last executing test programs: 1m41.377455621s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="3ed5ae06ce9c47f5e271b735c0cc61ac276712dc8ed403655cebbf254eeeca39efb1825a3f0817cce653e6ee7b14bf5ecc621c1eea2ec0f3e6105e49aaf3bd5a88dc66feeb15ef0ece3eb1f5e132d710d46682d65f301ef6f670dfe8de09a48e0077f365336c746bd03c2bf76cb4adf5158cf5590175684e3640408d1369dcd8962e62b1fe6f5c457afb6175684e270dca743c11d81a1cc92135760ac92a6389420cf7003a4dc2fa54c89e4a8d90a3a8369711f18ac37093395827db0986d19cee2cc68e242a010fdab5ded72f6632000a5abbb062e820743693a93925a6206e34f03c6fccdf301d5ceac121c2aed3aeb5588dd2232e488228d1", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 1m40.705519422s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m32.855538327s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 1m20.639460038s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m20.558225183s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="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", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 1m17.248182967s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 1m2.451069117s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="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", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 1m1.152906728s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 56.295736444s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 43.550709617s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 42.674719558s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="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", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 42.022611766s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 28.422689001s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 26.76825945s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25.120137758s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="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", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 21.023430079s ago: executing program 0 (id=1003): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x4}, 0xa) (async) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x4}, 0xa) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0xc7, 0x2}, &(0x7f0000000180)=0x8) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=0xfe98b86, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) getsockname$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) (async) getsockname$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000006c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r5, r4, 0x0, 0x4, &(0x7f0000000700)='.[%\x00'}, 0x30) connect$inet(r4, &(0x7f0000000780)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000780)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r4, &(0x7f00000007c0)="4e9b91b444ac1afdbe6d66ced548ecc4eeec20d68b565f312980a0dbf30b632711c85f3e43c08a9214c4dc3e4b9dde07aaf339f8ed4f17966bd5f73b9f478230904fe0005c7127b72543b054d42beeadb0db44355ff3751f91cd605165061974f409ecf6372c72db8516c171d9ec605065a5da6f1bb0d79f93f87f4beae8c980736e909102", &(0x7f0000000880)=@tcp6=r1}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) getsockopt$rose(r4, 0x104, 0x7, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x6}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x6}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="e54f0efc1758"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000d80)={r2, 0x2}, 0x8) r10 = openat$cgroup_int(r4, &(0x7f0000000dc0)='cpu.idle\x00', 0x2, 0x0) accept$phonet_pipe(r4, &(0x7f0000000e00), &(0x7f0000000e40)=0x10) (async) r11 = accept$phonet_pipe(r4, &(0x7f0000000e00), &(0x7f0000000e40)=0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000e80)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x5000943a, &(0x7f0000001100)={{r11}, r12, 0x4, @inherit={0x68, &(0x7f0000001080)={0x1, 0x4, 0x4da, 0x3, {0x10, 0x9, 0x2, 0x2, 0x10000}, [0x6, 0x6a787f60, 0x1000, 0x202]}}, @devid=r3}) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000002100), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000002100), 0x4) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000002140)=0x800, 0x4) 20.79637919s ago: executing program 0 (id=1006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000002e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500ecff00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x480, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff}}]}]}}}}}}}, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r3, @ANYBLOB="3c002f802c0003802000038008000200030000ef05000100faff00000c0004000201aaaaaaaaaaaa08000100000000000c000200"], 0x58}}, 0x0) 20.532300616s ago: executing program 0 (id=1009): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1020000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf6700000000000046030000f119ff0f6702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0xc7ad, @mcast2, 0x9}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x4}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}], 0x98) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000008700)=0x72, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write(r4, &(0x7f00000006c0)="fa0cbef571813b1e494150ed3b76721e19787bdfcfa7", 0x16) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x2, 0xc0, 0xffff0001, 0x2, 0x24, 0x6, 0x5}, 0x9c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg$inet(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000180)="5ec0d2142df6ba0a3564c3246e50b6d27ac322a6170dd6bc8faee6aad55a6c5609bde838f775d11198dbf84aeed374", 0x2f}, {&(0x7f00000001c0)="db8ba70ce40d0fc8a1718b1afd4a7cd08f9f50f0a8d8bd72bcfebced1ae56412d65499f4b8dae8cc4ec8100dc10b2e5734f2873e302b4fc832bad9c37cfe10d01859ba5da596038ab3834f97754f53b61d0281e66c6bf74768978d84d8b507000000a0d5d424b77b56a661ae5815bdbaa068fb4f8fcaf1e3650590d8da3186fd4ade8779c6faf2c1b423819f99358dc7cca681", 0x93}, {&(0x7f00000008c0)="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", 0x182}, {&(0x7f0000000700)="66a870ed0e132d4df2f15621dd74d9799a673f06a053956f80672044b0f6c1b40f6616a84d02a96bcbab5957797df24111ee93fd28e254a812489baf3ab489b870cba0557870e92e942d8db20b06f702c7153f7a032789faec88ae24e1a8ebb2615d237b65a58325ad690fbe31c38397a60622afd46dc7e8088c1664312bf1175bdab4e4a46e1e5086f2dcc475d2523b24f090ff93ce23b320fb389ad325e919a18e2ac616405f", 0xa7}, {&(0x7f00000007c0)="b90860651cd865c4956ebab8f7cb86e1c30f370ba437270c540698472b93826cf543c820f9c57fa33fb25a038bf6a47bb15a9d2afc535e1afb62da2f60986bb1ba8c6f7f0756f20eceefc0561daecd9161cb6558917c392d014bdbc4bf9badb498c0868208f499ede6a1195ddb5f08ccb5d320ee45f1d354c4e49da4dd48f3d0ff969404acdeb7914c8313444911025930320d799784f5b2c46721e05daa4f73f6f3c5f86f2a206b1a301f6a544e33240567e3910441e04f8e0575f6e93d1d6e2848596f70", 0xc5}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x0) 20.18909395s ago: executing program 0 (id=1011): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f00000003c0)={@multicast, @remote, @void, {@generic={0x805}}}, 0x0) 19.896441841s ago: executing program 0 (id=1014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 10.504899269s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000004aca1376180000000017000000500006804c00040067636d2861657329000000000000000000004000000000000024000000d63e1646fbc889ce60c4bf6584a7972a02a50222bd0e23db8cc003000000b4967c2bee2b94dceb6300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) 8.376510325s ago: executing program 3 (id=403): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x336, 0x7, 0x5, 0xff, 0x3}, 0x10) socket(0x23, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.580571804s ago: executing program 4 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x683b1c49bc5ed0e5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8d5) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x928}}, 0x24) setsockopt(r2, 0x9470, 0xffffffff, &(0x7f00000001c0)="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", 0xfa) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1e780b6fc2d161b0d8ff7a9e04ac98512b3068a9ae9253edfb218670c9d2a41bbce4dd4a62077697f50c9a9d599401b251379f669af78484660f6062a3aa57395580df1df413150a38a5b2a8fda42ec5dcc89c2199317e6ab9dac871424576d24b4f7c9caf94d7971df109a1123ee50abc0c598f639dd7f346c6b776a57585fd008307e97411ba19d375cc4869e4ae0f9480629266a6a0ceb6ba655f98078631f7177478d0e8af322e149a6accd1d4e71e89949a772ce3156df4e8a220b285dc892efff2b7836961e6af52e64ed8e35f2b7201ab362a3ac0e6f2fd113732acf008c2764bf6bf84784ffac4878b464236ee15572b", 0xf4}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xd4, [@multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x7, 0x3, "8a"}, @ssrr={0x89, 0xb, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0xfa, 0x0, 0x4, [0x8000, 0x3, 0x6, 0x0, 0x1, 0xaf9, 0x2, 0x10001, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x150}, 0x20000010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x94, "a27dcad69ab37cccdef3385ef92d00b8a70d03db9a68ba1061ec4e4bfbda7b8e16f060b1b23c3d0cf7e99d46e17218298ba42606f6c27aa428ad93cefd643ec73c636b454271001eacf011936ae4fb20e940403a7db31f81c2368cd5d3c0d95fcd146638dfe5775dfab8c556e3e1467ed74e3d515c7a4090da2078bef4dfbeb3b77c78724b06973cedea86ec145335bb18459c7d"}, &(0x7f0000000700)=0xb8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000740)={0x0, 0x30, "10684de4cfd8d41bcf6dfd31575b3333fe4ad0a74cb76e1d9502711a75ee7b0e1b62de42dfbea5e9bebd750415fbb5c8"}, &(0x7f0000000780)=0x38) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000007c0)={r5, 0x401}, &(0x7f0000000800)=0x8) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) pselect6(0x40, &(0x7f00000008c0)={0x2d08, 0x2, 0xffffffffffff1b0c, 0x0, 0x800, 0x5aa5, 0x2a, 0x4}, &(0x7f0000000900)={0x1, 0x637d, 0x9, 0x6, 0xffffffff, 0x0, 0x1, 0x101}, &(0x7f0000000940)={0x7, 0x521a, 0x5, 0x6ff8, 0xc9, 0x4, 0x0, 0x5}, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x3}, &(0x7f0000000a80)=0x8) recvfrom$inet(r3, &(0x7f0000000ac0)=""/219, 0xdb, 0x40000000, &(0x7f0000000bc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socketpair(0x1e, 0x0, 0x5, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) bind$rxrpc(r3, &(0x7f0000000d80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x24) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x148, r9, 0x901, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001100)={0x114, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "c3fd93c53fda28f1494ec9f9d0f2e6a7f7013d90c176c86a1c999165e22da594ca89ff7f6d7e406d2c58b689ecda196525bb899a6d923f0d127d0eec7b5f69483988a7af85ab70c86388c4a5926d8c6ae9c4"}, @NL80211_ATTR_TESTDATA={0x13, 0x45, "2ea618c1dad72c9d4a8f322c838f86"}, @NL80211_ATTR_TESTDATA={0x7e, 0x45, "bdfbf6211fe5588572f6c044d4c5769aec7e61c4627411ecf880faca10180f2d038811ae0fb7314ec918d555a794051830b9e94b40ab68a642ad5a44a01bc71c15dbf02d1d3600aa4d4dc88bcc7e0b473ce5dc7e50000451e92cbc84f7daadf4deaafcb587290135507b66ce9f564e0df3cf7fdf3a544e809291"}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20002080) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f00000012c0)="36adbeab43957e72ff5f937f4751fdc0d75571288c33e71e54e02d26df6cac156277bf8d46bc72457efa9f9bf7ee749f880e989d18e9df6c6ee5f83fc0c1a31da8f934c460fd26f016947bc5bba6999c18a42cc31df486a95eff4dbd37f6d73a3e2faf82c42a8ba911901ba5ec10c88a2a97f3c578a959cd86ce47410b443d4f2406fa5480e8bd989d890c8f3070ea7360dfc4944cb5d0ef8b63b407cd259d005a148540a6c5bf") connect$rxrpc(r6, &(0x7f0000001380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @loopback, 0x400}}, 0x24) 4.141182643s ago: executing program 0 (id=1014): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 2.036342675s ago: executing program 2 (id=1075): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) 913.589033ms ago: executing program 2 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000f2ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) 608.566574ms ago: executing program 2 (id=1077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 484.178616ms ago: executing program 2 (id=1078): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 389.275181ms ago: executing program 2 (id=1079): socket$inet6(0xa, 0x3, 0xff) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}}, 0x0) 0s ago: executing program 2 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe5ec, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x1f, 0x200000, 0x7, 0x0, 0x101, 0x14, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): ing backup interface [ 223.740992][ T6187] bond0 (unregistering): Released all slaves [ 223.863889][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.881133][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.889870][ T5842] Bluetooth: hci4: command tx timeout [ 223.898722][ T6187] bond0 (unregistering): Released all slaves [ 223.917321][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.925747][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.952530][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.973152][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.995552][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.026518][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.246095][T10049] netlink: 144 bytes leftover after parsing attributes in process `syz.0.811'. [ 224.305850][T10049] netlink: 'syz.0.811': attribute type 11 has an invalid length. [ 224.491071][ T9890] hsr_slave_0: entered promiscuous mode [ 224.497521][ T9890] hsr_slave_1: entered promiscuous mode [ 224.516123][ T9890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.532912][ T9890] Cannot create hsr debugfs directory [ 224.677158][T10062] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 224.691287][ T5842] Bluetooth: hci0: command tx timeout [ 224.719420][T10062] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 224.728115][T10062] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 225.092411][ T9842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.121358][ T9842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.190055][ T9842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.230493][ T9842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.256281][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 225.394770][T10061] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 225.423469][T10061] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 225.454463][T10061] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 225.647317][T10087] netlink: 'syz.0.818': attribute type 2 has an invalid length. [ 225.705841][T10092] Bluetooth: MGMT ver 1.23 [ 225.737062][ T6187] hsr_slave_0: left promiscuous mode [ 225.745539][ T6187] hsr_slave_1: left promiscuous mode [ 225.753276][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.761589][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.772974][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.780627][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.793133][ T6187] hsr_slave_0: left promiscuous mode [ 225.799210][ T6187] hsr_slave_1: left promiscuous mode [ 225.806157][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.823737][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.834653][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.842824][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.882936][ T6187] veth1_macvtap: left promiscuous mode [ 225.888526][ T6187] veth0_macvtap: left promiscuous mode [ 225.896873][ T6187] veth1_vlan: left promiscuous mode [ 225.903030][ T6187] veth0_vlan: left promiscuous mode [ 225.910708][ T6187] veth1_macvtap: left promiscuous mode [ 225.916291][ T6187] veth0_macvtap: left promiscuous mode [ 225.924550][ T6187] veth1_vlan: left promiscuous mode [ 225.930199][ T6187] veth0_vlan: left promiscuous mode [ 226.487934][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 226.538818][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 226.770111][ T5842] Bluetooth: hci0: command tx timeout [ 227.375795][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 227.424622][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 228.090232][T10097] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 228.434084][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.472160][T10105] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.485004][T10108] Cannot find set identified by id 0 to match [ 228.502248][T10105] Cannot find set identified by id 0 to match [ 228.547521][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.573783][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.580985][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.602287][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.609939][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.716510][T10116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.786416][T10114] xt_TCPMSS: Only works on TCP SYN packets [ 229.155583][ T9890] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.181079][ T9890] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.219529][ T9890] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.247026][ T9890] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.346976][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 229.383811][ T9830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.416707][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.447938][ T9830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.502419][ T9830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.565573][ T9830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.848936][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.932191][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.975077][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.023665][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.030905][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.061365][ T9830] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.088313][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.095508][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.115735][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.122949][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.139005][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.146206][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.307484][ T9890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.331710][T10166] FAULT_INJECTION: forcing a failure. [ 230.331710][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 230.333158][ T9830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.360208][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.2.835 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 230.370954][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 230.381072][T10166] Call Trace: [ 230.384382][T10166] [ 230.387332][T10166] dump_stack_lvl+0x241/0x360 [ 230.392031][T10166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.397242][T10166] ? __pfx__printk+0x10/0x10 [ 230.401875][T10166] should_fail_ex+0x3b0/0x4e0 [ 230.406606][T10166] should_failslab+0xac/0x100 [ 230.411344][T10166] ? skb_clone+0x20c/0x390 [ 230.415820][T10166] kmem_cache_alloc_noprof+0x70/0x380 [ 230.421260][T10166] skb_clone+0x20c/0x390 [ 230.425564][T10166] __netlink_deliver_tap+0x3cc/0x7f0 [ 230.430907][T10166] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.436129][T10166] netlink_deliver_tap+0x19d/0x1b0 [ 230.441265][T10166] netlink_unicast+0x7c4/0x990 [ 230.446153][T10166] ? __pfx_netlink_unicast+0x10/0x10 [ 230.451489][T10166] ? __virt_addr_valid+0x183/0x530 [ 230.456627][T10166] ? __check_object_size+0x48e/0x900 [ 230.461952][T10166] netlink_sendmsg+0x8e4/0xcb0 [ 230.466749][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.472083][T10166] ? aa_sock_msg_perm+0x91/0x160 [ 230.477042][T10166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.482347][T10166] __sock_sendmsg+0x221/0x270 [ 230.487050][T10166] ____sys_sendmsg+0x52a/0x7e0 [ 230.491873][T10166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.497208][T10166] ? __fget_files+0x2a/0x410 [ 230.501815][T10166] ? __fget_files+0x2a/0x410 [ 230.506426][T10166] __sys_sendmsg+0x269/0x350 [ 230.511034][T10166] ? __pfx_lock_release+0x10/0x10 [ 230.516080][T10166] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.521222][T10166] ? __pfx_vfs_write+0x10/0x10 [ 230.526037][T10166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.532393][T10166] ? do_syscall_64+0x100/0x230 [ 230.537267][T10166] ? do_syscall_64+0xb6/0x230 [ 230.541968][T10166] do_syscall_64+0xf3/0x230 [ 230.546599][T10166] ? clear_bhb_loop+0x35/0x90 [ 230.551300][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.557209][T10166] RIP: 0033:0x7f77ebd85d19 [ 230.561644][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.581273][T10166] RSP: 002b:00007f77ecc02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.589741][T10166] RAX: ffffffffffffffda RBX: 00007f77ebf75fa0 RCX: 00007f77ebd85d19 [ 230.597732][T10166] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 230.605823][T10166] RBP: 00007f77ecc02090 R08: 0000000000000000 R09: 0000000000000000 [ 230.613815][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.621827][T10166] R13: 0000000000000000 R14: 00007f77ebf75fa0 R15: 00007ffc3bc8fd88 [ 230.629829][T10166] [ 230.706936][ T9842] veth0_vlan: entered promiscuous mode [ 230.718990][ T9842] veth1_vlan: entered promiscuous mode [ 230.745125][ T9842] veth0_macvtap: entered promiscuous mode [ 230.754944][ T9842] veth1_macvtap: entered promiscuous mode [ 230.773059][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.784049][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.795234][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.805708][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.816911][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.828684][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.839916][ T9842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.848679][ T9842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.858136][ T9842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.867396][ T9842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.978505][T10176] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 231.183540][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.214631][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.290902][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.839'. [ 231.370867][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.379161][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.397099][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.434280][ T9890] veth0_vlan: entered promiscuous mode [ 231.445415][ T9890] veth1_vlan: entered promiscuous mode [ 231.463549][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.517385][ T9890] veth0_macvtap: entered promiscuous mode [ 231.531353][ T9890] veth1_macvtap: entered promiscuous mode [ 231.532947][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 231.548077][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.558748][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.570550][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.614245][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.640953][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.663424][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.677313][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.697721][ T9890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.708459][ T9890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.742411][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.821781][ T9890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.837180][ T9890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.857815][ T9890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.880097][ T9890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.954056][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.028794][T10205] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 232.076053][T10205] 0ªÃøÂFNð¡: entered allmulticast mode [ 232.100469][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.201745][ T6210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.263865][T10205] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 232.273624][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.280152][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.310137][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.328506][T10205] 0ªÃøÂFNð¡: renamed from 01ªÃøÂFNð¡ (while UP) [ 232.360635][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.388129][ T9830] veth0_vlan: entered promiscuous mode [ 232.451530][ T6210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.486608][T10205] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 232.516576][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.536790][T10205] 0ªÃøÂFNð¡: renamed from 01ªÃøÂFNð¡ (while UP) [ 232.554586][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.573165][T10205] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 232.588753][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.607132][T10205] 0ªÃøÂFNð¡: renamed from 01ªÃøÂFNð¡ (while UP) [ 232.617445][T10205] netlink: 5 bytes leftover after parsing attributes in process `syz.0.842'. [ 232.656467][ T6210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.686396][T10205] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 232.703217][T10205] 0ªÃøÂFNð¡: renamed from 01ªÃøÂFNð¡ (while UP) [ 232.735926][ T9830] veth1_vlan: entered promiscuous mode [ 232.746155][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.763645][T10205] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 232.777716][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.838340][ T6210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.993057][ T9830] veth0_macvtap: entered promiscuous mode [ 233.084280][ T9830] veth1_macvtap: entered promiscuous mode [ 233.156947][ T6210] bridge_slave_1: left allmulticast mode [ 233.169184][ T6210] bridge_slave_1: left promiscuous mode [ 233.179175][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.194291][ T6210] bridge_slave_0: left allmulticast mode [ 233.204888][ T6210] bridge_slave_0: left promiscuous mode [ 233.215632][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.912869][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.927180][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.938711][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.958053][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.986248][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 233.996851][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.330386][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.382978][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.422414][ T6210] bond0 (unregistering): Released all slaves [ 234.592321][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.647851][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.680831][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.690897][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.692406][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.717010][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.739540][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.751477][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.775120][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.784666][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.792983][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.901440][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.912438][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.930225][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.942343][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.953354][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.965425][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.976533][ T9830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.988132][ T9830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.000438][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.060355][T10254] lo speed is unknown, defaulting to 1000 [ 235.093779][ T9830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.110698][ T9830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.135351][ T9830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.186742][ T9830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.226261][T10293] netlink: set zone limit has 8 unknown bytes [ 235.288477][T10293] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 235.498100][T10273] lo speed is unknown, defaulting to 1000 [ 235.599410][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.607384][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.750635][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.779619][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.049643][ T5842] Bluetooth: hci0: command tx timeout [ 236.096531][ T6210] hsr_slave_0: left promiscuous mode [ 236.106489][T10320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 236.154589][ T6210] hsr_slave_1: left promiscuous mode [ 236.202574][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.227169][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.240698][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.248188][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.288104][ T6210] veth1_macvtap: left promiscuous mode [ 236.306011][ T6210] veth0_macvtap: left promiscuous mode [ 236.312493][ T6210] veth1_vlan: left promiscuous mode [ 236.317861][ T6210] veth0_vlan: left promiscuous mode [ 236.849890][ T5842] Bluetooth: hci4: command tx timeout [ 237.334539][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 237.387046][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 238.083789][T10254] chnl_net:caif_netlink_parms(): no params data found [ 238.129629][ T5842] Bluetooth: hci0: command tx timeout [ 238.362784][T10382] __nla_validate_parse: 4 callbacks suppressed [ 238.362806][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'. [ 238.565986][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.590131][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.597469][T10254] bridge_slave_0: entered allmulticast mode [ 238.654989][T10254] bridge_slave_0: entered promiscuous mode [ 238.663448][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.679947][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.687314][T10254] bridge_slave_1: entered allmulticast mode [ 238.695061][T10254] bridge_slave_1: entered promiscuous mode [ 238.708539][T10273] chnl_net:caif_netlink_parms(): no params data found [ 238.794712][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.817131][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.907568][ T6210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.930221][ T5842] Bluetooth: hci4: command tx timeout [ 238.979891][T10254] team0: Port device team_slave_0 added [ 239.001662][T10254] team0: Port device team_slave_1 added [ 239.034900][ T6210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.117690][ T6210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.141571][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.149013][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.157320][T10273] bridge_slave_0: entered allmulticast mode [ 239.165500][T10273] bridge_slave_0: entered promiscuous mode [ 239.192026][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.199029][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.225695][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.268886][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.283265][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.292293][T10273] bridge_slave_1: entered allmulticast mode [ 239.300813][T10273] bridge_slave_1: entered promiscuous mode [ 239.430599][ T6210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.463443][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.480344][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.537889][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.682743][T10425] netlink: 108 bytes leftover after parsing attributes in process `syz.2.863'. [ 239.692363][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.863'. [ 239.703941][T10273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.761109][T10273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.830729][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.850493][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.860449][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.881664][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.904205][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.914974][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.928496][T10273] team0: Port device team_slave_0 added [ 240.004830][T10254] hsr_slave_0: entered promiscuous mode [ 240.012362][T10254] hsr_slave_1: entered promiscuous mode [ 240.047396][T10273] team0: Port device team_slave_1 added [ 240.173934][T10273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.181656][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.209481][ T5850] Bluetooth: hci0: command tx timeout [ 240.209683][T10273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.297648][ T6210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.338127][T10426] lo speed is unknown, defaulting to 1000 [ 240.354432][T10273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.369329][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.444492][T10273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.470768][T10440] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 240.516413][ T6210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.631002][ T6210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.708322][ T6210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.730363][T10273] hsr_slave_0: entered promiscuous mode [ 240.737448][T10273] hsr_slave_1: entered promiscuous mode [ 240.749374][T10273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.757103][T10273] Cannot create hsr debugfs directory [ 240.838053][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.010840][ T5850] Bluetooth: hci4: command tx timeout [ 241.057557][T10452] gretap1: entered allmulticast mode [ 241.294561][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 241.312758][ T6210] bridge_slave_1: left allmulticast mode [ 241.318642][ T6210] bridge_slave_1: left promiscuous mode [ 241.326929][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.346877][ T6210] bridge_slave_0: left allmulticast mode [ 241.355579][ T6210] bridge_slave_0: left promiscuous mode [ 241.373786][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.399179][ T6210] bridge_slave_1: left allmulticast mode [ 241.406316][ T6210] bridge_slave_1: left promiscuous mode [ 241.412731][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.445533][ T6210] bridge_slave_0: left allmulticast mode [ 241.451490][ T6210] bridge_slave_0: left promiscuous mode [ 241.457312][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.969518][ T5850] Bluetooth: hci2: command tx timeout [ 242.087690][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.105758][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.117402][ T6210] bond0 (unregistering): Released all slaves [ 242.246689][ T6210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.258221][ T6210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.269952][ T6210] bond0 (unregistering): Released all slaves [ 242.290514][ T5850] Bluetooth: hci0: command tx timeout [ 242.538729][T10426] chnl_net:caif_netlink_parms(): no params data found [ 242.854082][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 243.011489][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.027916][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.037591][T10426] bridge_slave_0: entered allmulticast mode [ 243.045127][T10504] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.045562][T10426] bridge_slave_0: entered promiscuous mode [ 243.093908][ T5850] Bluetooth: hci4: command tx timeout [ 243.114278][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.118708][T10501] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 243.122124][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.138432][T10426] bridge_slave_1: entered allmulticast mode [ 243.146560][T10426] bridge_slave_1: entered promiscuous mode [ 243.205250][T10501] bond0: (slave netdevsim0): Releasing backup interface [ 243.221456][T10501] bond0: (slave netdevsim0): the permanent HWaddr of slave - 46:b5:16:aa:ef:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 243.287310][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.445646][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.660254][T10426] team0: Port device team_slave_0 added [ 243.700497][T10273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.740782][T10273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.808183][T10426] team0: Port device team_slave_1 added [ 243.878618][T10273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.918977][ T6210] hsr_slave_0: left promiscuous mode [ 243.927606][ T6210] hsr_slave_1: left promiscuous mode [ 243.950536][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.970788][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.980390][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.987903][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.007050][ T6210] hsr_slave_0: left promiscuous mode [ 244.016167][ T6210] hsr_slave_1: left promiscuous mode [ 244.023876][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.032592][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.040355][T10531] netlink: 'syz.0.890': attribute type 3 has an invalid length. [ 244.050025][ T5850] Bluetooth: hci2: command tx timeout [ 244.066415][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.074944][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.137737][ T6210] veth1_macvtap: left promiscuous mode [ 244.144177][ T6210] veth0_macvtap: left promiscuous mode [ 244.151110][ T6210] veth1_vlan: left promiscuous mode [ 244.151162][T10533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.891'. [ 244.156542][ T6210] veth0_vlan: left promiscuous mode [ 244.180165][ T6210] veth1_macvtap: left promiscuous mode [ 244.186465][ T6210] veth0_macvtap: left promiscuous mode [ 244.193526][ T6210] veth1_vlan: left promiscuous mode [ 244.199112][ T6210] veth0_vlan: left promiscuous mode [ 244.248757][T10535] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 244.274904][T10535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.918566][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 244.970409][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 245.879167][ T6210] team0 (unregistering): Port device team_slave_1 removed [ 245.937925][ T6210] team0 (unregistering): Port device team_slave_0 removed [ 246.132044][ T5850] Bluetooth: hci2: command tx timeout [ 246.463573][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.474678][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.509493][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.523662][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.530971][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.557505][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.582634][T10273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.756321][T10426] hsr_slave_0: entered promiscuous mode [ 246.763764][T10426] hsr_slave_1: entered promiscuous mode [ 246.781435][T10426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.790592][T10426] Cannot create hsr debugfs directory [ 246.822459][T10254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.996386][T10254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.032950][T10556] netlink: 'syz.0.895': attribute type 7 has an invalid length. [ 247.044732][T10254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.053274][T10556] netlink: 'syz.0.895': attribute type 8 has an invalid length. [ 247.075059][T10254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.105259][T10557] netlink: 830 bytes leftover after parsing attributes in process `syz.2.894'. [ 247.411048][T10566] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.460795][T10273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.565967][T10273] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.640233][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.647392][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.726204][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.733446][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.826917][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.854174][T10273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.865514][T10273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.954468][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.006608][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.013851][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.041757][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.048987][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.065501][T10426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.083567][T10426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.096092][T10426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.123413][T10426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.210552][ T5850] Bluetooth: hci2: command tx timeout [ 248.332313][T10273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.448599][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.506822][T10273] veth0_vlan: entered promiscuous mode [ 248.548909][T10273] veth1_vlan: entered promiscuous mode [ 248.578570][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.615003][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.905'. [ 248.627978][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.635324][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.667970][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.675184][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.712166][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.825376][T10273] veth0_macvtap: entered promiscuous mode [ 248.887087][T10426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.913598][T10273] veth1_macvtap: entered promiscuous mode [ 249.003566][T10273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.022567][T10273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.065653][T10273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.096759][T10273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.119640][T10273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.131401][T10273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.148919][T10273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.170347][T10273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.189446][T10273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.198764][T10273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.428901][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.522422][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.552311][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.571462][T10254] veth0_vlan: entered promiscuous mode [ 249.634729][T10254] veth1_vlan: entered promiscuous mode [ 249.696211][T10621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.738431][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.746820][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.764268][T10426] veth0_vlan: entered promiscuous mode [ 249.797985][T10254] veth0_macvtap: entered promiscuous mode [ 249.825426][T10426] veth1_vlan: entered promiscuous mode [ 249.855705][T10254] veth1_macvtap: entered promiscuous mode [ 249.915586][T10254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.933859][T10254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.948038][T10254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.980709][T10426] veth0_macvtap: entered promiscuous mode [ 249.995838][T10254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.022099][T10254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.045247][T10254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.062216][T10254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.076219][T10254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.088166][T10254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.108169][T10254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.118931][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.914'. [ 250.156117][T10630] FAULT_INJECTION: forcing a failure. [ 250.156117][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 250.158183][T10254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.183431][T10254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.188032][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.2.913 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 250.194522][T10254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.202921][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 250.202941][T10630] Call Trace: [ 250.202950][T10630] [ 250.202962][T10630] dump_stack_lvl+0x241/0x360 [ 250.203004][T10630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.212531][T10254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.221727][T10630] ? __pfx__printk+0x10/0x10 [ 250.221767][T10630] ? __kmalloc_cache_noprof+0x48/0x390 [ 250.229873][T10426] veth1_macvtap: entered promiscuous mode [ 250.232691][T10630] ? __pfx___might_resched+0x10/0x10 [ 250.255324][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.256629][T10630] should_fail_ex+0x3b0/0x4e0 [ 250.262511][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.267820][T10630] should_failslab+0xac/0x100 [ 250.278923][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.282886][T10630] __kmalloc_cache_noprof+0x70/0x390 [ 250.282926][T10630] ? ieee80211_start_roc_work+0x196/0xfe0 [ 250.319072][T10630] ieee80211_start_roc_work+0x196/0xfe0 [ 250.324688][T10630] ieee80211_remain_on_channel+0xda/0x120 [ 250.330456][T10630] rdev_remain_on_channel+0x12f/0x2f0 [ 250.335890][T10630] nl80211_remain_on_channel+0x4ab/0x710 [ 250.341579][T10630] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 250.347777][T10630] genl_rcv_msg+0xb14/0xec0 [ 250.352408][T10630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.357480][T10630] ? __pfx_lock_acquire+0x10/0x10 [ 250.362570][T10630] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 250.368001][T10630] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 250.374291][T10630] ? __pfx_nl80211_post_doit+0x10/0x10 [ 250.379771][T10630] ? __pfx___might_resched+0x10/0x10 [ 250.385086][T10630] netlink_rcv_skb+0x1e3/0x430 [ 250.389874][T10630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.394946][T10630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.400264][T10630] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 250.405835][T10630] genl_rcv+0x28/0x40 [ 250.409966][T10630] netlink_unicast+0x7f6/0x990 [ 250.414757][T10630] ? __pfx_netlink_unicast+0x10/0x10 [ 250.420084][T10630] ? __virt_addr_valid+0x183/0x530 [ 250.425304][T10630] ? __check_object_size+0x48e/0x900 [ 250.430616][T10630] netlink_sendmsg+0x8e4/0xcb0 [ 250.435461][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.440800][T10630] ? aa_sock_msg_perm+0x91/0x160 [ 250.445774][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.451098][T10630] __sock_sendmsg+0x221/0x270 [ 250.455826][T10630] ____sys_sendmsg+0x52a/0x7e0 [ 250.460629][T10630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.466047][T10630] ? __fget_files+0x2a/0x410 [ 250.470656][T10630] ? __fget_files+0x2a/0x410 [ 250.475317][T10630] __sys_sendmsg+0x269/0x350 [ 250.479926][T10630] ? __pfx_lock_release+0x10/0x10 [ 250.484973][T10630] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.490114][T10630] ? __pfx_vfs_write+0x10/0x10 [ 250.494923][T10630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.501305][T10630] ? do_syscall_64+0x100/0x230 [ 250.506100][T10630] ? do_syscall_64+0xb6/0x230 [ 250.510820][T10630] do_syscall_64+0xf3/0x230 [ 250.515383][T10630] ? clear_bhb_loop+0x35/0x90 [ 250.520104][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.526024][T10630] RIP: 0033:0x7f77ebd85d19 [ 250.530454][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.550259][T10630] RSP: 002b:00007f77ecbe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.558849][T10630] RAX: ffffffffffffffda RBX: 00007f77ebf76080 RCX: 00007f77ebd85d19 [ 250.566836][T10630] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 250.574900][T10630] RBP: 00007f77ecbe1090 R08: 0000000000000000 R09: 0000000000000000 [ 250.582884][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.590889][T10630] R13: 0000000000000000 R14: 00007f77ebf76080 R15: 00007ffc3bc8fd88 [ 250.598891][T10630] [ 250.605385][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.620527][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.687757][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.702078][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.719693][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.732816][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.752663][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.767829][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.784583][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.795983][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.807977][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.841823][T10426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.854354][T10426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.865899][T10426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.875847][T10426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.057271][T10637] netlink: 108 bytes leftover after parsing attributes in process `syz.2.917'. [ 251.142888][ T6193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.251636][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.273644][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.336368][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.348986][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.364488][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.380619][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.426139][ T6193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.454988][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.464641][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.569988][ T6193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.646312][ T6193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.883050][ T6193] bridge_slave_1: left allmulticast mode [ 251.888774][ T6193] bridge_slave_1: left promiscuous mode [ 251.901328][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.911332][ T6193] bridge_slave_0: left allmulticast mode [ 251.920126][ T6193] bridge_slave_0: left promiscuous mode [ 251.926016][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.275247][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 252.375582][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.386277][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.395530][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.414283][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.423871][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.431449][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.681978][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.703293][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.724749][ T6193] bond0 (unregistering): Released all slaves [ 252.758246][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'. [ 252.853077][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.863031][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.873669][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.907544][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.923380][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.934013][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.001924][T10653] lo speed is unknown, defaulting to 1000 [ 253.135068][T10656] lo speed is unknown, defaulting to 1000 [ 253.262297][T10653] chnl_net:caif_netlink_parms(): no params data found [ 253.577373][T10670] delete_channel: no stack [ 253.686730][ T6193] hsr_slave_0: left promiscuous mode [ 253.701664][ T6193] hsr_slave_1: left promiscuous mode [ 253.722323][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.756972][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.790166][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.797664][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.826994][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.841484][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.850050][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.855717][ T6193] veth1_macvtap: left promiscuous mode [ 253.865655][ T6193] veth0_macvtap: left promiscuous mode [ 253.867926][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.872262][ T6193] veth1_vlan: left promiscuous mode [ 253.884424][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.885108][ T6193] veth0_vlan: left promiscuous mode [ 253.893833][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.433884][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 254.495072][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 254.539483][ T5842] Bluetooth: hci0: command tx timeout [ 254.957291][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.964657][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.975584][T10653] bridge_slave_0: entered allmulticast mode [ 254.983282][T10653] bridge_slave_0: entered promiscuous mode [ 254.992410][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.999742][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.006962][T10653] bridge_slave_1: entered allmulticast mode [ 255.015570][ T5842] Bluetooth: hci2: command tx timeout [ 255.024122][T10653] bridge_slave_1: entered promiscuous mode [ 255.074869][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.120532][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.273172][T10653] team0: Port device team_slave_0 added [ 255.348111][T10653] team0: Port device team_slave_1 added [ 255.384937][T10676] lo speed is unknown, defaulting to 1000 [ 255.596347][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.604855][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.633570][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.681662][T10693] caif0: entered allmulticast mode [ 255.687788][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.710175][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.765937][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.904351][T10653] hsr_slave_0: entered promiscuous mode [ 255.913119][T10653] hsr_slave_1: entered promiscuous mode [ 255.924489][T10653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.932809][T10653] Cannot create hsr debugfs directory [ 255.969605][ T5842] Bluetooth: hci4: command tx timeout [ 255.975871][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.984407][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.122749][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.931'. [ 256.186147][T10707] netlink: 116 bytes leftover after parsing attributes in process `syz.2.932'. [ 256.193128][T10656] chnl_net:caif_netlink_parms(): no params data found [ 256.271357][ T6193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.318407][T10711] netlink: 'syz.0.933': attribute type 21 has an invalid length. [ 256.333456][T10711] netlink: 128 bytes leftover after parsing attributes in process `syz.0.933'. [ 256.359722][T10711] netlink: 3 bytes leftover after parsing attributes in process `syz.0.933'. [ 256.462730][T10719] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.935'. [ 256.474603][T10719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.500213][ T6193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.542277][T10717] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 256.609556][ T5842] Bluetooth: hci0: command tx timeout [ 256.706205][ T6193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.871010][ T6193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.900296][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.912956][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.922360][T10656] bridge_slave_0: entered allmulticast mode [ 256.931465][T10656] bridge_slave_0: entered promiscuous mode [ 257.015164][T10676] chnl_net:caif_netlink_parms(): no params data found [ 257.026400][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.039808][T10736] netlink: 64 bytes leftover after parsing attributes in process `syz.0.940'. [ 257.043676][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.058561][T10656] bridge_slave_1: entered allmulticast mode [ 257.067016][T10656] bridge_slave_1: entered promiscuous mode [ 257.091827][ T5842] Bluetooth: hci2: command tx timeout [ 257.234306][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.260400][T10740] dccp_v6_rcv: dropped packet with invalid checksum [ 257.322874][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.593495][ T6193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.653372][T10656] team0: Port device team_slave_0 added [ 257.737405][ T6193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.781567][T10656] team0: Port device team_slave_1 added [ 257.793782][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.805224][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.839561][T10676] bridge_slave_0: entered allmulticast mode [ 257.846912][T10676] bridge_slave_0: entered promiscuous mode [ 257.915018][ T6193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.956085][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.968440][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.991363][T10676] bridge_slave_1: entered allmulticast mode [ 258.010238][T10676] bridge_slave_1: entered promiscuous mode [ 258.032766][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.050059][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.077502][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.079374][ T5842] Bluetooth: hci4: command tx timeout [ 258.153607][ T6193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.267199][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.274946][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.301818][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.324946][T10780] FAULT_INJECTION: forcing a failure. [ 258.324946][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 258.338384][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.0.950 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 258.349470][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 258.359559][T10780] Call Trace: [ 258.362864][T10780] [ 258.365805][T10780] dump_stack_lvl+0x241/0x360 [ 258.370955][T10780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.376210][T10780] ? __pfx__printk+0x10/0x10 [ 258.380868][T10780] ? kmem_cache_alloc_noprof+0x48/0x380 [ 258.386458][T10780] ? __pfx___might_resched+0x10/0x10 [ 258.391778][T10780] should_fail_ex+0x3b0/0x4e0 [ 258.396499][T10780] should_failslab+0xac/0x100 [ 258.401202][T10780] ? vm_area_dup+0x27/0x290 [ 258.405745][T10780] kmem_cache_alloc_noprof+0x70/0x380 [ 258.411143][T10780] vm_area_dup+0x27/0x290 [ 258.415503][T10780] __split_vma+0x1cb/0xc50 [ 258.419955][T10780] ? __pfx___split_vma+0x10/0x10 [ 258.424917][T10780] ? mas_find+0x950/0xbb0 [ 258.429269][T10780] ? __pfx_up_write+0x10/0x10 [ 258.433992][T10780] ? ima_get_action+0x75/0xb0 [ 258.438708][T10780] vms_gather_munmap_vmas+0x4c1/0x1600 [ 258.444239][T10780] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 258.450172][T10780] ? mas_find+0x8c0/0xbb0 [ 258.454555][T10780] __mmap_region+0x7de/0x2cd0 [ 258.459283][T10780] ? __pfx___mmap_region+0x10/0x10 [ 258.464420][T10780] ? __lock_acquire+0x1397/0x2100 [ 258.469500][T10780] ? mark_lock+0x9a/0x360 [ 258.473852][T10780] ? __pfx_lock_acquire+0x10/0x10 [ 258.478911][T10780] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 258.485172][T10780] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 258.491816][T10780] ? cap_mmap_addr+0x163/0x2c0 [ 258.496694][T10780] mmap_region+0x1d0/0x2c0 [ 258.501154][T10780] ? security_mmap_addr+0x6f/0x250 [ 258.506297][T10780] do_mmap+0x8f0/0x1000 [ 258.510483][T10780] ? __pfx_do_mmap+0x10/0x10 [ 258.515116][T10780] ? __pfx_down_write_killable+0x10/0x10 [ 258.520777][T10780] ? common_file_perm+0x1a6/0x210 [ 258.525908][T10780] vm_mmap_pgoff+0x1dd/0x3d0 [ 258.530524][T10780] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 258.535652][T10780] ? __fget_files+0x2a/0x410 [ 258.540259][T10780] ? __fget_files+0x395/0x410 [ 258.544948][T10780] ? __fget_files+0x2a/0x410 [ 258.549581][T10780] ksys_mmap_pgoff+0x4eb/0x720 [ 258.554374][T10780] ? __x64_sys_mmap+0x7f/0x140 [ 258.559184][T10780] do_syscall_64+0xf3/0x230 [ 258.563716][T10780] ? clear_bhb_loop+0x35/0x90 [ 258.568419][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.574440][T10780] RIP: 0033:0x7f4353985d19 [ 258.578871][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.598501][T10780] RSP: 002b:00007f43547e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 258.607027][T10780] RAX: ffffffffffffffda RBX: 00007f4353b76080 RCX: 00007f4353985d19 [ 258.615012][T10780] RDX: 0000000000000006 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 258.623007][T10780] RBP: 00007f43547e1090 R08: 0000000000000003 R09: 0000000100000000 [ 258.631089][T10780] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 258.639073][T10780] R13: 0000000000000000 R14: 00007f4353b76080 R15: 00007ffebd7a2b38 [ 258.647081][T10780] [ 258.662689][T10676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.675037][T10676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.689531][ T5842] Bluetooth: hci0: command tx timeout [ 258.726772][T10653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.832968][T10653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.843603][T10653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.898938][T10653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.925174][T10676] team0: Port device team_slave_0 added [ 258.938771][T10656] hsr_slave_0: entered promiscuous mode [ 258.946244][T10656] hsr_slave_1: entered promiscuous mode [ 258.958069][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.966361][T10656] Cannot create hsr debugfs directory [ 258.995866][T10676] team0: Port device team_slave_1 added [ 259.028609][ T6193] bridge_slave_1: left allmulticast mode [ 259.037928][ T6193] bridge_slave_1: left promiscuous mode [ 259.047728][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.058938][ T6193] bridge_slave_0: left allmulticast mode [ 259.065930][ T6193] bridge_slave_0: left promiscuous mode [ 259.072200][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.083995][ T6193] bridge_slave_1: left allmulticast mode [ 259.090714][ T6193] bridge_slave_1: left promiscuous mode [ 259.096668][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.106544][ T6193] bridge_slave_0: left allmulticast mode [ 259.115762][ T6193] bridge_slave_0: left promiscuous mode [ 259.122868][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.170436][ T5842] Bluetooth: hci2: command tx timeout [ 259.748177][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.759646][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.771486][ T6193] bond0 (unregistering): Released all slaves [ 259.892659][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.907577][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.918227][ T6193] bond0 (unregistering): Released all slaves [ 259.969012][T10676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.994705][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.024350][T10676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.129609][ T5842] Bluetooth: hci4: command tx timeout [ 260.144136][T10676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.164319][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.205544][T10676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.396570][T10676] hsr_slave_0: entered promiscuous mode [ 260.403609][T10676] hsr_slave_1: entered promiscuous mode [ 260.416238][T10795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.427727][T10676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.435522][T10676] Cannot create hsr debugfs directory [ 260.776686][ T5842] Bluetooth: hci0: command tx timeout [ 260.850593][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.922454][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.950655][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.957824][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.167347][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.174563][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.212041][ T6193] hsr_slave_0: left promiscuous mode [ 261.231732][ T6193] hsr_slave_1: left promiscuous mode [ 261.251502][ T5842] Bluetooth: hci2: command tx timeout [ 261.277551][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.290347][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.316565][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.324398][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.337085][ T6193] hsr_slave_0: left promiscuous mode [ 261.343788][ T6193] hsr_slave_1: left promiscuous mode [ 261.350993][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.358613][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.367522][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.376122][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.400437][T10805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 261.435525][ T6193] veth1_macvtap: left promiscuous mode [ 261.441598][ T6193] veth0_macvtap: left promiscuous mode [ 261.447262][ T6193] veth1_vlan: left promiscuous mode [ 261.453084][ T6193] veth0_vlan: left promiscuous mode [ 261.459575][ T6193] veth1_macvtap: left promiscuous mode [ 261.465484][ T6193] veth0_macvtap: left promiscuous mode [ 261.471444][ T6193] veth1_vlan: left promiscuous mode [ 261.476813][ T6193] veth0_vlan: left promiscuous mode [ 262.029099][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 262.089019][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 262.214822][ T5842] Bluetooth: hci4: command tx timeout [ 262.928927][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 262.973030][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 263.629990][T10811] IPv6: sit1: Disabled Multicast RS [ 263.803209][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.961550][T10653] veth0_vlan: entered promiscuous mode [ 263.982466][T10816] FAULT_INJECTION: forcing a failure. [ 263.982466][T10816] name failslab, interval 1, probability 0, space 0, times 0 [ 263.987126][T10676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.002756][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.0.962 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 264.013509][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 264.023600][T10816] Call Trace: [ 264.026910][T10816] [ 264.029874][T10816] dump_stack_lvl+0x241/0x360 [ 264.034575][T10816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.039786][T10816] ? __pfx__printk+0x10/0x10 [ 264.044394][T10816] ? kmem_cache_alloc_noprof+0x48/0x380 [ 264.049988][T10816] ? __pfx___might_resched+0x10/0x10 [ 264.055320][T10816] should_fail_ex+0x3b0/0x4e0 [ 264.060133][T10816] should_failslab+0xac/0x100 [ 264.064894][T10816] ? vm_area_dup+0x61/0x290 [ 264.069455][T10816] kmem_cache_alloc_noprof+0x70/0x380 [ 264.074894][T10816] vm_area_dup+0x61/0x290 [ 264.079243][T10816] __split_vma+0x1cb/0xc50 [ 264.083701][T10816] ? __pfx___split_vma+0x10/0x10 [ 264.088652][T10816] ? mas_find+0x950/0xbb0 [ 264.092991][T10816] ? __pfx_up_write+0x10/0x10 [ 264.097677][T10816] ? ima_get_action+0x75/0xb0 [ 264.102383][T10816] vms_gather_munmap_vmas+0x4c1/0x1600 [ 264.107943][T10816] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 264.113893][T10816] ? mas_find+0x8c0/0xbb0 [ 264.118250][T10816] __mmap_region+0x7de/0x2cd0 [ 264.122971][T10816] ? __pfx___mmap_region+0x10/0x10 [ 264.128189][T10816] ? __lock_acquire+0x1397/0x2100 [ 264.133260][T10816] ? mark_lock+0x9a/0x360 [ 264.137636][T10816] ? __pfx_lock_acquire+0x10/0x10 [ 264.142695][T10816] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 264.148966][T10816] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 264.155605][T10816] ? cap_mmap_addr+0x163/0x2c0 [ 264.160648][T10816] mmap_region+0x1d0/0x2c0 [ 264.165099][T10816] ? security_mmap_addr+0x6f/0x250 [ 264.170233][T10816] do_mmap+0x8f0/0x1000 [ 264.174414][T10816] ? __pfx_do_mmap+0x10/0x10 [ 264.179026][T10816] ? __pfx_down_write_killable+0x10/0x10 [ 264.184681][T10816] ? common_file_perm+0x1a6/0x210 [ 264.189717][T10816] vm_mmap_pgoff+0x1dd/0x3d0 [ 264.194403][T10816] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 264.199533][T10816] ? __fget_files+0x2a/0x410 [ 264.204172][T10816] ? __fget_files+0x395/0x410 [ 264.208888][T10816] ? __fget_files+0x2a/0x410 [ 264.213506][T10816] ksys_mmap_pgoff+0x4eb/0x720 [ 264.218280][T10816] ? __x64_sys_mmap+0x7f/0x140 [ 264.223059][T10816] do_syscall_64+0xf3/0x230 [ 264.227596][T10816] ? clear_bhb_loop+0x35/0x90 [ 264.232294][T10816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.238197][T10816] RIP: 0033:0x7f4353985d19 [ 264.242624][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.262247][T10816] RSP: 002b:00007f4354802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 264.270772][T10816] RAX: ffffffffffffffda RBX: 00007f4353b75fa0 RCX: 00007f4353985d19 [ 264.278761][T10816] RDX: 0000000000000006 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 264.286741][T10816] RBP: 00007f4354802090 R08: 0000000000000003 R09: 0000000100000000 [ 264.294732][T10816] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 264.302737][T10816] R13: 0000000000000000 R14: 00007f4353b75fa0 R15: 00007ffebd7a2b38 [ 264.310753][T10816] [ 264.375590][T10676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.400827][T10676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.434275][T10676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.462011][T10653] veth1_vlan: entered promiscuous mode [ 264.582174][T10656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.614115][T10656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.634833][T10656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.706801][T10653] veth0_macvtap: entered promiscuous mode [ 264.716487][T10653] veth1_macvtap: entered promiscuous mode [ 264.733965][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.744420][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.755840][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.766427][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.777102][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.789441][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.800132][T10653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.810020][T10653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.818811][T10653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.827966][T10653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.838900][T10656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.090830][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.098707][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.201849][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.205586][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.228016][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.297353][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.334422][T10676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.361455][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.368860][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.435804][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.443040][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.460932][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 265.534491][T10676] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.583178][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.590392][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.643265][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.650490][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.663654][T10856] netlink: 52 bytes leftover after parsing attributes in process `syz.0.973'. [ 265.694803][T10676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.699531][T10856] netlink: 864 bytes leftover after parsing attributes in process `syz.0.973'. [ 265.705351][T10676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.811351][T10857] FAULT_INJECTION: forcing a failure. [ 265.811351][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 265.882816][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.2.974 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 265.893574][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 265.903774][T10857] Call Trace: [ 265.907112][T10857] [ 265.910173][T10857] dump_stack_lvl+0x241/0x360 [ 265.914959][T10857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.920227][T10857] ? __pfx__printk+0x10/0x10 [ 265.924907][T10857] ? kmem_cache_alloc_noprof+0x48/0x380 [ 265.930525][T10857] ? __pfx___might_resched+0x10/0x10 [ 265.935884][T10857] should_fail_ex+0x3b0/0x4e0 [ 265.940803][T10857] should_failslab+0xac/0x100 [ 265.945579][T10857] ? mas_alloc_nodes+0x25b/0x7e0 [ 265.950584][T10857] kmem_cache_alloc_noprof+0x70/0x380 [ 265.956059][T10857] mas_alloc_nodes+0x25b/0x7e0 [ 265.960907][T10857] mas_preallocate+0x575/0x8d0 [ 265.965734][T10857] ? __pfx_mas_preallocate+0x10/0x10 [ 265.971093][T10857] ? __mas_set_range+0x133/0x3c0 [ 265.976101][T10857] __split_vma+0x302/0xc50 [ 265.977911][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.980563][T10857] ? __pfx___split_vma+0x10/0x10 [ 265.992368][T10857] ? mas_find+0x950/0xbb0 [ 265.996758][T10857] ? __pfx_up_write+0x10/0x10 [ 266.001493][T10857] ? ima_get_action+0x75/0xb0 [ 266.006219][T10857] vms_gather_munmap_vmas+0x4c1/0x1600 [ 266.011758][T10857] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 266.017789][T10857] ? mas_find+0x8c0/0xbb0 [ 266.022281][T10857] __mmap_region+0x7de/0x2cd0 [ 266.027053][T10857] ? __pfx___mmap_region+0x10/0x10 [ 266.032230][T10857] ? __lock_acquire+0x1397/0x2100 [ 266.037358][T10857] ? mark_lock+0x9a/0x360 [ 266.041759][T10857] ? __pfx_lock_acquire+0x10/0x10 [ 266.046851][T10857] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 266.053174][T10857] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 266.059830][T10857] ? cap_mmap_addr+0x163/0x2c0 [ 266.064685][T10857] mmap_region+0x1d0/0x2c0 [ 266.069142][T10857] ? security_mmap_addr+0x6f/0x250 [ 266.074352][T10857] do_mmap+0x8f0/0x1000 [ 266.078577][T10857] ? __pfx_do_mmap+0x10/0x10 [ 266.083232][T10857] ? __pfx_down_write_killable+0x10/0x10 [ 266.088928][T10857] ? common_file_perm+0x1a6/0x210 [ 266.094022][T10857] vm_mmap_pgoff+0x1dd/0x3d0 [ 266.098674][T10857] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.103870][T10857] ? __fget_files+0x2a/0x410 [ 266.108503][T10857] ? __fget_files+0x395/0x410 [ 266.113219][T10857] ? __fget_files+0x2a/0x410 [ 266.117942][T10857] ksys_mmap_pgoff+0x4eb/0x720 [ 266.122754][T10857] ? __x64_sys_mmap+0x7f/0x140 [ 266.127674][T10857] do_syscall_64+0xf3/0x230 [ 266.132329][T10857] ? clear_bhb_loop+0x35/0x90 [ 266.137081][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.143045][T10857] RIP: 0033:0x7f77ebd85d19 [ 266.147517][T10857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.167268][T10857] RSP: 002b:00007f77ecc02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.175743][T10857] RAX: ffffffffffffffda RBX: 00007f77ebf75fa0 RCX: 00007f77ebd85d19 [ 266.183766][T10857] RDX: 0000000000000006 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 266.191789][T10857] RBP: 00007f77ecc02090 R08: 0000000000000003 R09: 0000000100000000 [ 266.199813][T10857] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 266.207841][T10857] R13: 0000000000000000 R14: 00007f77ebf75fa0 R15: 00007ffc3bc8fd88 [ 266.215880][T10857] [ 266.307275][ T6174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.347890][T10676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.450998][ T6174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.486926][T10676] veth0_vlan: entered promiscuous mode [ 266.513717][T10676] veth1_vlan: entered promiscuous mode [ 266.558430][T10676] veth0_macvtap: entered promiscuous mode [ 266.587113][T10676] veth1_macvtap: entered promiscuous mode [ 266.616007][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.628619][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.640996][T10676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.665271][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.676805][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.688867][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.700510][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.711551][T10676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.723036][T10676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.734782][T10676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.746973][T10676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.756406][T10676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.767123][T10676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.776729][T10676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.797411][T10656] veth0_vlan: entered promiscuous mode [ 266.855910][ T6174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.878450][T10656] veth1_vlan: entered promiscuous mode [ 266.941171][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.949071][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.974111][T10656] veth0_macvtap: entered promiscuous mode [ 266.994112][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.995020][T10656] veth1_macvtap: entered promiscuous mode [ 267.003747][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.057940][ T6174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.083963][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.096049][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.107351][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.129377][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.161166][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.202948][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.225677][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.239114][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.261101][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.277299][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.296164][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.306233][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.327742][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.352562][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.487849][T10656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.509386][T10656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.518180][T10656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.544894][T10656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.746097][ T6174] bridge_slave_1: left allmulticast mode [ 267.762745][ T6174] bridge_slave_1: left promiscuous mode [ 267.777138][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.796002][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.807314][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.817482][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.834584][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.843709][ T6174] bridge_slave_0: left allmulticast mode [ 267.850623][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.858185][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.865632][ T6174] bridge_slave_0: left promiscuous mode [ 267.865824][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.373059][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.387747][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.399086][ T6174] bond0 (unregistering): Released all slaves [ 268.500679][T10893] lo speed is unknown, defaulting to 1000 [ 268.585320][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.594220][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.725785][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.738004][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.072872][ T6174] hsr_slave_0: left promiscuous mode [ 269.091721][ T6174] hsr_slave_1: left promiscuous mode [ 269.117636][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.135270][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.146298][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.166069][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.216937][ T6174] veth1_macvtap: left promiscuous mode [ 269.225820][ T6174] veth0_macvtap: left promiscuous mode [ 269.245062][ T6174] veth1_vlan: left promiscuous mode [ 269.289012][ T6174] veth0_vlan: left promiscuous mode [ 269.298775][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.310756][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.322123][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.334020][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.344862][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.353085][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.970784][ T5842] Bluetooth: hci0: command tx timeout [ 270.017435][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 270.067023][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 270.550623][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 270.587049][T10909] lo speed is unknown, defaulting to 1000 [ 270.638078][T10893] chnl_net:caif_netlink_parms(): no params data found [ 270.980040][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.987212][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.995348][T10893] bridge_slave_0: entered allmulticast mode [ 271.003407][T10893] bridge_slave_0: entered promiscuous mode [ 271.012626][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.020431][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.027690][T10893] bridge_slave_1: entered allmulticast mode [ 271.035528][T10893] bridge_slave_1: entered promiscuous mode [ 271.145499][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.238540][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.276545][T10928] netlink: 144 bytes leftover after parsing attributes in process `syz.2.986'. [ 271.304592][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.321193][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.387138][T10893] team0: Port device team_slave_0 added [ 271.410899][ T54] Bluetooth: hci2: command tx timeout [ 271.419854][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.430784][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.439860][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.545850][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.645547][T10893] team0: Port device team_slave_1 added [ 271.975628][T10929] lo speed is unknown, defaulting to 1000 [ 272.065804][ T54] Bluetooth: hci0: command tx timeout [ 272.073440][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.081093][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.107636][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.126123][T10946] x_tables: duplicate underflow at hook 1 [ 272.146115][T10946] netlink: 128 bytes leftover after parsing attributes in process `syz.2.992'. [ 272.186350][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.992'. [ 272.260967][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.268168][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.294922][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.416175][T10893] hsr_slave_0: entered promiscuous mode [ 272.433389][T10893] hsr_slave_1: entered promiscuous mode [ 272.512877][ T6174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.537139][T10958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.994'. [ 272.587457][T10909] chnl_net:caif_netlink_parms(): no params data found [ 272.692401][ T6174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.737744][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.996'. [ 272.835211][ T6174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.985430][ T6174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.051050][T10983] netlink: 56 bytes leftover after parsing attributes in process `syz.2.999'. [ 273.098473][T10909] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.107145][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.117987][T10909] bridge_slave_0: entered allmulticast mode [ 273.127065][T10909] bridge_slave_0: entered promiscuous mode [ 273.197430][T10909] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.225011][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.241063][T10909] bridge_slave_1: entered allmulticast mode [ 273.248335][T10909] bridge_slave_1: entered promiscuous mode [ 273.374051][T10989] block nbd0: not configured, cannot reconfigure [ 273.490048][ T54] Bluetooth: hci2: command tx timeout [ 273.535092][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.602142][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.729642][ T54] Bluetooth: hci4: command tx timeout [ 273.844998][ T6174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.873618][T10929] chnl_net:caif_netlink_parms(): no params data found [ 273.895650][T11003] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 273.914328][T10909] team0: Port device team_slave_0 added [ 273.932861][T10909] team0: Port device team_slave_1 added [ 274.022440][ T6174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.129536][ T54] Bluetooth: hci0: command tx timeout [ 274.193677][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.201004][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.227943][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.312259][ T6174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.376908][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.386274][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.413526][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.462634][T11023] syz.2.1012[11023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.462756][T11023] syz.2.1012[11023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.476731][T11023] syz.2.1012[11023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.534780][ T6174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.682536][T11028] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1015'. [ 274.755227][T10909] hsr_slave_0: entered promiscuous mode [ 274.772734][T10909] hsr_slave_1: entered promiscuous mode [ 274.779115][T10909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.796919][T10909] Cannot create hsr debugfs directory [ 274.820419][T10893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.832259][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.847790][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.857821][T10929] bridge_slave_0: entered allmulticast mode [ 274.877241][T10929] bridge_slave_0: entered promiscuous mode [ 274.888450][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.907662][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.918824][T10929] bridge_slave_1: entered allmulticast mode [ 274.930521][T10929] bridge_slave_1: entered promiscuous mode [ 274.976361][T10893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.998429][T10893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.008844][T11031] netlink: 'syz.2.1016': attribute type 32 has an invalid length. [ 275.077006][T10893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.168192][T10929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.187225][ T6174] bridge_slave_1: left allmulticast mode [ 275.200448][ T6174] bridge_slave_1: left promiscuous mode [ 275.213076][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.232081][ T6174] bridge_slave_0: left allmulticast mode [ 275.237829][ T6174] bridge_slave_0: left promiscuous mode [ 275.250979][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.283511][ T6174] bridge_slave_1: left allmulticast mode [ 275.300067][ T6174] bridge_slave_1: left promiscuous mode [ 275.310674][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.349787][ T6174] bridge_slave_0: left allmulticast mode [ 275.365846][ T6174] bridge_slave_0: left promiscuous mode [ 275.380636][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.466744][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.482808][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.500991][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.511180][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.521639][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.529080][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.571455][ T5842] Bluetooth: hci2: command tx timeout [ 275.809473][ T5842] Bluetooth: hci4: command tx timeout [ 276.067464][T11042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1020'. [ 276.136505][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1021'. [ 276.206595][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1022'. [ 276.215830][ T5842] Bluetooth: hci0: command tx timeout [ 276.432930][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.446871][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.458593][ T6174] bond0 (unregistering): Released all slaves [ 276.603350][ T6174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.615796][ T6174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.627160][ T6174] bond0 (unregistering): Released all slaves [ 276.660431][T10929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.772685][T10929] team0: Port device team_slave_0 added [ 276.850618][T10929] team0: Port device team_slave_1 added [ 276.881388][T11034] lo speed is unknown, defaulting to 1000 [ 276.933385][T10929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.946633][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.999411][T10929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.065012][T10929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.073644][T10929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.100808][T10929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.214867][T10929] hsr_slave_0: entered promiscuous mode [ 277.223270][T10929] hsr_slave_1: entered promiscuous mode [ 277.236560][T10929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.245133][T10929] Cannot create hsr debugfs directory [ 277.574476][ T5842] Bluetooth: hci1: command tx timeout [ 277.649504][ T5842] Bluetooth: hci2: command tx timeout [ 277.889400][ T5842] Bluetooth: hci4: command tx timeout [ 277.941924][ T6174] hsr_slave_0: left promiscuous mode [ 277.948212][ T6174] hsr_slave_1: left promiscuous mode [ 277.967312][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.997848][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.010968][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.018495][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.048326][ T6174] hsr_slave_0: left promiscuous mode [ 278.069126][ T6174] hsr_slave_1: left promiscuous mode [ 278.078911][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.091150][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.099101][ T6174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.109206][ T6174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.145198][ T6174] veth1_macvtap: left promiscuous mode [ 278.154623][ T6174] veth0_macvtap: left promiscuous mode [ 278.161705][ T6174] veth1_vlan: left promiscuous mode [ 278.167052][ T6174] veth0_vlan: left promiscuous mode [ 278.173818][ T6174] veth1_macvtap: left promiscuous mode [ 278.180043][ T6174] veth0_macvtap: left promiscuous mode [ 278.185789][ T6174] veth1_vlan: left promiscuous mode [ 278.191345][ T6174] veth0_vlan: left promiscuous mode [ 278.782942][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 278.832085][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 279.655202][ T5842] Bluetooth: hci1: command tx timeout [ 279.723328][ T6174] team0 (unregistering): Port device team_slave_1 removed [ 279.765760][ T6174] team0 (unregistering): Port device team_slave_0 removed [ 279.975078][ T5842] Bluetooth: hci4: command tx timeout [ 280.217264][T10893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.229884][T11034] chnl_net:caif_netlink_parms(): no params data found [ 280.461094][T10893] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.474590][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.481813][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.500881][T10909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.522672][T10909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.635754][T10909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.658696][T10909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.671455][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.678947][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.687434][T11034] bridge_slave_0: entered allmulticast mode [ 280.696312][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1033'. [ 280.707231][T11034] bridge_slave_0: entered promiscuous mode [ 280.717366][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.724581][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.737496][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 280.762090][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.769955][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.777278][T11034] bridge_slave_1: entered allmulticast mode [ 280.792237][T11034] bridge_slave_1: entered promiscuous mode [ 280.881572][T11034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.915803][T11034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.049966][T11081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1035'. [ 281.076139][T11034] team0: Port device team_slave_0 added [ 281.087334][T11034] team0: Port device team_slave_1 added [ 281.214708][T11034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.223104][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.250129][T11034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.313661][T11034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.327150][T11034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.354327][T11034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.483084][T11034] hsr_slave_0: entered promiscuous mode [ 281.500366][T11034] hsr_slave_1: entered promiscuous mode [ 281.506909][T11034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.524461][T11034] Cannot create hsr debugfs directory [ 281.532766][T10929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.550669][T10929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.632204][T10929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.666408][T10929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.730239][ T5842] Bluetooth: hci1: command tx timeout [ 281.814729][T10909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.858169][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.882975][T10909] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.911150][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.918411][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.994780][T11034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.995773][T11097] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1041'. [ 282.078270][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.085679][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.147473][T11034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.308797][T11034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.337820][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.383808][T10893] veth0_vlan: entered promiscuous mode [ 282.397809][T10893] veth1_vlan: entered promiscuous mode [ 282.418409][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.485194][T11034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.533403][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.540591][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.559087][T10893] veth0_macvtap: entered promiscuous mode [ 282.594825][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.602044][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.632931][T11106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.651985][T10929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.662666][T10929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.702052][T10893] veth1_macvtap: entered promiscuous mode [ 282.797628][T10893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.844028][T10909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.857974][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.872697][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.884370][T10893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.896161][T10893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.908537][T10893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.954012][T10893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.974153][T10893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.984032][T10893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.994220][T10893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.026738][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1046'. [ 283.126655][T11034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 283.172303][T11034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 283.197838][T11034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.211249][T11034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.263731][T10909] veth0_vlan: entered promiscuous mode [ 283.320949][T10909] veth1_vlan: entered promiscuous mode [ 283.333119][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 283.344656][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.352985][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.406738][T10929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.498082][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.517898][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.568149][T10909] veth0_macvtap: entered promiscuous mode [ 283.675886][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 283.685996][T10909] veth1_macvtap: entered promiscuous mode [ 283.776793][T10909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.797403][T10909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.810843][ T5842] Bluetooth: hci1: command tx timeout [ 283.822068][T10909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.863588][T10909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.877390][T10909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.888972][T10909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.903274][T10909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.914532][T10909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.925977][T10909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.937863][T10909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.964929][T10909] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.976870][T10909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.987414][T10909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.029615][T10909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.077267][T11034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.155464][ T6193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.218254][T11139] : renamed from ipvlan1 [ 284.314356][ T6193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.397901][T10929] veth0_vlan: entered promiscuous mode [ 284.430735][T11034] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.477257][ T6193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.512395][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.519758][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.557543][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.565414][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.597769][ T6193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.614327][T10929] veth1_vlan: entered promiscuous mode [ 284.632908][ T6174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.664698][ T6174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.775904][T10929] veth0_macvtap: entered promiscuous mode [ 284.793251][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.803979][T10929] veth1_macvtap: entered promiscuous mode [ 284.820867][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.849045][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.870983][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.881321][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.892271][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.903759][T10929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.928799][ T6193] bridge_slave_1: left allmulticast mode [ 284.936127][ T6193] bridge_slave_1: left promiscuous mode [ 284.959871][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.980635][ T6193] bridge_slave_0: left allmulticast mode [ 284.986371][ T6193] bridge_slave_0: left promiscuous mode [ 284.993190][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.651774][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.689922][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.710608][ T6193] bond0 (unregistering): Released all slaves [ 285.754431][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.767156][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.786752][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.802607][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.814404][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.824831][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.931451][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.967030][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.986787][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.017719][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.037419][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.048614][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.062947][T10929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.074278][T10929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.085703][T10929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.160829][T10929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.181648][T10929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.191552][T10929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.201207][T10929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.251641][T11034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.358814][T11155] lo speed is unknown, defaulting to 1000 [ 286.516227][T11034] veth0_vlan: entered promiscuous mode [ 286.545866][T11034] veth1_vlan: entered promiscuous mode [ 286.723340][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.755898][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.789883][ T6193] hsr_slave_0: left promiscuous mode [ 286.796020][ T6193] hsr_slave_1: left promiscuous mode [ 286.806414][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.814086][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.823729][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.831932][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.858385][ T6193] veth1_macvtap: left promiscuous mode [ 286.864777][ T6193] veth0_macvtap: left promiscuous mode [ 286.870540][ T6193] veth1_vlan: left promiscuous mode [ 286.875924][ T6193] veth0_vlan: left promiscuous mode [ 287.358730][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 287.401959][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 287.787846][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.802470][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.819350][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.828590][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.841215][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.853832][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.976530][ T54] Bluetooth: hci0: command tx timeout [ 288.186315][T11034] veth0_macvtap: entered promiscuous mode [ 288.216182][T11034] veth1_macvtap: entered promiscuous mode [ 288.264076][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.273021][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.328623][T11175] netlink: 864 bytes leftover after parsing attributes in process `syz.2.1059'. [ 288.373390][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.384175][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.394606][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.405216][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.417111][T11034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.428251][T11171] lo speed is unknown, defaulting to 1000 [ 288.493012][T11155] chnl_net:caif_netlink_parms(): no params data found [ 288.507199][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.550578][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.569367][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.580012][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.590187][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.600835][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.617444][T11034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.656949][T11034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.678524][T11034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.850796][T11034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.860099][T11034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.870267][T11034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.879111][T11034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.221586][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.229042][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.237078][T11155] bridge_slave_0: entered allmulticast mode [ 289.248805][T11155] bridge_slave_0: entered promiscuous mode [ 289.278524][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.286075][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.294955][T11155] bridge_slave_1: entered allmulticast mode [ 289.304276][T11155] bridge_slave_1: entered promiscuous mode [ 289.348047][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.364449][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.374685][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.422333][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.504923][ T6185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.514410][ T6185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.523798][T11155] team0: Port device team_slave_0 added [ 289.596904][T11155] team0: Port device team_slave_1 added [ 289.695456][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.702831][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.730273][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.741846][T11171] chnl_net:caif_netlink_parms(): no params data found [ 289.755774][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.763702][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.791103][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.860230][ T6193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.889820][ T54] Bluetooth: hci2: command tx timeout [ 289.969113][ T6193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.994027][T11155] hsr_slave_0: entered promiscuous mode [ 290.006827][T11155] hsr_slave_1: entered promiscuous mode [ 290.050316][ T54] Bluetooth: hci0: command tx timeout [ 290.060698][T11171] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.068086][T11171] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.076370][T11171] bridge_slave_0: entered allmulticast mode [ 290.084377][T11171] bridge_slave_0: entered promiscuous mode [ 290.115556][ T6193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.138714][T11171] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.146088][T11171] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.153828][T11171] bridge_slave_1: entered allmulticast mode [ 290.161831][T11171] bridge_slave_1: entered promiscuous mode [ 290.225980][ T6193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.272090][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.294015][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.536749][T11171] team0: Port device team_slave_0 added [ 290.564560][T11171] team0: Port device team_slave_1 added [ 290.701982][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.709096][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.758789][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.976354][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.992206][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.001534][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.013842][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.023810][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.031955][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.069576][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.090207][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.128092][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.247504][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.261938][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.272754][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.287762][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.333584][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.351203][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.417301][ T6193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.513680][T11171] hsr_slave_0: entered promiscuous mode [ 291.520646][T11171] hsr_slave_1: entered promiscuous mode [ 291.536178][T11171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.558820][T11171] Cannot create hsr debugfs directory [ 291.599137][T11203] lo speed is unknown, defaulting to 1000 [ 291.618775][ T6193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.696183][T11215] veth1_to_batadv: entered promiscuous mode [ 291.703144][T11215] macsec1: entered promiscuous mode [ 291.771221][ T6193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.855639][T11207] lo speed is unknown, defaulting to 1000 [ 291.918882][ T6193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.969548][ T54] Bluetooth: hci2: command tx timeout [ 292.130873][ T54] Bluetooth: hci0: command tx timeout [ 292.231311][T11155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.324296][ T6193] bridge_slave_1: left allmulticast mode [ 292.330333][ T6193] bridge_slave_1: left promiscuous mode [ 292.336237][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.353164][ T6193] bridge_slave_0: left allmulticast mode [ 292.358901][ T6193] bridge_slave_0: left promiscuous mode [ 292.376944][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.401766][ T6193] bridge_slave_1: left allmulticast mode [ 292.407586][ T6193] bridge_slave_1: left promiscuous mode [ 292.414542][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.441159][ T6193] bridge_slave_0: left allmulticast mode [ 292.446960][ T6193] bridge_slave_0: left promiscuous mode [ 292.464779][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.576829][T11231] netlink: 'syz.2.1075': attribute type 4 has an invalid length. [ 293.170238][ T54] Bluetooth: hci1: command tx timeout [ 293.206505][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.218262][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.237789][ T6193] bond0 (unregistering): Released all slaves [ 293.383503][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.394677][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.405816][ T6193] bond0 (unregistering): Released all slaves [ 293.420311][T11155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.489858][ T54] Bluetooth: hci4: command tx timeout [ 293.603245][T11155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.808237][T11155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.885789][T11203] chnl_net:caif_netlink_parms(): no params data found [ 294.050558][ T54] Bluetooth: hci2: command tx timeout [ 294.084273][T11207] chnl_net:caif_netlink_parms(): no params data found [ 294.209624][ T54] Bluetooth: hci0: command tx timeout [ 294.218130][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 294.300464][T11248] vlan0: entered promiscuous mode [ 294.306411][T11248] syz_tun: entered promiscuous mode [ 294.316356][T11248] syz_tun: left promiscuous mode [ 294.494640][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.509814][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.517211][T11203] bridge_slave_0: entered allmulticast mode [ 294.524712][T11203] bridge_slave_0: entered promiscuous mode [ 294.536174][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.544212][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.552340][T11203] bridge_slave_1: entered allmulticast mode [ 294.561173][T11203] bridge_slave_1: entered promiscuous mode [ 294.592765][T11254] [ 294.595160][T11254] ============================= [ 294.600107][T11254] [ BUG: Invalid wait context ] [ 294.604947][T11254] 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 Not tainted [ 294.612211][T11254] ----------------------------- [ 294.617095][T11254] syz.2.1080/11254 is trying to lock: [ 294.623178][T11254] ffff8880625fb200 (&trie->lock){....}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 294.632177][T11254] other info that might help us debug this: [ 294.638084][T11254] context-{5:5} [ 294.641650][T11254] 2 locks held by syz.2.1080/11254: [ 294.646898][T11254] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 294.656851][T11254] #1: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 294.666264][T11254] stack backtrace: [ 294.669984][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.2.1080 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 294.680827][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 294.690986][T11254] Call Trace: [ 294.694334][T11254] [ 294.697272][T11254] dump_stack_lvl+0x241/0x360 [ 294.701962][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.707181][T11254] ? __pfx__printk+0x10/0x10 [ 294.711778][T11254] ? validate_chain+0x11e/0x5920 [ 294.716754][T11254] __lock_acquire+0x15a8/0x2100 [ 294.721660][T11254] lock_acquire+0x1ed/0x550 [ 294.726183][T11254] ? trie_delete_elem+0x96/0x6a0 [ 294.731151][T11254] ? __pfx_lock_acquire+0x10/0x10 [ 294.736261][T11254] ? __lock_acquire+0x1397/0x2100 [ 294.741326][T11254] _raw_spin_lock_irqsave+0xd5/0x120 [ 294.746647][T11254] ? trie_delete_elem+0x96/0x6a0 [ 294.751640][T11254] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 294.757598][T11254] ? __pfx_lock_acquire+0x10/0x10 [ 294.763339][T11254] ? __pfx___calc_delta+0x10/0x10 [ 294.768406][T11254] trie_delete_elem+0x96/0x6a0 [ 294.773188][T11254] ? __pfx___cant_migrate+0x10/0x10 [ 294.778430][T11254] ? bpf_trace_run4+0x244/0x590 [ 294.783291][T11254] bpf_prog_5186c38a4019a4cb+0x4b/0x4f [ 294.788761][T11254] bpf_trace_run4+0x334/0x590 [ 294.793551][T11254] ? rcu_read_lock_sched_held+0x8d/0x130 [ 294.799310][T11254] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 294.805505][T11254] ? __pfx_bpf_trace_run4+0x10/0x10 [ 294.810778][T11254] ? __pfx_probe_sched_switch+0x10/0x10 [ 294.816704][T11254] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 294.823588][T11254] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 294.829720][T11254] __traceiter_sched_switch+0x98/0xd0 [ 294.835204][T11254] __schedule+0x22bc/0x4c30 [ 294.839804][T11254] ? mark_lock+0x9a/0x360 [ 294.844142][T11254] ? cgroup_rstat_updated+0x13b/0xc30 [ 294.849546][T11254] ? __pfx___schedule+0x10/0x10 [ 294.854429][T11254] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.860413][T11254] ? preempt_schedule+0xe1/0xf0 [ 294.865274][T11254] preempt_schedule_common+0x84/0xd0 [ 294.870605][T11254] preempt_schedule+0xe1/0xf0 [ 294.875399][T11254] ? __pfx_preempt_schedule+0x10/0x10 [ 294.880897][T11254] ? lockdep_hardirqs_on+0x99/0x150 [ 294.886156][T11254] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.892152][T11254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.898493][T11254] preempt_schedule_thunk+0x1a/0x30 [ 294.903986][T11254] try_to_wake_up+0x9c3/0x1470 [ 294.908775][T11254] ? __pfx_try_to_wake_up+0x10/0x10 [ 294.913990][T11254] ? __pfx_lock_release+0x10/0x10 [ 294.919041][T11254] ? plist_del+0x3f1/0x410 [ 294.923642][T11254] ? do_raw_spin_unlock+0x13c/0x8b0 [ 294.928871][T11254] wake_up_q+0xc8/0x120 [ 294.933091][T11254] futex_wake+0x523/0x5c0 [ 294.937461][T11254] ? __pfx_futex_wake+0x10/0x10 [ 294.942441][T11254] do_futex+0x392/0x560 [ 294.946702][T11254] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 294.952432][T11254] ? __pfx_do_futex+0x10/0x10 [ 294.957200][T11254] ? __pfx___sys_bpf+0x10/0x10 [ 294.962148][T11254] __se_sys_futex+0x3f9/0x480 [ 294.966849][T11254] ? __pfx___se_sys_futex+0x10/0x10 [ 294.972179][T11254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.978532][T11254] ? do_syscall_64+0x100/0x230 [ 294.983426][T11254] ? __x64_sys_futex+0x21/0xf0 [ 294.988221][T11254] do_syscall_64+0xf3/0x230 [ 294.993093][T11254] ? clear_bhb_loop+0x35/0x90 [ 294.997889][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.003899][T11254] RIP: 0033:0x7f77ebd85d19 [ 295.008442][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.028156][T11254] RSP: 002b:00007f77ecc020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.036581][T11254] RAX: ffffffffffffffda RBX: 00007f77ebf75fa8 RCX: 00007f77ebd85d19 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.044638][T11254] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f77ebf75fac [ 295.053219][T11254] RBP: 00007f77ebf75fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 295.061206][T11254] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f77ebf75fac [ 295.069213][T11254] R13: 0000000000000000 R14: 00007ffc3bc8fca0 R15: 00007ffc3bc8fd88 [ 295.077307][T11254] [ 295.180877][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.249906][ T54] Bluetooth: hci1: command tx timeout [ 295.748168][ T6193] hsr_slave_0: left promiscuous mode [ 295.767454][ T6193] hsr_slave_1: left promiscuous mode [ 295.788498][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.797360][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.806904][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.817907][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.828375][ T6193] hsr_slave_0: left promiscuous mode [ 295.834361][ T6193] hsr_slave_1: left promiscuous mode [ 295.845439][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.853316][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.864370][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.872085][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.886164][ T6193] veth1_macvtap: left promiscuous mode [ 295.892447][ T6193] veth0_macvtap: left promiscuous mode [ 295.898037][ T6193] veth1_vlan: left promiscuous mode [ 295.903561][ T6193] veth0_vlan: left promiscuous mode [ 295.910211][ T6193] veth1_macvtap: left promiscuous mode [ 295.915751][ T6193] veth0_macvtap: left promiscuous mode [ 295.921439][ T6193] veth1_vlan: left promiscuous mode [ 295.926734][ T6193] veth0_vlan: left promiscuous mode [ 296.148684][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 296.174094][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 296.444254][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 296.478096][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 297.574289][ T6193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.625996][ T6193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.665565][ T6193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.725107][ T6193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.800217][ T6193] bridge_slave_1: left allmulticast mode [ 297.805919][ T6193] bridge_slave_1: left promiscuous mode [ 297.812530][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.822328][ T6193] bridge_slave_0: left allmulticast mode [ 297.828005][ T6193] bridge_slave_0: left promiscuous mode [ 297.834320][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.844641][ T6193] bridge_slave_1: left allmulticast mode [ 297.850464][ T6193] bridge_slave_1: left promiscuous mode [ 297.856136][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.864280][ T6193] bridge_slave_0: left allmulticast mode [ 297.870118][ T6193] bridge_slave_0: left promiscuous mode [ 297.875777][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.885267][ T6193] bridge_slave_1: left allmulticast mode [ 297.891161][ T6193] bridge_slave_1: left promiscuous mode [ 297.896914][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.906519][ T6193] bridge_slave_0: left allmulticast mode [ 297.912728][ T6193] bridge_slave_0: left promiscuous mode [ 297.918411][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.928260][ T6193] bridge_slave_1: left allmulticast mode [ 297.934145][ T6193] bridge_slave_1: left promiscuous mode [ 297.940718][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.949161][ T6193] bridge_slave_0: left allmulticast mode [ 297.955231][ T6193] bridge_slave_0: left promiscuous mode [ 297.960997][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.353829][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.363949][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.373971][ T6193] bond0 (unregistering): Released all slaves [ 298.383171][ T6193] bond0 (unregistering): Released all slaves [ 298.394796][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.405065][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.415081][ T6193] bond0 (unregistering): Released all slaves [ 298.426981][ T6193] bond0 (unregistering): Released all slaves [ 298.442600][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.458151][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.469056][ T6193] bond0 (unregistering): Released all slaves [ 298.964952][ T6193] hsr_slave_0: left promiscuous mode [ 298.976157][ T6193] hsr_slave_1: left promiscuous mode [ 298.982939][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.992661][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.004054][ T6193] hsr_slave_0: left promiscuous mode [ 299.012278][ T6193] hsr_slave_1: left promiscuous mode [ 299.018606][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.026952][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.037398][ T6193] hsr_slave_0: left promiscuous mode [ 299.044119][ T6193] hsr_slave_1: left promiscuous mode [ 299.051766][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.059188][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.067119][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.075261][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.085805][ T6193] veth1_macvtap: left promiscuous mode [ 299.092293][ T6193] veth0_macvtap: left promiscuous mode [ 299.097960][ T6193] veth1_vlan: left promiscuous mode [ 299.103983][ T6193] veth0_vlan: left promiscuous mode [ 299.258607][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 299.287241][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 299.488769][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 299.512884][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 299.745846][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 299.773948][ T6193] team0 (unregistering): Port device team_slave_0 removed