. [ 356.148910][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.173492][T14546] batadv_slave_1: entered promiscuous mode [ 356.180291][T14544] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 356.334669][T14545] batadv_slave_1: left promiscuous mode [ 356.362919][T14551] lo speed is unknown, defaulting to 1000 [ 356.405950][T14542] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 356.485229][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.568854][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.613722][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.765136][T14241] veth0_vlan: entered promiscuous mode [ 356.811933][T14241] veth1_vlan: entered promiscuous mode [ 356.817805][ T5237] Bluetooth: hci5: command 0x040f tx timeout [ 356.824298][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.889104][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.922029][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.023516][T14241] veth0_macvtap: entered promiscuous mode [ 357.036575][T14241] veth1_macvtap: entered promiscuous mode [ 357.246728][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.276156][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.286932][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.297945][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.308282][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.320113][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.331238][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.350470][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.360781][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.381526][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.398717][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.582948][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.595126][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.605834][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.618924][T14581] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2302'. [ 357.629380][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.639414][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.653855][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.666287][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.676944][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.687834][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.698917][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.732673][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.741930][T14580] netlink: 'syz.2.2302': attribute type 1 has an invalid length. [ 357.789082][T14581] bond2 (unregistering): Released all slaves [ 357.796647][T14583] raw_sendmsg: syz.4.2303 forgot to set AF_INET. Fix it! [ 357.830722][T14241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.841171][T14241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.854507][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.866434][T14241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.884100][T14241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.160283][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.183799][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.255819][ T7377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.269022][ T7377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.427278][ T7365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.603029][ T7365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.676594][ T7365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.743226][ T7365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.861698][ T7365] bridge_slave_1: left allmulticast mode [ 358.868071][ T7365] bridge_slave_1: left promiscuous mode [ 358.874027][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.882952][ T7365] bridge_slave_0: left allmulticast mode [ 358.889168][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.889641][ T7365] bridge_slave_0: left promiscuous mode [ 358.903430][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.308038][ T7365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.319651][ T7365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.331010][ T7365] bond0 (unregistering): Released all slaves [ 359.526002][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.591344][ T7365] hsr_slave_0: left promiscuous mode [ 359.597934][ T7365] hsr_slave_1: left promiscuous mode [ 359.612357][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.620061][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.630194][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.650501][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.679244][ T7365] veth1_macvtap: left promiscuous mode [ 359.685254][ T7365] veth0_macvtap: left promiscuous mode [ 359.690929][ T7365] veth1_vlan: left promiscuous mode [ 359.697155][ T7365] veth0_vlan: left promiscuous mode [ 359.927060][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.149292][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.160494][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.170822][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.183425][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.195847][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.205665][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.706623][ T7365] team0 (unregistering): Port device team_slave_1 removed [ 360.748995][ T7365] team0 (unregistering): Port device team_slave_0 removed [ 360.966303][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.279086][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 361.326007][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2312'. [ 361.374222][T14624] vlan2: entered promiscuous mode [ 361.389625][T14624] team0: entered promiscuous mode [ 361.400301][T14624] bond0: entered promiscuous mode [ 361.461298][T14619] lo speed is unknown, defaulting to 1000 [ 361.588018][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2314'. [ 361.619084][T14632] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2314'. [ 361.662640][T14632] tipc: Enabling of bearer rejected, failed to enable media [ 362.002712][T14619] chnl_net:caif_netlink_parms(): no params data found [ 362.014714][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.163294][ T7365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.187891][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.195445][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.202863][T14619] bridge_slave_0: entered allmulticast mode [ 362.210559][T14619] bridge_slave_0: entered promiscuous mode [ 362.220137][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.227507][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.244257][T14619] bridge_slave_1: entered allmulticast mode [ 362.251918][T14619] bridge_slave_1: entered promiscuous mode [ 362.291290][ T7365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.322395][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.334449][ T55] Bluetooth: hci3: command tx timeout [ 362.337558][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.372194][ T7365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.417774][T14619] team0: Port device team_slave_0 added [ 362.441817][T14619] team0: Port device team_slave_1 added [ 362.473933][ T7365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.510748][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.518166][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.552623][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.565470][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.572955][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.600755][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.619017][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.694849][T14658] netlink: 'syz.2.2320': attribute type 3 has an invalid length. [ 362.712854][T14659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2321'. [ 362.886066][T14619] hsr_slave_0: entered promiscuous mode [ 362.914840][T14619] hsr_slave_1: entered promiscuous mode [ 362.931956][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.960790][T14670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.040798][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.052434][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.112936][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.124158][T14667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.140598][T14667] IPVS: length: 97 != 8 [ 363.141560][ T7365] bridge_slave_1: left allmulticast mode [ 363.152975][ T7365] bridge_slave_1: left promiscuous mode [ 363.164037][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.169757][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.178996][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.192226][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.203215][ T7365] bridge_slave_0: left allmulticast mode [ 363.210397][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 363.220095][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.243766][ T7365] bridge_slave_0: left promiscuous mode [ 363.249513][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.757205][ T7365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.772133][ T7365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.783425][ T7365] bond0 (unregistering): Released all slaves [ 363.796847][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 363.811967][T14675] vlan0: entered promiscuous mode [ 363.818072][T14675] team0: entered promiscuous mode [ 363.823134][T14675] team_slave_0: entered promiscuous mode [ 363.836617][T14675] team_slave_1: entered promiscuous mode [ 363.881460][T14684] netlink: 'syz.3.2327': attribute type 3 has an invalid length. [ 363.905037][T14692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.913507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.948007][T14689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2328'. [ 364.084475][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.101953][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 364.224962][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 364.403984][ T5237] Bluetooth: hci3: command tx timeout [ 364.428918][T14676] lo speed is unknown, defaulting to 1000 [ 364.446236][T14703] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2331'. [ 364.769326][ T7365] hsr_slave_0: left promiscuous mode [ 364.778008][ C0] eth0: bad gso: type: 1, size: 1408 [ 364.816081][ T7365] hsr_slave_1: left promiscuous mode [ 364.846279][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.864130][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.874916][ T7365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.887742][ T7365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.918114][ T7365] veth1_macvtap: left promiscuous mode [ 364.924221][ T7365] veth0_macvtap: left promiscuous mode [ 364.930106][ T7365] veth1_vlan: left promiscuous mode [ 364.935756][ T7365] veth0_vlan: left promiscuous mode [ 365.127461][ T5239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.302148][ T5237] Bluetooth: hci5: command tx timeout [ 365.542657][ T7365] team0 (unregistering): Port device team_slave_1 removed [ 365.599537][ T7365] team0 (unregistering): Port device team_slave_0 removed [ 365.610894][ T5279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.175998][ T5276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.326853][T14733] netlink: 'syz.2.2340': attribute type 27 has an invalid length. [ 366.484328][ T5237] Bluetooth: hci3: command tx timeout [ 366.744547][T14733] bridge0: left allmulticast mode [ 366.780248][T14733] team0: left promiscuous mode [ 366.792352][T14733] bond0: left promiscuous mode [ 367.066198][T14734] atomic_op ffff88802ed84998 conn xmit_atomic 0000000000000000 [ 367.318119][T14733] tipc: Resetting bearer [ 367.366209][ T5237] Bluetooth: hci5: command tx timeout [ 367.489518][T14733] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.499890][T14733] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.511714][T14733] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.525294][T14733] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.621106][T14733] vxcan3: left promiscuous mode [ 367.647524][T14733] vlan2: left promiscuous mode [ 367.770704][T14748] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 367.784021][T14748] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 367.797116][T14754] __nla_validate_parse: 6 callbacks suppressed [ 367.797136][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'. [ 368.035023][T14772] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2346'. [ 368.078333][T14772] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2346'. [ 368.166000][ C0] eth0: bad gso: type: 1, size: 1408 [ 368.205649][T14676] chnl_net:caif_netlink_parms(): no params data found [ 368.307577][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'. [ 368.409735][T14784] netlink: 'syz.3.2350': attribute type 2 has an invalid length. [ 368.451621][T14619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.484504][T14619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.564107][ T5237] Bluetooth: hci3: command tx timeout [ 368.587444][T14619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 368.616664][T14619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 368.654475][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.673236][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.701557][T14676] bridge_slave_0: entered allmulticast mode [ 368.709609][T14676] bridge_slave_0: entered promiscuous mode [ 368.735467][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.768020][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.795388][T14676] bridge_slave_1: entered allmulticast mode [ 368.821984][T14676] bridge_slave_1: entered promiscuous mode [ 368.934655][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.968805][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.072649][T14676] team0: Port device team_slave_0 added [ 369.115831][T14676] team0: Port device team_slave_1 added [ 369.226169][T14821] netlink: 'syz.3.2358': attribute type 2 has an invalid length. [ 369.243912][T14821] netlink: 'syz.3.2358': attribute type 8 has an invalid length. [ 369.272411][T14821] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 369.302524][T14821] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 369.321918][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.348172][T14823] vlan0: entered allmulticast mode [ 369.420168][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.427679][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.454735][ T5237] Bluetooth: hci5: command tx timeout [ 369.456399][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.475038][T14835] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2360'. [ 369.545859][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.553262][T14837] netlink: 'syz.3.2361': attribute type 6 has an invalid length. [ 369.562427][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.573355][T14837] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 369.599411][T14837] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2361'. [ 369.611760][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.672662][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2361'. [ 369.812563][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2363'. [ 369.881050][T14676] hsr_slave_0: entered promiscuous mode [ 369.909673][T14676] hsr_slave_1: entered promiscuous mode [ 369.970449][T14676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.010934][T14676] Cannot create hsr debugfs directory [ 370.202726][T14619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.334241][ T5223] syz_tun: left allmulticast mode [ 370.344387][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.352914][ T5223] syz_tun: left promiscuous mode [ 370.357403][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.370646][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.386211][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.398326][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.407402][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.456336][T14619] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.549563][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.556773][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.607552][T14862] lo speed is unknown, defaulting to 1000 [ 370.616142][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.623267][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.757025][T14866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.759238][T14619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.768895][T14865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.875116][T14867] lo speed is unknown, defaulting to 1000 [ 371.212931][T14862] chnl_net:caif_netlink_parms(): no params data found [ 371.412697][T14886] veth0_macvtap: left promiscuous mode [ 371.428078][T14676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.450070][T14676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.524193][ T4618] Bluetooth: hci5: command tx timeout [ 371.545087][T14676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.567601][T14676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.594873][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.612913][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.632264][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.639864][T14862] bridge_slave_0: entered allmulticast mode [ 371.648220][T14862] bridge_slave_0: entered promiscuous mode [ 371.658397][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.665645][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.673077][T14862] bridge_slave_1: entered allmulticast mode [ 371.680955][T14862] bridge_slave_1: entered promiscuous mode [ 371.699092][T14899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2372'. [ 371.817739][T14905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2374'. [ 371.823423][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.885730][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.069218][T14862] team0: Port device team_slave_0 added [ 372.107054][T14862] team0: Port device team_slave_1 added [ 372.121391][T14619] veth0_vlan: entered promiscuous mode [ 372.199988][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.208439][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.249964][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.277330][T14619] veth1_vlan: entered promiscuous mode [ 372.291511][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.302195][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.344398][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.450625][T14862] hsr_slave_0: entered promiscuous mode [ 372.463489][T14862] hsr_slave_1: entered promiscuous mode [ 372.471306][T14862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.480051][T14862] Cannot create hsr debugfs directory [ 372.485867][ T4618] Bluetooth: hci2: command tx timeout [ 372.531720][T14619] veth0_macvtap: entered promiscuous mode [ 372.561781][T14619] veth1_macvtap: entered promiscuous mode [ 372.593018][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.662567][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.678324][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.689617][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.706984][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.717671][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.729711][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.740279][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.750248][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.760907][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.772689][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.803050][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.823832][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.846026][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.863664][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.884684][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.905815][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.926157][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.949567][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.973530][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.019742][T14619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.029112][T14619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.039076][T14619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.059342][T14619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.083358][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.090757][T14749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.102122][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.109416][T14749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.245972][T14862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.257972][T14862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.373536][T14862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.393353][T14862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.511581][T14862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.525455][T14862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.555847][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.570266][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.605099][ T4618] Bluetooth: hci5: command 0x0405 tx timeout [ 373.675663][T14862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.688258][T14862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.740252][ T7365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.749611][ T7365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.865242][T14952] netlink: 'syz.2.2384': attribute type 3 has an invalid length. [ 373.873013][T14952] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2384'. [ 373.914802][T14952] netlink: 1212 bytes leftover after parsing attributes in process `syz.2.2384'. [ 373.963487][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'. [ 374.033211][T14676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.079650][T14862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.088612][T14955] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2385'. [ 374.114340][T14955] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2385'. [ 374.115100][T14862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.146697][T14862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.185588][T14862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.200006][T14955] xt_CT: No such helper "syz0" [ 374.303282][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.391611][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 374.451582][T14676] veth0_vlan: entered promiscuous mode [ 374.539878][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.564312][ T5237] Bluetooth: hci2: command tx timeout [ 374.595988][T14676] veth1_vlan: entered promiscuous mode [ 374.640458][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.707641][T14676] veth0_macvtap: entered promiscuous mode [ 374.756764][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.772773][T14676] veth1_macvtap: entered promiscuous mode [ 374.798396][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.843466][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.855730][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.865728][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.876419][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.888326][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.898954][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.909066][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.920192][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.932788][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.943580][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.956517][T14676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.975762][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.984738][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.997805][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.009509][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.020364][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.032090][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.042843][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.052824][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.063538][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.073731][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.084785][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.096478][T14676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.125004][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.132193][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.146364][T14676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.155583][T14676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.165277][T14676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.174457][T14676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.199356][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.206583][T14749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.351479][ T53] bridge_slave_1: left allmulticast mode [ 375.357609][ T53] bridge_slave_1: left promiscuous mode [ 375.363424][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.375439][ T53] bridge_slave_0: left allmulticast mode [ 375.381128][ T53] bridge_slave_0: left promiscuous mode [ 375.388478][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.802133][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.817510][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.866865][ T53] bond0 (unregistering): Released all slaves [ 375.944214][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.952581][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.067798][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.082837][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.200754][T14978] bridge0: port 3(geneve1) entered disabled state [ 376.207795][T14978] bridge0: port 1(€Â) entered disabled state [ 376.248065][T14978] bridge0: entered allmulticast mode [ 376.296798][T14978] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2390'. [ 376.438365][T14980] bridge0: port 3(geneve1) entered blocking state [ 376.445077][T14980] bridge0: port 3(geneve1) entered forwarding state [ 376.452049][T14980] bridge0: port 1(€Â) entered blocking state [ 376.458322][T14980] bridge0: port 1(€Â) entered forwarding state [ 376.503218][ T4618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.516865][T14980] bridge0: entered promiscuous mode [ 376.522406][ T4618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.531585][ T4618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.547777][ T4618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.560337][ T4618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 376.573315][ T4618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.614587][T14982] bridge0: port 3(geneve1) entered disabled state [ 376.621526][T14982] bridge0: port 1(€Â) entered disabled state [ 376.638999][T14982] bridge0: left promiscuous mode [ 376.657178][ T4618] Bluetooth: hci2: command tx timeout [ 376.663021][T14978] bridge0: port 3(geneve1) entered blocking state [ 376.669737][T14978] bridge0: port 3(geneve1) entered forwarding state [ 376.676635][T14978] bridge0: port 1(€Â) entered blocking state [ 376.682856][T14978] bridge0: port 1(€Â) entered forwarding state [ 376.692050][T14978] bridge0: entered promiscuous mode [ 376.746721][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.902112][T14996] dvmrp0: entered allmulticast mode [ 376.999625][ T53] hsr_slave_0: left promiscuous mode [ 377.010467][ T53] hsr_slave_1: left promiscuous mode [ 377.022710][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.031824][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.033131][T15004] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 377.052877][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.072278][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.127213][ T53] veth1_macvtap: left promiscuous mode [ 377.132828][ T53] veth0_macvtap: left promiscuous mode [ 377.153355][ T53] veth1_vlan: left promiscuous mode [ 377.159061][ T53] veth0_vlan: left promiscuous mode [ 377.842111][ T53] team0 (unregistering): Port device team_slave_1 removed [ 377.891176][ T53] team0 (unregistering): Port device team_slave_0 removed [ 378.358447][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.370929][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.384857][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.412586][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.422746][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 378.445733][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.580047][T14996] dvmrp0: left allmulticast mode [ 378.605240][T14988] lo speed is unknown, defaulting to 1000 [ 378.644426][ T4618] Bluetooth: hci3: command tx timeout [ 378.717670][T14862] veth0_vlan: entered promiscuous mode [ 378.725017][ T4618] Bluetooth: hci2: command tx timeout [ 378.816128][T15023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2400'. [ 378.845656][T14862] veth1_vlan: entered promiscuous mode [ 378.852209][T15017] lo speed is unknown, defaulting to 1000 [ 379.056815][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.183112][T14862] veth0_macvtap: entered promiscuous mode [ 379.260230][T14862] veth1_macvtap: entered promiscuous mode [ 379.273010][T14988] chnl_net:caif_netlink_parms(): no params data found [ 379.357882][T15017] chnl_net:caif_netlink_parms(): no params data found [ 379.389373][ C0] eth0: bad gso: type: 1, size: 1408 [ 379.412781][ C0] eth0: bad gso: type: 1, size: 1408 [ 379.423072][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.444768][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.455122][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.466073][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.476682][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.487246][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.497660][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.508709][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.518681][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.530170][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.542555][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.581485][T15051] vlan1: entered promiscuous mode [ 379.587791][T15051] batadv0: entered promiscuous mode [ 379.597450][T15051] batadv0: left promiscuous mode [ 379.752927][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.784683][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.801332][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.813351][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.823859][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.836385][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.847896][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.858722][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.869225][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.883202][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.895994][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.940318][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.963257][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.971704][T14988] bridge_slave_0: entered allmulticast mode [ 379.987819][T14988] bridge_slave_0: entered promiscuous mode [ 379.997244][T15060] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2408'. [ 380.030624][T14862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.054479][T14862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.063219][T14862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.092269][T14862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.124432][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.131640][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.144029][T14988] bridge_slave_1: entered allmulticast mode [ 380.152704][T14988] bridge_slave_1: entered promiscuous mode [ 380.312851][T15076] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 380.319205][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.322368][T15076] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.2412'. [ 380.344430][T15076] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 380.352263][T15076] netlink: 'syz.2.2412': attribute type 2 has an invalid length. [ 380.361290][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 380.390223][T15017] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.397735][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.407529][T15017] bridge_slave_0: entered allmulticast mode [ 380.416968][T15017] bridge_slave_0: entered promiscuous mode [ 380.438164][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.465101][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.489915][ T4618] Bluetooth: hci5: command tx timeout [ 380.505430][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.536121][T15017] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.556995][T15017] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.580046][T15017] bridge_slave_1: entered allmulticast mode [ 380.590922][T15017] bridge_slave_1: entered promiscuous mode [ 380.632322][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.734064][ T4618] Bluetooth: hci3: command tx timeout [ 380.755720][T14988] team0: Port device team_slave_0 added [ 380.810695][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.862708][T15017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.878404][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2415'. [ 380.898396][T14988] team0: Port device team_slave_1 added [ 380.945551][T15017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.074343][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.083738][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.112775][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.127200][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.137340][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.165711][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.263062][T15017] team0: Port device team_slave_0 added [ 381.292274][T15017] team0: Port device team_slave_1 added [ 381.547754][T14988] hsr_slave_0: entered promiscuous mode [ 381.575027][T14988] hsr_slave_1: entered promiscuous mode [ 381.592667][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.610025][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.635345][T15017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.648848][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.675662][T15017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.770804][T15017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.778019][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.805718][T15017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.867472][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.883857][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.896267][ T53] bridge_slave_1: left allmulticast mode [ 381.902056][ T53] bridge_slave_1: left promiscuous mode [ 381.908715][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.921605][ T53] bridge_slave_0: left allmulticast mode [ 381.928203][ T53] bridge_slave_0: left promiscuous mode [ 381.934710][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.389692][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.414260][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.439524][ T53] bond0 (unregistering): Released all slaves [ 382.569809][ T4618] Bluetooth: hci5: command tx timeout [ 382.580884][T15017] hsr_slave_0: entered promiscuous mode [ 382.613140][T15017] hsr_slave_1: entered promiscuous mode [ 382.639797][T15142] netlink: 'syz.3.2427': attribute type 11 has an invalid length. [ 382.648222][T15017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.659030][T15017] Cannot create hsr debugfs directory [ 382.702713][T15138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 382.716874][T15143] netlink: 'syz.3.2427': attribute type 11 has an invalid length. [ 382.742312][T15143] debugfs: Directory 'netdev:' with parent 'phy68' already present! [ 382.803977][ T4618] Bluetooth: hci3: command tx timeout [ 383.173312][ T53] hsr_slave_0: left promiscuous mode [ 383.193955][ T53] hsr_slave_1: left promiscuous mode [ 383.203010][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.211583][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.225117][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.232616][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.247042][T15162] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 383.260537][ T53] veth1_macvtap: left promiscuous mode [ 383.265736][T15162] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.2432'. [ 383.272634][ T53] veth0_macvtap: left promiscuous mode [ 383.281381][ T53] veth1_vlan: left promiscuous mode [ 383.294852][ T53] veth0_vlan: left promiscuous mode [ 383.920542][ T53] team0 (unregistering): Port device team_slave_1 removed [ 383.983359][ T53] team0 (unregistering): Port device team_slave_0 removed [ 384.652059][ T4618] Bluetooth: hci5: command tx timeout [ 384.762067][T15157] bridge0: port 2(team0) entered blocking state [ 384.769328][T15157] bridge0: port 2(team0) entered disabled state [ 384.776454][T15157] team0: entered allmulticast mode [ 384.781573][T15157] team_slave_0: entered allmulticast mode [ 384.794198][T15157] team_slave_1: entered allmulticast mode [ 384.812132][T15157] bridge0: port 2(team0) entered blocking state [ 384.818626][T15157] bridge0: port 2(team0) entered forwarding state [ 384.828800][T15159] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2432'. [ 384.887312][ T4618] Bluetooth: hci3: command tx timeout [ 385.254917][T15183] team0: left allmulticast mode [ 385.272299][T15183] team_slave_0: left allmulticast mode [ 385.284618][T15183] team_slave_1: left allmulticast mode [ 385.306058][T15183] bridge0: port 2(team0) entered disabled state [ 385.325832][T15186] tipc: Enabling of bearer rejected, media not registered [ 385.340583][T14988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.410469][T14988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.447752][T14988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.482278][T14988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.761532][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.841573][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.893014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.900215][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.911645][T15017] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.930762][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.937932][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.946546][T15017] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.969217][T15017] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.996034][T15017] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.082371][T15202] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2445'. [ 386.284291][T15017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.331615][T15017] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.358791][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.387763][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.395105][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.431880][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.439215][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.588143][T14988] veth0_vlan: entered promiscuous mode [ 386.671570][T14988] veth1_vlan: entered promiscuous mode [ 386.723937][ T4618] Bluetooth: hci5: command tx timeout [ 386.832369][T14988] veth0_macvtap: entered promiscuous mode [ 386.858373][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'. [ 386.887798][T14988] veth1_macvtap: entered promiscuous mode [ 386.923246][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.935882][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.954002][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.984087][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.006905][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.047089][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.058451][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.069847][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.080590][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.091616][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.115535][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.125068][T15239] tipc: Enabling of bearer rejected, media not registered [ 387.147897][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.169331][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.192688][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.212917][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.223916][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.234501][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.246709][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.257330][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.267549][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.278111][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.290419][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.326833][T14988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.351422][T14988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.373716][T14988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.383711][T14988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.442723][T15017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.529032][T15258] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 387.685174][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.698377][T15017] veth0_vlan: entered promiscuous mode [ 387.704896][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.808042][T15017] veth1_vlan: entered promiscuous mode [ 387.829489][ T7370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.855075][ T7370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.951543][T15017] veth0_macvtap: entered promiscuous mode [ 387.985368][T15017] veth1_macvtap: entered promiscuous mode [ 388.018968][T15273] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 388.064339][T15274] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 388.092479][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.133336][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.144687][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.155346][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.165950][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.177090][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.187374][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.197920][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.209449][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.219994][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.229966][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.242655][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.269732][T15017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.280495][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.300599][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.312301][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.332711][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.343279][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.361972][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.372044][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.382958][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.393010][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.403757][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.413889][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.424492][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.436014][T15017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.531518][T15283] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2463'. [ 388.550730][T15017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.561407][T15017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.572072][T15017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.584102][T15017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.598667][T15283] netlink: 'syz.2.2463': attribute type 4 has an invalid length. [ 388.820682][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 388.878654][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.888723][ T5237] Bluetooth: hci5: command 0x0405 tx timeout [ 388.913109][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.948465][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.958414][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.055433][T14749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.133983][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.175788][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 389.193977][T14749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.244983][ T5277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.384004][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.428340][ T5277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.437284][T15322] xt_NFQUEUE: number of total queues is 0 [ 389.504083][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.571671][T15327] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2474'. [ 389.573983][ T5277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.583854][T15327] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.2474'. [ 389.634852][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.687108][T15332] macvlan2: entered allmulticast mode [ 389.724600][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.736051][T15333] bond0: entered promiscuous mode [ 390.029461][T15343] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 390.037828][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 390.051926][T15343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2480'. [ 390.062890][T15343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2480'. [ 390.246140][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.964554][ T5237] Bluetooth: hci5: command 0x0405 tx timeout [ 391.549180][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.618390][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.701935][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.913909][ T11] bridge_slave_1: left allmulticast mode [ 391.919617][ T11] bridge_slave_1: left promiscuous mode [ 391.934057][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.975588][ T11] bridge_slave_0: left allmulticast mode [ 391.981290][ T11] bridge_slave_0: left promiscuous mode [ 392.004902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.013066][ T4618] Bluetooth: hci2: command tx timeout [ 392.339845][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.351857][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.368831][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.381707][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.394844][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.402691][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.732383][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.746649][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.758916][ T11] bond0 (unregistering): Released all slaves [ 392.796135][T15365] syzkaller1: entered promiscuous mode [ 392.801692][T15365] syzkaller1: entered allmulticast mode [ 392.885258][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 392.923339][T15375] lo speed is unknown, defaulting to 1000 [ 393.045916][T15384] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2489'. [ 393.057992][T15384] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.066596][T15384] IPv6: Can't replace route, no match found [ 393.099623][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 393.375939][ T11] hsr_slave_0: left promiscuous mode [ 393.388212][ T11] hsr_slave_1: left promiscuous mode [ 393.407630][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.430073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.438605][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.461590][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.514535][ T11] veth1_macvtap: left promiscuous mode [ 393.520155][ T11] veth0_macvtap: left promiscuous mode [ 393.526231][ T11] veth1_vlan: left promiscuous mode [ 393.531650][ T11] veth0_vlan: left promiscuous mode [ 394.200828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 394.257173][ T11] team0 (unregistering): Port device team_slave_0 removed [ 394.311386][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 394.343744][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2495'. [ 394.485235][ T4618] Bluetooth: hci3: command tx timeout [ 394.505807][T15412] x_tables: duplicate underflow at hook 3 [ 394.590404][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.602422][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.612031][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.642173][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.650960][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 394.666995][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.265596][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 395.439938][T15413] lo speed is unknown, defaulting to 1000 [ 395.817259][T15438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.853913][T15375] chnl_net:caif_netlink_parms(): no params data found [ 395.912032][T15442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.988831][T15413] chnl_net:caif_netlink_parms(): no params data found [ 396.080588][T15448] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2504'. [ 396.227982][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.461290][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.492713][T15375] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.514076][T15375] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.521379][T15375] bridge_slave_0: entered allmulticast mode [ 396.539557][T15375] bridge_slave_0: entered promiscuous mode [ 396.550736][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2508'. [ 396.564117][ T4618] Bluetooth: hci3: command tx timeout [ 396.607025][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.635999][T15473] team_slave_1: left promiscuous mode [ 396.676549][T15473] team0: Port device team_slave_1 removed [ 396.717582][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.728683][ T4618] Bluetooth: hci5: command tx timeout [ 396.740922][T15472] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 396.754535][T15472] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 396.759246][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 396.783792][T15375] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.791112][T15375] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.798599][T15375] bridge_slave_1: entered allmulticast mode [ 396.811399][T15482] xt_hashlimit: overflow, rate too high: 0 [ 396.819034][T15375] bridge_slave_1: entered promiscuous mode [ 396.922996][T15375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.949171][T15413] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.957313][T15413] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.965349][T15413] bridge_slave_0: entered allmulticast mode [ 396.972852][T15413] bridge_slave_0: entered promiscuous mode [ 396.998581][T15375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.009724][T15413] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.017284][T15413] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.024899][T15413] bridge_slave_1: entered allmulticast mode [ 397.031716][T15413] bridge_slave_1: entered promiscuous mode [ 397.122930][T15375] team0: Port device team_slave_0 added [ 397.144540][T15413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.166607][T15375] team0: Port device team_slave_1 added [ 397.225649][T15413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.236174][T15490] netlink: 'syz.3.2512': attribute type 1 has an invalid length. [ 397.244852][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2512'. [ 397.325355][T15375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.340746][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.369294][T15375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.406439][T15375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.414017][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.440483][T15375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.456722][ T11] bridge_slave_1: left allmulticast mode [ 397.468299][ T11] bridge_slave_1: left promiscuous mode [ 397.474400][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.483422][ T11] bridge_slave_0: left allmulticast mode [ 397.489804][ T11] bridge_slave_0: left promiscuous mode [ 397.496119][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.033841][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2515'. [ 398.284155][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.316191][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.338163][ T11] bond0 (unregistering): Released all slaves [ 398.371084][T15413] team0: Port device team_slave_0 added [ 398.480830][T15413] team0: Port device team_slave_1 added [ 398.608945][T15511] nbd: must specify a device to reconfigure [ 398.644539][ T4618] Bluetooth: hci3: command tx timeout [ 398.752635][T15413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.764400][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.804067][T15413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.804336][ T4618] Bluetooth: hci5: command tx timeout [ 398.841802][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2520'. [ 398.907861][T15525] team1: Mode changed to "loadbalance" [ 398.917409][T15413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.925051][T15413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.952442][T15413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.011882][T15375] hsr_slave_0: entered promiscuous mode [ 399.019221][T15375] hsr_slave_1: entered promiscuous mode [ 399.062634][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 399.243324][ T11] hsr_slave_0: left promiscuous mode [ 399.250011][ T11] hsr_slave_1: left promiscuous mode [ 399.257419][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.275336][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.298263][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.314165][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.381133][ T11] veth1_macvtap: left promiscuous mode [ 399.392422][ T11] veth0_macvtap: left promiscuous mode [ 399.400381][ T11] veth1_vlan: left promiscuous mode [ 399.405979][ T11] veth0_vlan: left promiscuous mode [ 400.092651][ T11] team0 (unregistering): Port device team_slave_1 removed [ 400.143371][ T11] team0 (unregistering): Port device team_slave_0 removed [ 400.621286][T15413] hsr_slave_0: entered promiscuous mode [ 400.631306][T15413] hsr_slave_1: entered promiscuous mode [ 400.638807][T15413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.657142][T15413] Cannot create hsr debugfs directory [ 400.725372][ T4618] Bluetooth: hci3: command tx timeout [ 400.807346][T15546] netlink: 'syz.2.2526': attribute type 13 has an invalid length. [ 400.883939][ T4618] Bluetooth: hci5: command tx timeout [ 401.365224][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 401.471097][T15570] team1: Mode changed to "loadbalance" [ 401.928658][T15586] FAULT_INJECTION: forcing a failure. [ 401.928658][T15586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.964238][T15586] CPU: 0 UID: 0 PID: 15586 Comm: syz.4.2539 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 401.974800][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 401.984886][T15586] Call Trace: [ 401.988207][T15586] [ 401.991146][T15586] dump_stack_lvl+0x241/0x360 [ 401.995851][T15586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.001066][T15586] ? __pfx__printk+0x10/0x10 [ 402.005685][T15586] ? __pfx_lock_release+0x10/0x10 [ 402.010761][T15586] should_fail_ex+0x3b0/0x4e0 [ 402.015470][T15586] _copy_from_user+0x2f/0xe0 [ 402.020082][T15586] copy_msghdr_from_user+0xae/0x680 [ 402.025315][T15586] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.031160][T15586] __sys_sendmsg+0x23d/0x3a0 [ 402.035778][T15586] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.040916][T15586] ? vfs_write+0x7c4/0xc90 [ 402.045401][T15586] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.051747][T15586] ? do_syscall_64+0x100/0x230 [ 402.056527][T15586] ? do_syscall_64+0xb6/0x230 [ 402.061208][T15586] do_syscall_64+0xf3/0x230 [ 402.065723][T15586] ? clear_bhb_loop+0x35/0x90 [ 402.070401][T15586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.076293][T15586] RIP: 0033:0x7f4c06777299 [ 402.080706][T15586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.100485][T15586] RSP: 002b:00007f4c0745f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.109074][T15586] RAX: ffffffffffffffda RBX: 00007f4c06905f80 RCX: 00007f4c06777299 [ 402.117038][T15586] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 402.125000][T15586] RBP: 00007f4c0745f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 402.132958][T15586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.140918][T15586] R13: 000000000000000b R14: 00007f4c06905f80 R15: 00007ffd31f456c8 [ 402.148895][T15586] [ 402.349723][T15594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2542'. [ 402.458852][T15375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.495288][T15375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.545251][T15375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.577377][T15601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2544'. [ 402.626779][T15375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.634636][T15601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'. [ 402.674050][T15601] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 402.730862][T15601] netlink: 'syz.2.2544': attribute type 3 has an invalid length. [ 402.804585][T15601] netlink: 'syz.2.2544': attribute type 3 has an invalid length. [ 402.846741][T15413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.893337][T15413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.943069][T15413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.965936][ T4618] Bluetooth: hci5: command tx timeout [ 402.994815][T15413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.075313][T15375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.209513][T15375] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.291789][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.299001][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.361176][T15413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.391448][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.398602][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.446406][T15413] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.465895][T15629] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 403.480120][T15629] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 403.517086][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.524318][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.558147][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.565489][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.638857][T15636] Bluetooth: MGMT ver 1.23 [ 403.643528][T15636] Bluetooth: hci3: unsupported parameter 64512 [ 403.650232][T15636] Bluetooth: hci3: invalid length 0, exp 2 for type 8 [ 403.720163][T15375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.773248][T15639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2557'. [ 404.284807][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.327600][T15413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.549427][T15413] veth0_vlan: entered promiscuous mode [ 404.582051][T15375] veth0_vlan: entered promiscuous mode [ 404.614498][T15681] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 404.636276][T15681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2567'. [ 404.660590][T15413] veth1_vlan: entered promiscuous mode [ 404.687163][T15375] veth1_vlan: entered promiscuous mode [ 404.817597][T15413] veth0_macvtap: entered promiscuous mode [ 404.848470][T15413] veth1_macvtap: entered promiscuous mode [ 404.917875][T15375] veth0_macvtap: entered promiscuous mode [ 404.939026][T15375] veth1_macvtap: entered promiscuous mode [ 404.959509][T15696] lo speed is unknown, defaulting to 1000 [ 404.960279][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.990060][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.016623][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.027988][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.053745][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.073725][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.093707][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.117973][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.129386][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.153651][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.176328][T15413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.216739][T15701] netlink: 'syz.4.2572': attribute type 24 has an invalid length. [ 405.242215][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 405.272773][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.284083][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.295816][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.309259][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.319798][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.331692][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.342543][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.354102][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.364195][T15413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.374750][T15413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.386481][T15413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.431565][T15704] IPv6: sit1: Disabled Multicast RS [ 405.452721][T15413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.472344][T15413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.481437][T15413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.491049][T15413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.554509][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.576510][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.586877][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.601546][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2573'. [ 405.609208][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.630936][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.642867][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.662493][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.673295][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.683506][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.696135][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.706046][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.717093][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.731437][T15375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.805824][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.843608][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.886086][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.917853][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.944731][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.960717][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.980529][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.991976][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.004913][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.033769][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.053716][T15375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.077940][T15375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.090264][T15375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.131178][T15375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.158324][T15375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.172452][T15375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.181614][T15375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.516020][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.535992][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.634386][T15739] team0: entered promiscuous mode [ 406.644986][T15739] team_slave_0: entered promiscuous mode [ 406.651032][T15739] team_slave_1: entered promiscuous mode [ 406.682180][T15743] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN PTI [ 406.688564][T15739] syz_tun: entered promiscuous mode [ 406.694792][T15743] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 406.694817][T15743] CPU: 1 UID: 0 PID: 15743 Comm: syz.4.2585 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 [ 406.694836][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 406.694846][T15743] RIP: 0010:reuseport_add_sock+0x27e/0x5e0 [ 406.731920][ T7370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.734909][T15743] Code: 00 0f b7 5d 00 bf 01 00 00 00 89 de e8 1b a4 ff f7 83 fb 01 0f 85 a3 01 00 00 e8 6d a0 ff f7 49 8d 7e 12 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4b 02 00 00 41 0f b7 5e 12 49 8d 7e 14 [ 406.734927][T15743] RSP: 0018:ffffc9000455fc98 EFLAGS: 00010202 [ 406.734944][T15743] RAX: 0000000000000002 RBX: ffff88804290ae18 RCX: ffff888069819e00 [ 406.734957][T15743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000012 [ 406.734967][T15743] RBP: 0000000000000001 R08: ffffffff8993e18d R09: 1ffffffff1fef385 [ 406.734978][T15743] R10: dffffc0000000000 R11: fffffbfff1fef386 R12: ffff88804290a940 [ 406.734990][T15743] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.735001][T15743] FS: 00007f4c0745f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 406.735017][T15743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.735030][T15743] CR2: 00007f4c061ded58 CR3: 000000006022c000 CR4: 00000000003506f0 [ 406.735046][T15743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.735057][T15743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.735069][T15743] Call Trace: [ 406.735076][T15743] [ 406.735085][T15743] ? __die_body+0x88/0xe0 [ 406.735113][T15743] ? die_addr+0x108/0x140 [ 406.735137][T15743] ? exc_general_protection+0x3dd/0x5d0 [ 406.735171][T15743] ? asm_exc_general_protection+0x26/0x30 [ 406.735196][T15743] ? reuseport_add_sock+0x10d/0x5e0 [ 406.735226][T15743] ? reuseport_add_sock+0x27e/0x5e0 [ 406.735250][T15743] ? reuseport_add_sock+0x1da/0x5e0 [ 406.735277][T15743] sctp_hash_endpoint+0x52a/0x600 [ 406.735298][T15743] ? sctp_hash_endpoint+0x2b/0x600 [ 406.735320][T15743] sctp_inet_listen+0x767/0xa20 [ 406.735345][T15743] ? __pfx_sctp_inet_listen+0x10/0x10 [ 406.735372][T15743] ? __pfx_aa_sk_perm+0x10/0x10 [ 406.735396][T15743] ? __fget_files+0x3f6/0x470 [ 406.735417][T15743] ? __fget_files+0x29/0x470 [ 406.735443][T15743] ? bpf_lsm_socket_listen+0x9/0x10 [ 406.735466][T15743] __sys_listen+0x1b7/0x230 [ 406.735488][T15743] __x64_sys_listen+0x5a/0x70 [ 406.735509][T15743] do_syscall_64+0xf3/0x230 [ 406.735528][T15743] ? clear_bhb_loop+0x35/0x90 [ 406.735550][T15743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.735571][T15743] RIP: 0033:0x7f4c06777299 [ 406.735587][T15743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.735603][T15743] RSP: 002b:00007f4c0745f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 406.735621][T15743] RAX: ffffffffffffffda RBX: 00007f4c06905f80 RCX: 00007f4c06777299 [ 406.735635][T15743] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 406.735645][T15743] RBP: 00007f4c067e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 406.735656][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.735666][T15743] R13: 000000000000000b R14: 00007f4c06905f80 R15: 00007ffd31f456c8 [ 406.735686][T15743] [ 406.735693][T15743] Modules linked in: [ 406.735753][T15743] ---[ end trace 0000000000000000 ]--- [ 406.747788][ T7370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.763198][T15743] RIP: 0010:reuseport_add_sock+0x27e/0x5e0 [ 406.763234][T15743] Code: 00 0f b7 5d 00 bf 01 00 00 00 89 de e8 1b a4 ff f7 83 fb 01 0f 85 a3 01 00 00 e8 6d a0 ff f7 49 8d 7e 12 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4b 02 00 00 41 0f b7 5e 12 49 8d 7e 14 [ 406.763250][T15743] RSP: 0018:ffffc9000455fc98 EFLAGS: 00010202 [ 406.763267][T15743] RAX: 0000000000000002 RBX: ffff88804290ae18 RCX: ffff888069819e00 [ 406.763281][T15743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000012 [ 406.763293][T15743] RBP: 0000000000000001 R08: ffffffff8993e18d R09: 1ffffffff1fef385 [ 406.763306][T15743] R10: dffffc0000000000 R11: fffffbfff1fef386 R12: ffff88804290a940 [ 406.763320][T15743] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.790781][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.793376][T15743] FS: 00007f4c0745f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 406.793397][T15743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.793410][T15743] CR2: 00007f4c061ded58 CR3: 000000006022c000 CR4: 00000000003506f0 [ 406.807417][T15375] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht' [ 406.809487][T15743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.825764][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.833054][T15743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.833074][T15743] Kernel panic - not syncing: Fatal exception in interrupt [ 406.833377][T15743] Kernel Offset: disabled