last executing test programs: 1m13.410829326s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m13.410501144s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m13.410242828s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m12.90004538s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m2.748488808s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 58.060947595s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 44.637864177s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 42.071417807s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 27.192193332s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 25.822738763s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.230831865s ago: executing program 0 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000480)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000002000000030000000a00000000050400", @ANYRES32, @ANYBLOB="000000000100000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140), 0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="07efb4cdf676ddd4b4", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f00000014c0), &(0x7f0000001500)=r2}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) r7 = socket(0x0, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd5}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.761107653s ago: executing program 4 (id=1527): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000004fe1221b00000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f0000000400)=""/4096, 0x2a, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8001, 0x1, 0x6, 0x2080, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xb, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)='%pS \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x81) r12 = accept4(r11, 0x0, 0x0, 0x0) sendfile(r12, r10, 0x0, 0xfacf) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x1a36, '\x00', r4, r10, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0x800, 0xfffffff7, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xd, @void, @value, @void, @value}, 0x48) write$cgroup_int(r13, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r6, r7, r8, r9, 0x1, r10, 0x1, r14], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x8}], 0x10, 0x5, @void, @value}, 0x90) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r16, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.345236713s ago: executing program 3 (id=1947): socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x811, r0, 0xd1ffe000) close(r0) 1.341773303s ago: executing program 2 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006007f0000000800050002"], 0x40}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006007f0000000800050002"], 0x40}}, 0x0) 1.210131236s ago: executing program 3 (id=1950): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f00000011c0), 0x0, &(0x7f0000001240)=[{0x38, 0x6, 0x5, "e5f6819bd800042d7a5878ec07cd42bff22c329aa6762ce1766f8c6915c590fa921c4f"}, {0x78, 0x10c, 0x1, "ade0d63f61dbec6713e76e5497f9b5669ab8b9cd38ff28ff502a157794f513e138f5d3600dbe07d44837d31f0f021df986516f770399288bc713de0fb294aad9d133021a46c18e1dc14a54394a4b10587042548c3121e639da91f5f56ee4dc2c4b0b1895d1"}, {0xf8, 0x3a, 0x8, "8fdae74076b61d7c545984b8398b93ffc1da748e52c6302e59473e683f06b72ba064fd96f3f3349b66104fe332960c6054d22e988a931114077699fc27d36cd0aedf52d1301b7857498a9d385d395c76b000f77d82c2904795440d75b95db3f7c46bc2ebbcdff88f6b36f7c2b864dced3db6c881ed292c3214145a2bcaa4a05bfc8a01e0015c1e4a56af01518374d7d0162a145153f47b1ace279923c481b2755b44600da505efe08ef6ba05bec8f8a821a565a6216f71deef719ff2be9c82483acc043939efd8efe896bce9f2d7cd0bbd6b93715c1e396a54d8a35bb0ab6f0c0cb2f5"}, {0x48, 0x10c, 0x1, "c7d6ec237ee2a45bf5b3ddf2b3a183bd86fb357094017d874a2e3bebd3e918a20d09fa43d1499b0e9e44b7a704a554c802"}, {0x1018, 0x119, 0x4, "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"}], 0x1208}}], 0x1, 0x0) (async, rerun: 32) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x1) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1.157134875s ago: executing program 2 (id=1951): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 996.564413ms ago: executing program 3 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e65409da6d1b17a4011f521355b39abbea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d643b00a27f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4b7de3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000070414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d9871338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966f02000000a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c701652e8c6eea6d87ef74e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ada1d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92c9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534cfb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a00000000000000000000000000c09b1c485730d67a5774eed2a26f12969726405892f545daed1d002d4693495ef5c3c2c2df1803ef5476bb3d4898792a6424a9457360703bbc35e08377ccffe1788d74fda46a1747fa63c34004add111108a4c85088ede47caa067a82e09ee54c13f155d4c9c381ecb52a877fade77960fdcb9602a1929a97557e4f04bfc5b57278e474148854ad523094f30c2a49107d6d52f21e7f531ee64c222cb0c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4"}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 917.27505ms ago: executing program 1 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009001000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x20}]}}}]}, 0x3c}}, 0x0) 908.82868ms ago: executing program 2 (id=1955): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000001b00)={{0x2, 0x4e24, @remote}, {0x6, @remote}, 0x0, {0x2, 0x4e23, @loopback}, 'syzkaller1\x00'}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x67, &(0x7f00000008c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00313aff"], 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x19, 0x0, 0xfcd8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="78000000000000cd00f3e9559d0cab2096716b99d34a17f110", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a80140007"], 0x78}}, 0x0) 790.63208ms ago: executing program 1 (id=1956): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x164}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000004ac0)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca84d360a7a793cdcadfecfd6cc1b312460a54c1e4a6782ec9ce0e299ff2ed8296555289fb6af4b576408a34f8a2779d3dc1a749536a4ecb64522ec725c57dfd9fbc2159c1dfbb40086b331b383029fe0a22ed74e0245909880964443718d1b44d9fbda51ee4f67cd8582f47b155098c408578012cf1abfa162f64da31fd16df164e470b7065861267d5823923fdfabda2d844de999c20806e01edd5e011504278a8f31fa751a757f060d3dcd62fec5f4fda9a4454d754b75ae16ee431d2d7edfda0a869e0a44df651e0ed900cd498509e391c4ba7857d273ed5464c212da7e1d5b6c7a69192a814b447ab60c8258da76cc140a4a532a318d90679c535afd8b43954df5ce90d30be713f5195a8dd4437f6204bb5683efadbf02f96fa0a4bb2b22f4cc0ded53bd8d9d693430dea403f3dc4cfa8f925afc8ae91271a009b5ffeab64ed38ba09bfac86304adf17f069e8cf87d32c7f22267327b3300009debe2f20b59f9a394b6d2fed63fa770ad081bddb65484cf4fa7360987202558ff09ba4a8e783cdedb31141fe23236edace46f2f1c5e931fb31acce60ee84a0987a70c0be8a44cc7c21626db60ce04c85c8c7f5d59d819b5e2c1effcce4b777b6c5e5c19c5e51956f3bf946393dc7c8dcb4bd007c30304c5fb1e6e7c98f0bfc02e51143ef069aca54606567391200e694facbf777fb4eee9f0092030fd5beefe08b830526912cc47bec29d3c29d3ca4b45799889e8c6248bc9d87462f2bcd0ae8b117273b48dd3b14d12c2cc34bf630b04832f157f5205abefca3dcd5e8b03887c5e6b6ef2164cfd803835f95e3e6cee5d5100e07b94c3770af57a59d95133f0b5b42fcb2535b34d427b5f33d079f2d6dca92d0752b09607ee0c39bf8bc722316fcbd035431b8d1485fef29d6d9fd364d316838e16a8ecc215701dda55152ea939f4b4391aee643f2daececd6cc21a0d9c8a36ecbe178b9ada17b6bf5bf7024849e9a7c43755a26ba42239ad82514ff280bcf720121d752c261e6f45c69a2a1f9dacb9c16cb773cbdc537f84e9f11441f00dfcee6c74a7963f180e6d63a00d5c6a64a0d7020ef6d96f1a8e9f470a99bc51078e355002c70185341e02da40b21d5872e87863e35cc2860ea7d9810195d16bd4967c5746528e2994f546a98914251deef14c70dbdc7ec51a4b7911d931000ac528e23b06109740aa79c389c5dac0394aec5475c98a9207ddf1616dde7a8e7e8a07af2d39f109d122290e46c9d9a37b87d44ffc2ece736bab99d718cff800d563cfbc724d9", 0x3d2}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) 689.07739ms ago: executing program 3 (id=1957): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x0, 0x1, 0x1ff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000b000000184a000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000180)=[{0x3, 0x1, 0xb, 0xa}, {0x1, 0x3, 0xd, 0x6}, {0x0, 0x3, 0x9, 0x6}, {0x1, 0x4, 0xa, 0x4}, {0x4, 0x4, 0x4000000b, 0x2}], 0x10, 0x8000e4c, @void, @value}, 0x94) 623.962494ms ago: executing program 1 (id=1958): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x88}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x14000) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x14000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r10) (async) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r13, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8955) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r14, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0xc0020044}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x140d, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}}, 0x40080) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r15, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r16, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x40010) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r12, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000050) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000b40)=0x5, 0x4) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r17, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x34}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r17, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r11, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x34}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) bind$rds(0xffffffffffffffff, &(0x7f0000000cc0)={0x2, 0x4e23, @broadcast}, 0x10) 555.483255ms ago: executing program 2 (id=1959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x891d, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000200)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x62}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 406.294945ms ago: executing program 1 (id=1960): r0 = socket$inet(0xa, 0x6, 0x6) listen(r0, 0x81) listen(r0, 0xfffffff7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='svcrdma_rq_post_err\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x2a45, @any, 0x0, 0x1}, 0xe) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x200, 0x8, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x40, 0x5, 0xffffff01}}) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r9], 0x44}}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0xecc, 0x200, 0xa00, r10, 0x9d8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580), 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x29, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000008100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\b\x00!\x00\x00', @ANYRES32=r11, @ANYBLOB="0000000000000000950000000000000085200000020000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000098e80000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000008b70fefffcffffff850000006a000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x13, &(0x7f00000001c0)=""/19, 0x41000, 0x1, '\x00', r6, 0x25, r12, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x0, 0x38b}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)=[{0x1, 0x2, 0x10, 0x5}, {0x0, 0x2, 0x5, 0xa}, {0x4, 0x3, 0x7, 0xf}], 0x10, 0xcb26, @void, @value}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000c0000de030000100100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r14, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r15, &(0x7f0000000000)='Q', 0x0}, 0x20) 308.403648ms ago: executing program 3 (id=1961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x59, "6f932fbd7aa4d2f28ca755c519fce314a9af9b0a240e2403a9926966a29d98bb78b5ff6024a0101eb0873367b0c01a82d48a4a2d866b3ac479d2edbf4c5298ac0b1b0e2c3e20d4fc35c0690e99380219109eb74dfb7e353e63"}], 0x88, 0xc000}, 0x0) sendmmsg$alg(r1, &(0x7f0000005440)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="38e3202b249ee856bb8bd696ed92519f78d4b2342764dfccab4a9c", 0x1b}, {&(0x7f0000000400)="10058a283a66142674b21e5b44bab94badc2c32b6cfb3907d6bea361a1491db6b9c26434730ab3bc16fa5a6d47f63f9cae81222f049ce0b87ae62979bd907854e7a1aa1dcfb057cd9d0a6193d2b66ee67382418a9dcba4628fcfd74ed8b3abd3227bce", 0x63}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/130, 0x82}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x100, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, {0x0, 0x0, 0x0, 0x81}, {0x0, 0x1, 0x8000}, {}, 0x0, 0x3503, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000540)=0x8, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000025c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002600)={0x34, r8, 0x9, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) 287.665676ms ago: executing program 2 (id=1962): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'veth1_macvtap\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080), 0x4) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000001a1a05000700000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x404c8d0}, 0x0) close(r1) 197.225497ms ago: executing program 1 (id=1963): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="90020ec29ad0d72204000e210806000108000604000180b572da3e9647000000ae513569487147"], 0x120) sendmmsg$inet6(r0, &(0x7f0000004680)=[{{&(0x7f0000001f00)={0xa, 0x4e22, 0x3, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000002180)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, 0x0}}], 0x2, 0x80) 132.976356ms ago: executing program 2 (id=1964): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18200b660770e0000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000040000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 52.659117ms ago: executing program 1 (id=1965): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xbc, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0xbc}}, 0x0) 0s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000780)="0d0ad7", 0x3, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a70ddb", 0x0, 0x3a, 0x30d66df472e0f96c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}}}, 0x0) sendto$inet6(r2, &(0x7f0000000140)="44b165", 0x3, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6b2f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES8=r0], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): id problems! [ 324.369260][T12284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.382046][T12284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.393420][T12284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.404442][T12284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.417974][T12284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.453928][T12284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.464686][T12284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.491581][T12284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.514394][T12284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.532821][T12284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.568218][T12284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.577207][T12284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.586741][T12284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.650654][ T7908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.802997][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.814589][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.814656][ T7908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.824265][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.847284][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.863083][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 324.871165][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.928356][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.936325][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.072614][ T7896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.091204][ T7896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.103047][ T7908] bridge_slave_1: left allmulticast mode [ 325.110767][ T7908] bridge_slave_1: left promiscuous mode [ 325.116546][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.130932][ T7908] bridge_slave_0: left allmulticast mode [ 325.136869][ T7908] bridge_slave_0: left promiscuous mode [ 325.144903][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.428489][ T5234] Bluetooth: hci4: command tx timeout [ 325.685942][ T7908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.698975][ T7908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.714959][ T7908] bond0 (unregistering): Released all slaves [ 326.003542][T12303] chnl_net:caif_netlink_parms(): no params data found [ 326.162674][ T7908] hsr_slave_0: left promiscuous mode [ 326.172842][ T7908] hsr_slave_1: left promiscuous mode [ 326.180624][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.188758][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.197700][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.205675][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.233168][ T7908] veth1_macvtap: left promiscuous mode [ 326.238891][ T7908] veth0_macvtap: left promiscuous mode [ 326.244503][ T7908] veth1_vlan: left promiscuous mode [ 326.250970][ T7908] veth0_vlan: left promiscuous mode [ 326.935206][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 326.959612][ T5234] Bluetooth: hci3: command tx timeout [ 327.013058][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 327.687906][T12303] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.700397][T12303] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.709442][T12303] bridge_slave_0: entered allmulticast mode [ 327.717058][T12303] bridge_slave_0: entered promiscuous mode [ 327.753248][T12303] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.780851][T12303] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.788425][T12303] bridge_slave_1: entered allmulticast mode [ 327.796242][T12303] bridge_slave_1: entered promiscuous mode [ 327.851461][T12303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.871634][T12303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.936911][T12303] team0: Port device team_slave_0 added [ 327.950140][T12303] team0: Port device team_slave_1 added [ 328.019163][T12303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.026169][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.053993][T12303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.067898][T12303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.075729][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.107017][T12303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.167804][T12303] hsr_slave_0: entered promiscuous mode [ 328.176250][T12303] hsr_slave_1: entered promiscuous mode [ 328.183310][T12303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.191650][T12303] Cannot create hsr debugfs directory [ 328.558865][ T7908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.760788][T12303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.773150][T12303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.787824][T12303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.819488][T12303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.925475][T12303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.956553][T12303] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.973424][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.980645][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.003093][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.010292][ T7909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.028749][ T5234] Bluetooth: hci3: command tx timeout [ 329.236377][T12303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.485176][T12303] veth0_vlan: entered promiscuous mode [ 329.500146][T12303] veth1_vlan: entered promiscuous mode [ 329.539741][T12303] veth0_macvtap: entered promiscuous mode [ 329.554432][T12303] veth1_macvtap: entered promiscuous mode [ 329.583304][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.594700][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.604839][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.615588][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.627543][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.639112][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.650875][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.661836][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.677007][T12303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.694966][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.706296][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.717257][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.728895][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.740429][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.753904][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.764043][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.775052][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.787100][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.797652][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.808584][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.819372][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.832587][T12303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.850163][T12303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.862687][T12303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.872742][T12303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.881816][T12303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.997690][ T7908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.037583][ T7909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.046081][ T7909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.107056][ T7908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.135283][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.143466][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.234544][ T7908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.436432][ T7908] bridge_slave_1: left allmulticast mode [ 330.442805][ T7908] bridge_slave_1: left promiscuous mode [ 330.448762][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.460758][ T7908] bridge_slave_0: left allmulticast mode [ 330.466466][ T7908] bridge_slave_0: left promiscuous mode [ 330.488581][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.586287][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.613718][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.623673][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.639643][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.659259][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.669419][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.095953][ T7908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.113508][ T7908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.132398][ T7908] bond0 (unregistering): Released all slaves [ 331.504993][ T7908] hsr_slave_0: left promiscuous mode [ 331.517364][ T7908] hsr_slave_1: left promiscuous mode [ 331.525384][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.534607][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.543048][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.551764][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.579930][ T7908] veth1_macvtap: left promiscuous mode [ 331.586082][ T7908] veth0_macvtap: left promiscuous mode [ 331.593185][ T7908] veth1_vlan: left promiscuous mode [ 331.599616][ T7908] veth0_vlan: left promiscuous mode [ 332.317466][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 332.390370][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 332.713929][ T5234] Bluetooth: hci3: command tx timeout [ 333.280941][T12322] chnl_net:caif_netlink_parms(): no params data found [ 333.538530][T12322] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.566210][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.573720][T12322] bridge_slave_0: entered allmulticast mode [ 333.581725][T12322] bridge_slave_0: entered promiscuous mode [ 333.591920][T12322] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.600429][T12322] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.607721][T12322] bridge_slave_1: entered allmulticast mode [ 333.616972][T12322] bridge_slave_1: entered promiscuous mode [ 333.673021][T12322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.686059][T12322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.751233][T12322] team0: Port device team_slave_0 added [ 333.771793][T12322] team0: Port device team_slave_1 added [ 333.837058][T12322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.858775][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.896019][T12322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.926236][T12322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.942966][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.970966][T12322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.030541][T12322] hsr_slave_0: entered promiscuous mode [ 334.039300][T12322] hsr_slave_1: entered promiscuous mode [ 334.045782][T12322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.055203][T12322] Cannot create hsr debugfs directory [ 334.160523][ T7908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.686865][T12322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.714580][T12322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.737046][T12322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.755116][T12322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.774994][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.784989][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.795744][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.801925][ T5239] Bluetooth: hci3: command tx timeout [ 334.823376][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.832392][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.842204][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.983099][T12322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.037849][T12322] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.077805][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.085121][ T7896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.147469][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.154735][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.235292][T12331] chnl_net:caif_netlink_parms(): no params data found [ 335.276405][ T7908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.374607][ T7908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.516731][ T7908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.533794][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.549610][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.556964][T12331] bridge_slave_0: entered allmulticast mode [ 335.577922][T12331] bridge_slave_0: entered promiscuous mode [ 335.610464][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.617649][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.630394][T12331] bridge_slave_1: entered allmulticast mode [ 335.637504][T12331] bridge_slave_1: entered promiscuous mode [ 335.685827][T12331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.712299][T12331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.727099][T12322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.785446][T12331] team0: Port device team_slave_0 added [ 335.811280][T12331] team0: Port device team_slave_1 added [ 335.859344][T12331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.866430][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.893442][T12331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.928709][T12331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.935767][T12331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.963092][T12331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.031900][ T7908] bridge_slave_1: left allmulticast mode [ 336.037618][ T7908] bridge_slave_1: left promiscuous mode [ 336.044322][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.055417][ T7908] bridge_slave_0: left allmulticast mode [ 336.061653][ T7908] bridge_slave_0: left promiscuous mode [ 336.067473][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.613148][ T7908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.625522][ T7908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.642059][ T7908] bond0 (unregistering): Released all slaves [ 336.690492][T12331] hsr_slave_0: entered promiscuous mode [ 336.697324][T12331] hsr_slave_1: entered promiscuous mode [ 336.715154][T12331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.725061][T12331] Cannot create hsr debugfs directory [ 336.863533][T12322] veth0_vlan: entered promiscuous mode [ 336.868573][ T5234] Bluetooth: hci4: command tx timeout [ 336.869529][ T5239] Bluetooth: hci3: command tx timeout [ 336.928052][T12322] veth1_vlan: entered promiscuous mode [ 337.120272][ T7908] hsr_slave_0: left promiscuous mode [ 337.126692][ T7908] hsr_slave_1: left promiscuous mode [ 337.134298][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.142878][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.153771][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.161806][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.187777][ T7908] veth1_macvtap: left promiscuous mode [ 337.194190][ T7908] veth0_macvtap: left promiscuous mode [ 337.201380][ T7908] veth1_vlan: left promiscuous mode [ 337.206725][ T7908] veth0_vlan: left promiscuous mode [ 337.948448][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 338.024522][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 338.744850][T12322] veth0_macvtap: entered promiscuous mode [ 338.777144][T12322] veth1_macvtap: entered promiscuous mode [ 338.859751][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.872898][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.884025][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.895038][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.912137][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.925836][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.950302][ T5239] Bluetooth: hci4: command tx timeout [ 338.950804][ T5234] Bluetooth: hci3: command tx timeout [ 338.960364][T12322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.013850][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.025482][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.035902][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.047699][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.058643][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.070466][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.081540][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.092136][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.102263][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.113961][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.137872][T12322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.158964][T12322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.167714][T12322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.181812][T12322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.192638][T12322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.348411][ T7888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.356316][ T7888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.418314][ T7888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.428902][ T7888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.466171][T12331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.490581][T12331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.506323][T12331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.565076][T12331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.665189][T12331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.692701][T12331] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.707427][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.714647][ T7908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.735611][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.743030][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.021385][ T7917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.117655][T12331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.195104][ T7917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.365581][ T7917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.503821][T12331] veth0_vlan: entered promiscuous mode [ 340.521787][T12331] veth1_vlan: entered promiscuous mode [ 340.573641][T12331] veth0_macvtap: entered promiscuous mode [ 340.586009][T12331] veth1_macvtap: entered promiscuous mode [ 340.622362][ T7917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.663915][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.677816][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.689178][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.700182][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.711810][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.722404][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.732471][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.744170][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.757100][T12331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.786189][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.809476][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.821168][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.831696][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.841771][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.852892][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.863021][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.875050][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.885190][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.896055][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.906828][T12331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.918834][T12331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.931591][T12331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.962263][T12331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.976385][T12331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.990052][T12331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.004366][T12331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.028637][ T5234] Bluetooth: hci4: command tx timeout [ 341.077750][ T7917] bridge_slave_1: left allmulticast mode [ 341.088176][ T7917] bridge_slave_1: left promiscuous mode [ 341.093951][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.103563][ T7917] bridge_slave_0: left allmulticast mode [ 341.110791][ T7917] bridge_slave_0: left promiscuous mode [ 341.116712][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.665364][ T7917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.677491][ T7917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.691982][ T7917] bond0 (unregistering): Released all slaves [ 341.849130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.857130][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.045426][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.057174][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.221507][ T7917] hsr_slave_0: left promiscuous mode [ 342.245073][ T7917] hsr_slave_1: left promiscuous mode [ 342.273474][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.298131][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.312955][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.325417][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.325931][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.338532][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.358688][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.370415][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.380218][ T7917] veth1_macvtap: left promiscuous mode [ 342.385905][ T7917] veth0_macvtap: left promiscuous mode [ 342.390040][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.391918][ T7917] veth1_vlan: left promiscuous mode [ 342.399706][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.403875][ T7917] veth0_vlan: left promiscuous mode [ 343.157062][ T7917] team0 (unregistering): Port device team_slave_1 removed [ 343.226701][ T7917] team0 (unregistering): Port device team_slave_0 removed [ 344.172681][T12354] chnl_net:caif_netlink_parms(): no params data found [ 344.277293][T12354] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.284811][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.294818][T12354] bridge_slave_0: entered allmulticast mode [ 344.303242][T12354] bridge_slave_0: entered promiscuous mode [ 344.313465][T12354] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.320969][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.329901][T12354] bridge_slave_1: entered allmulticast mode [ 344.337662][T12354] bridge_slave_1: entered promiscuous mode [ 344.381425][T12354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.396849][T12354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.435891][T12354] team0: Port device team_slave_0 added [ 344.447912][T12354] team0: Port device team_slave_1 added [ 344.478432][ T5234] Bluetooth: hci3: command tx timeout [ 344.483466][T12354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.492234][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.519700][T12354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.533011][T12354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.540590][T12354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.567133][T12354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.692329][T12368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1588'. [ 344.698560][T12354] hsr_slave_0: entered promiscuous mode [ 344.727583][T12354] hsr_slave_1: entered promiscuous mode [ 344.758453][T12354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.766088][T12354] Cannot create hsr debugfs directory [ 344.800715][T12373] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 345.429933][ T7908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.724608][ T7908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.863735][ T7908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.951525][ T7908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.228330][ T7908] bridge_slave_1: left allmulticast mode [ 346.234227][ T7908] bridge_slave_1: left promiscuous mode [ 346.263066][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.285092][ T7908] bridge_slave_0: left allmulticast mode [ 346.305498][ T7908] bridge_slave_0: left promiscuous mode [ 346.326037][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.548323][ T5234] Bluetooth: hci3: command tx timeout [ 346.625664][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.636243][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.662471][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.673220][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.694951][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.721272][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 347.143266][ T7908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.155739][ T7908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.172062][ T7908] bond0 (unregistering): Released all slaves [ 347.663353][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1601'. [ 347.830041][T12354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.841809][T12354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.863251][ T7908] hsr_slave_0: left promiscuous mode [ 347.871787][ T7908] hsr_slave_1: left promiscuous mode [ 347.883487][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.892816][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.902252][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.912269][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.947326][ T7908] veth1_macvtap: left promiscuous mode [ 347.955734][ T7908] veth0_macvtap: left promiscuous mode [ 347.961964][ T7908] veth1_vlan: left promiscuous mode [ 347.969510][ T7908] veth0_vlan: left promiscuous mode [ 348.628472][ T5234] Bluetooth: hci3: command tx timeout [ 348.728402][ T7908] team0 (unregistering): Port device team_slave_1 removed [ 348.788270][ T7908] team0 (unregistering): Port device team_slave_0 removed [ 348.796647][ T5234] Bluetooth: hci4: command tx timeout [ 349.478505][T12354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.537401][T12354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.852607][T12438] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1607'. [ 349.862293][T12438] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 349.960523][T12449] netlink: 'syz.2.1609': attribute type 16 has an invalid length. [ 350.037268][T12403] chnl_net:caif_netlink_parms(): no params data found [ 350.156441][T12354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.220628][T12460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.399734][T12468] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1613'. [ 350.471426][T12403] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.498516][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.505797][T12403] bridge_slave_0: entered allmulticast mode [ 350.525279][T12403] bridge_slave_0: entered promiscuous mode [ 350.554359][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.570380][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.577746][T12403] bridge_slave_1: entered allmulticast mode [ 350.607316][T12403] bridge_slave_1: entered promiscuous mode [ 350.643135][T12354] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.702672][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.710405][ T5234] Bluetooth: hci3: command tx timeout [ 350.720951][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.869274][ T5234] Bluetooth: hci4: command tx timeout [ 350.898354][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.905592][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.965120][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.992792][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.010351][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.018141][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.123107][T12403] team0: Port device team_slave_0 added [ 351.145874][T12403] team0: Port device team_slave_1 added [ 351.275617][T12354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.315011][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 351.348346][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 351.371438][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.389415][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.467510][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.518602][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.525601][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.586121][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.750863][T12403] hsr_slave_0: entered promiscuous mode [ 351.776881][T12403] hsr_slave_1: entered promiscuous mode [ 351.794748][T12403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.802557][T12403] Cannot create hsr debugfs directory [ 351.864117][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 351.879287][T12514] xt_hashlimit: invalid interval [ 351.991758][T12354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.193487][T12523] pimreg3: entered allmulticast mode [ 352.302203][T12354] veth0_vlan: entered promiscuous mode [ 352.417615][T12354] veth1_vlan: entered promiscuous mode [ 352.526720][T12354] veth0_macvtap: entered promiscuous mode [ 352.585401][T12354] veth1_macvtap: entered promiscuous mode [ 352.721065][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.742446][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.768101][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.788516][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.809959][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.830671][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.844275][T12354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.911805][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.949357][ T5234] Bluetooth: hci4: command tx timeout [ 352.956076][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.991203][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.018121][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.038047][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.058163][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.083369][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.120198][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.158626][T12354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.178529][T12354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.193669][T12354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.266007][T12354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.286091][T12354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.304062][T12354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.328500][T12354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.532300][T12403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.584642][T12403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.630740][T12403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.655353][T12403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.662567][ T7918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.689665][ T7918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.763341][ T7918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.776123][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 353.786232][ T7918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.799804][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 354.091479][T12403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.145725][T12403] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.172850][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.180164][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.202619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.210006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.372155][T12403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.909870][T12403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.047794][ T5234] Bluetooth: hci4: command tx timeout [ 355.135760][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 355.158616][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.173195][T12633] batman_adv: batadv0: Adding interface: netdevsim0 [ 355.180073][T12633] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.231205][T12633] batman_adv: batadv0: Interface activated: netdevsim0 [ 355.420843][T12640] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1661'. [ 355.460689][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 355.715444][ T7909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.800503][ T7909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.824354][T12403] veth0_vlan: entered promiscuous mode [ 355.844384][T12403] veth1_vlan: entered promiscuous mode [ 355.890983][ T7909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.937056][T12403] veth0_macvtap: entered promiscuous mode [ 355.977833][ T7909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.001313][T12403] veth1_macvtap: entered promiscuous mode [ 356.026288][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.037779][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.049035][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.059909][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.071971][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.082719][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.093565][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.104333][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.116411][T12403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.133291][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.145397][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.156216][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.168591][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.179258][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.190151][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.200488][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.211496][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.221693][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.232947][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.245454][T12403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.256071][T12403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.267607][T12403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.294721][T12403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.303854][T12403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.314599][T12403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.323534][T12403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.397496][ T7909] bridge_slave_1: left allmulticast mode [ 356.403476][ T7909] bridge_slave_1: left promiscuous mode [ 356.409860][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.421088][ T7909] bridge_slave_0: left allmulticast mode [ 356.426765][ T7909] bridge_slave_0: left promiscuous mode [ 356.433604][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.005444][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.024364][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.036783][ T7909] bond0 (unregistering): Released all slaves [ 357.172963][ T7908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.188514][ T7908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.264514][ T7918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.272657][ T7918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.649928][ T7909] hsr_slave_0: left promiscuous mode [ 357.685955][ T7909] hsr_slave_1: left promiscuous mode [ 357.700495][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.720421][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.738475][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.746063][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.806839][ T7909] veth1_macvtap: left promiscuous mode [ 357.818592][ T7909] veth0_macvtap: left promiscuous mode [ 357.824314][ T7909] veth1_vlan: left promiscuous mode [ 357.841282][ T7909] veth0_vlan: left promiscuous mode [ 357.869430][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.880465][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.894642][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.904605][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.918828][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.934746][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.520983][T12676] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 358.668721][T12679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1668'. [ 358.826281][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 358.890910][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 359.997280][ T5234] Bluetooth: hci3: command tx timeout [ 360.114684][T12701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1674'. [ 360.316669][T12666] chnl_net:caif_netlink_parms(): no params data found [ 360.431160][ T7909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.507032][ T7909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.566708][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.576563][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.584893][T12666] bridge_slave_0: entered allmulticast mode [ 360.596997][T12666] bridge_slave_0: entered promiscuous mode [ 360.635869][ T7909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.649689][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.656877][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.665116][T12666] bridge_slave_1: entered allmulticast mode [ 360.673266][T12666] bridge_slave_1: entered promiscuous mode [ 360.714707][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.747426][ T7909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.763648][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.813628][T12666] team0: Port device team_slave_0 added [ 360.824996][T12666] team0: Port device team_slave_1 added [ 360.867037][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.878153][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.905643][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.931383][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.945296][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.972965][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.042782][T12666] hsr_slave_0: entered promiscuous mode [ 361.053055][T12666] hsr_slave_1: entered promiscuous mode [ 361.059815][T12666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.067412][T12666] Cannot create hsr debugfs directory [ 361.116158][ T7909] bridge_slave_1: left allmulticast mode [ 361.122021][ T7909] bridge_slave_1: left promiscuous mode [ 361.131163][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.188713][ T7909] bridge_slave_0: left allmulticast mode [ 361.203906][ T7909] bridge_slave_0: left promiscuous mode [ 361.219805][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.733721][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.751227][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.773077][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.789347][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.806165][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 361.826194][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.078290][ T5234] Bluetooth: hci3: command tx timeout [ 362.111194][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.127722][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.145692][ T7909] bond0 (unregistering): Released all slaves [ 362.781326][ T7909] hsr_slave_0: left promiscuous mode [ 362.801587][ T7909] hsr_slave_1: left promiscuous mode [ 362.819287][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.840186][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.855866][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.872942][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.934336][ T7909] veth1_macvtap: left promiscuous mode [ 362.940318][ T7909] veth0_macvtap: left promiscuous mode [ 362.946231][ T7909] veth1_vlan: left promiscuous mode [ 362.952453][ T7909] veth0_vlan: left promiscuous mode [ 363.742945][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 363.814031][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 363.913864][ T5234] Bluetooth: hci4: command tx timeout [ 364.154397][ T5234] Bluetooth: hci3: command tx timeout [ 364.492249][T12754] syz_tun: entered promiscuous mode [ 364.544477][T12756] syz_tun: left promiscuous mode [ 364.817129][T12775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.033287][T12729] chnl_net:caif_netlink_parms(): no params data found [ 365.062730][T12780] netlink: 'syz.3.1693': attribute type 49 has an invalid length. [ 365.219766][T12666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.251958][T12666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.267694][T12666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.312546][T12666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.412470][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.435744][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.456119][T12729] bridge_slave_0: entered allmulticast mode [ 365.476286][T12729] bridge_slave_0: entered promiscuous mode [ 365.550413][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.557575][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.580351][T12729] bridge_slave_1: entered allmulticast mode [ 365.584250][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.592067][T12729] bridge_slave_1: entered promiscuous mode [ 365.707902][T12729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.730927][T12729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.768464][T12804] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1701'. [ 365.822098][T12729] team0: Port device team_slave_0 added [ 365.844072][T12729] team0: Port device team_slave_1 added [ 365.945924][T12729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.958144][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.995728][ T5234] Bluetooth: hci4: command tx timeout [ 366.002859][T12729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.028826][T12729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.036039][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.064209][T12729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.104664][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.228431][ T5234] Bluetooth: hci3: command tx timeout [ 366.236057][T12810] bond0: option resend_igmp: invalid value (7540) [ 366.243386][T12810] bond0: option resend_igmp: allowed values 0 - 255 [ 366.324389][T12822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.360609][T12729] hsr_slave_0: entered promiscuous mode [ 366.380223][T12729] hsr_slave_1: entered promiscuous mode [ 366.393933][T12729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.410469][T12729] Cannot create hsr debugfs directory [ 366.490055][T12826] netlink: 'syz.3.1706': attribute type 34 has an invalid length. [ 366.587315][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.690083][T12832] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1709'. [ 366.792722][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.800180][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.908487][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.915691][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.082102][T12837] syzkaller0: entered promiscuous mode [ 367.087629][T12837] syzkaller0: entered allmulticast mode [ 368.072106][ T5234] Bluetooth: hci4: command tx timeout [ 370.148626][ T5234] Bluetooth: hci4: command tx timeout [ 370.692698][T12729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.731177][T12729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.786551][T12729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.824688][T12729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.929104][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.193232][T12889] team0: entered promiscuous mode [ 371.208876][T12889] team_slave_0: entered promiscuous mode [ 371.228626][T12889] team_slave_1: entered promiscuous mode [ 371.272205][T12889] team_slave_0: entered allmulticast mode [ 371.332284][T12889] team0: Port device team_slave_0 removed [ 371.355716][T12666] veth0_vlan: entered promiscuous mode [ 371.373234][T12888] team0: left promiscuous mode [ 371.390550][T12888] team_slave_1: left promiscuous mode [ 371.437281][T12666] veth1_vlan: entered promiscuous mode [ 371.552150][T12729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.596561][T12896] Bluetooth: MGMT ver 1.23 [ 371.694493][T12729] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.722022][T12666] veth0_macvtap: entered promiscuous mode [ 371.765898][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.773116][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.791257][T12666] veth1_macvtap: entered promiscuous mode [ 371.833826][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.841095][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.854546][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 371.874551][T12904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1729'. [ 371.884984][T12906] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 371.893043][T12904] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 371.922337][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.934263][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.946324][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.959308][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.972832][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.984145][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.996796][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.079091][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.091190][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.101448][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.112609][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.122538][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.133166][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.157869][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.175615][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.190930][T12666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.202583][T12666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.216489][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.237156][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'. [ 372.286054][T12666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.305595][T12666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.333529][T12666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.343389][T12666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.630820][ T7903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.645031][ T7903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.736441][ T7903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.745706][ T7903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.804383][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 372.905116][T12729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.130083][T12937] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 373.436382][ T7912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.484447][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1743'. [ 373.540923][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 373.677701][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 373.900865][ T7912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.021926][ T7912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.054423][T12729] veth0_vlan: entered promiscuous mode [ 374.093425][T12729] veth1_vlan: entered promiscuous mode [ 374.160788][T12729] veth0_macvtap: entered promiscuous mode [ 374.235435][ T7912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.271777][T12729] veth1_macvtap: entered promiscuous mode [ 374.304475][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.316344][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.327858][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.339068][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.349196][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.359830][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.371076][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.381802][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.394316][T12729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.412573][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.423306][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.433425][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.445563][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.455482][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.466304][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.477578][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.489282][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.500447][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.512111][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.522091][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.532867][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.544826][T12729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.567623][T12729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.576515][T12729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.586578][T12729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.595975][T12729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.716017][ T7912] bridge_slave_1: left allmulticast mode [ 374.727383][ T7912] bridge_slave_1: left promiscuous mode [ 374.733607][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.748179][ T7912] bridge_slave_0: left allmulticast mode [ 374.754061][ T7912] bridge_slave_0: left promiscuous mode [ 374.760725][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.297488][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.311985][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.327182][ T7912] bond0 (unregistering): Released all slaves [ 375.363733][ T7903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.386771][ T7903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.445179][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.460009][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.932061][T12971] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 375.968577][T12971] macvtap1: entered promiscuous mode [ 375.974136][T12971] macvtap1: entered allmulticast mode [ 376.010615][T12971] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 376.070134][T12971] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 376.097360][T12971] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 376.106583][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.117489][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.126380][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.135889][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.144677][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 376.154398][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.257610][ T7912] hsr_slave_0: left promiscuous mode [ 376.267156][ T7912] hsr_slave_1: left promiscuous mode [ 376.274005][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.289535][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.305680][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.313684][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.339729][ T7912] veth1_macvtap: left promiscuous mode [ 376.346337][ T7912] veth0_macvtap: left promiscuous mode [ 376.352570][ T7912] veth1_vlan: left promiscuous mode [ 376.358030][ T7912] veth0_vlan: left promiscuous mode [ 377.167450][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 377.259734][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 377.503012][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.515408][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.524162][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.536575][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.564956][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.573236][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.162241][T12989] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1751'. [ 378.180110][T12989] veth1_macvtap: left promiscuous mode [ 378.228698][ T5234] Bluetooth: hci3: command tx timeout [ 378.626926][T12976] chnl_net:caif_netlink_parms(): no params data found [ 378.733959][T12985] chnl_net:caif_netlink_parms(): no params data found [ 378.775145][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.782808][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.791160][T12976] bridge_slave_0: entered allmulticast mode [ 378.802909][T12976] bridge_slave_0: entered promiscuous mode [ 378.814237][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.822409][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.832789][T12976] bridge_slave_1: entered allmulticast mode [ 378.858201][T12976] bridge_slave_1: entered promiscuous mode [ 378.904041][T13009] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 378.912243][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 378.947912][ T7912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.962708][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969282][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.121384][ T7912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.147694][T12976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.175251][T12976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.263597][ T7912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.414103][T12976] team0: Port device team_slave_0 added [ 379.448545][ T7912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.465478][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.477715][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.485680][T12985] bridge_slave_0: entered allmulticast mode [ 379.506925][T12985] bridge_slave_0: entered promiscuous mode [ 379.536403][T12976] team0: Port device team_slave_1 added [ 379.552722][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.579525][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.607291][T12985] bridge_slave_1: entered allmulticast mode [ 379.650863][T12985] bridge_slave_1: entered promiscuous mode [ 379.669717][ T5234] Bluetooth: hci4: command tx timeout [ 379.824788][T12976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.834021][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.861053][T12976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.897674][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.909650][T13036] netlink: 'syz.3.1759': attribute type 21 has an invalid length. [ 379.925021][T13036] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 379.939397][T12976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.946485][T12976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.973502][T12976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.990751][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.008563][T13040] netlink: 'syz.1.1760': attribute type 29 has an invalid length. [ 380.016432][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 380.141278][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 380.164014][T13040] netlink: 'syz.1.1760': attribute type 7 has an invalid length. [ 380.173290][T13040] netlink: 'syz.1.1760': attribute type 8 has an invalid length. [ 380.198094][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 380.299288][T12976] hsr_slave_0: entered promiscuous mode [ 380.308511][ T5234] Bluetooth: hci3: command tx timeout [ 380.318640][T12976] hsr_slave_1: entered promiscuous mode [ 380.332633][T12976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.349317][T12976] Cannot create hsr debugfs directory [ 380.356586][T13058] Bluetooth: MGMT ver 1.23 [ 380.394576][T12985] team0: Port device team_slave_0 added [ 380.436804][ T7912] bridge_slave_1: left allmulticast mode [ 380.448645][ T7912] bridge_slave_1: left promiscuous mode [ 380.454529][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.487522][ T7912] bridge_slave_0: left allmulticast mode [ 380.498536][ T7912] bridge_slave_0: left promiscuous mode [ 380.507865][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.111358][ T7912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.126066][ T7912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.139539][ T7912] bond0 (unregistering): Released all slaves [ 381.155870][T12985] team0: Port device team_slave_1 added [ 381.501557][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.531855][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.585001][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.617675][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.624909][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.652496][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.748969][ T5234] Bluetooth: hci4: command tx timeout [ 381.832722][T13089] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1773'. [ 381.939775][ T7912] hsr_slave_0: left promiscuous mode [ 381.949119][ T7912] hsr_slave_1: left promiscuous mode [ 381.959946][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.967527][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.990404][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.997901][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.093186][ T7912] veth1_macvtap: left promiscuous mode [ 382.111218][ T7912] veth0_macvtap: left promiscuous mode [ 382.123490][ T7912] veth1_vlan: left promiscuous mode [ 382.135788][ T7912] veth0_vlan: left promiscuous mode [ 382.321411][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.333962][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.346024][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.359889][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.373018][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 382.380604][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.389453][ T5240] Bluetooth: hci3: command tx timeout [ 383.052229][ T7912] team0 (unregistering): Port device team_slave_1 removed [ 383.125190][ T7912] team0 (unregistering): Port device team_slave_0 removed [ 383.807604][T12985] hsr_slave_0: entered promiscuous mode [ 383.819163][T12985] hsr_slave_1: entered promiscuous mode [ 383.829740][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.837464][T12985] Cannot create hsr debugfs directory [ 383.843096][ T5240] Bluetooth: hci4: command tx timeout [ 383.886657][T13093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.908919][T13096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.035628][T13113] ipt_REJECT: TCP_RESET invalid for non-tcp [ 384.044316][T13113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1780'. [ 384.059150][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1780'. [ 384.337689][T13121] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1781'. [ 384.469321][ T5234] Bluetooth: hci3: command tx timeout [ 384.474998][ T5240] Bluetooth: hci7: command tx timeout [ 384.793040][T13103] chnl_net:caif_netlink_parms(): no params data found [ 384.815656][T12976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.854011][T12976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.930284][T12976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.951024][T12976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.967754][T13131] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 385.086879][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.094585][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.104263][T13103] bridge_slave_0: entered allmulticast mode [ 385.114273][T13103] bridge_slave_0: entered promiscuous mode [ 385.129524][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.136739][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.146792][T13103] bridge_slave_1: entered allmulticast mode [ 385.156736][T13103] bridge_slave_1: entered promiscuous mode [ 385.208811][T13136] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1784'. [ 385.237223][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.257744][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.404691][T13103] team0: Port device team_slave_0 added [ 385.437246][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 385.452240][T13103] team0: Port device team_slave_1 added [ 385.589788][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.596874][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.628429][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.659454][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.667240][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.695333][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.717587][T12985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.734329][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 385.749605][T12985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.817618][T12985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.869168][T13103] hsr_slave_0: entered promiscuous mode [ 385.883229][T13103] hsr_slave_1: entered promiscuous mode [ 385.898724][T13103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.906585][T13103] Cannot create hsr debugfs directory [ 385.913976][ T5240] Bluetooth: hci4: command tx timeout [ 385.920642][T12985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.064267][T12976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.185915][T13158] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 386.279313][T12976] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.308658][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 386.385833][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.393110][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.420400][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.427631][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.511514][T13164] xt_NFQUEUE: number of total queues is 0 [ 386.541530][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 386.551040][ T5240] Bluetooth: hci7: command tx timeout [ 386.583473][T13103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.611237][T13103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.661975][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1795'. [ 386.802282][T13103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.812928][T13103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.963974][T13103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.982056][T13103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.073403][T13103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.097826][T13103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.141448][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1802'. [ 387.159712][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.216991][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.297213][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.304474][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.330692][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.337955][ T7912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.412513][T13188] netlink: 'syz.1.1804': attribute type 1 has an invalid length. [ 387.488840][T13188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.561672][T13197] bond2: (slave ip6gretap1): making interface the new active one [ 387.585127][T13197] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 387.632461][T13188] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 387.632461][T13188] cct.usage_percpu_sys' [ 387.765966][T13103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.792456][T13103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.847950][T12976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.861023][T13103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.879679][T13103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.072019][T13209] syzkaller1: entered promiscuous mode [ 388.077550][T13209] syzkaller1: entered allmulticast mode [ 388.109704][T13209] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 388.174589][T12976] veth0_vlan: entered promiscuous mode [ 388.238459][T12976] veth1_vlan: entered promiscuous mode [ 388.366124][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.399846][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.475836][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.535978][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.543293][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.579357][T12976] veth0_macvtap: entered promiscuous mode [ 388.607398][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.614670][ T7883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.629555][ T5240] Bluetooth: hci7: command tx timeout [ 388.645750][T12976] veth1_macvtap: entered promiscuous mode [ 388.779962][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.792876][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.807200][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.838816][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.854739][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.881787][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.907950][T12976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.000305][T13228] : renamed from bond0 (while UP) [ 389.016040][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.031691][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.052469][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.073350][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.083994][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.095564][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.106678][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.134849][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.146130][T12976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.157408][T12976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.180702][T12976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.223329][T13103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.252082][T12976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.273453][T12976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.284843][T12976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.296630][T12976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.562042][T12985] veth0_vlan: entered promiscuous mode [ 389.597872][T12985] veth1_vlan: entered promiscuous mode [ 389.784759][ T7883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.808789][ T7883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.907262][T12985] veth0_macvtap: entered promiscuous mode [ 389.959238][T12985] veth1_macvtap: entered promiscuous mode [ 389.970541][ T7899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.989952][ T7899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.046067][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.074363][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.098190][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.117876][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.135062][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.149370][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.164255][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.175213][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.189806][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.202767][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.219461][T13258] netlink: 'syz.3.1819': attribute type 10 has an invalid length. [ 390.227364][T13258] __nla_validate_parse: 1 callbacks suppressed [ 390.227379][T13258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1819'. [ 390.247851][T13258] bridge0: port 3(dummy0) entered blocking state [ 390.269494][T13258] bridge0: port 3(dummy0) entered disabled state [ 390.276161][T13258] dummy0: entered allmulticast mode [ 390.286516][T13258] dummy0: entered promiscuous mode [ 390.366644][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.397654][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.418211][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.439523][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.462080][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.492195][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.512228][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.536822][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.549764][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.569742][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.597214][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.621588][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.634491][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.654432][T13272] netlink: 'syz.3.1821': attribute type 21 has an invalid length. [ 390.669223][T13272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1821'. [ 390.700402][T13272] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 390.709413][ T5240] Bluetooth: hci7: command tx timeout [ 390.712604][T12985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.723859][T12985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.733052][T12985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.746937][T12985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.882710][T13275] netlink: 'syz.3.1822': attribute type 10 has an invalid length. [ 390.904302][T13275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1822'. [ 391.013497][ T7900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.080368][T13103] veth0_vlan: entered promiscuous mode [ 391.151855][ T7900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.175781][T13103] veth1_vlan: entered promiscuous mode [ 391.224262][ T7909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.240815][ T7909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.338909][T13103] veth0_macvtap: entered promiscuous mode [ 391.372721][ T7900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.390879][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.402061][T13103] veth1_macvtap: entered promiscuous mode [ 391.410637][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.461092][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.472087][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.485264][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.496574][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.509228][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.523554][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.533781][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.544778][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.555297][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.566214][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.591306][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.675135][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.687103][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.697132][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.708775][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.718882][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.730461][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.742471][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.754515][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.764824][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.775639][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.785706][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.796284][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.808419][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.818946][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.831982][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.892505][ T7900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.941903][T13103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.964008][T13103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.973476][T13103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.988662][T13103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.259859][T13284] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 392.313352][ T7900] bridge_slave_1: left allmulticast mode [ 392.338372][ T7900] bridge_slave_1: left promiscuous mode [ 392.369439][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.391582][ T7900] bridge_slave_0: left allmulticast mode [ 392.397299][ T7900] bridge_slave_0: left promiscuous mode [ 392.420731][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.536957][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.547752][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.557736][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.577551][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.587293][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.608507][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.176721][ T7900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.215015][T13296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1827'. [ 393.241033][ T7900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.264730][ T7900] bond0 (unregistering): Released all slaves [ 393.313214][ T7909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.339385][ T7909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.408392][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 393.420940][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 393.591879][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.616527][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.625344][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.636163][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.647780][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 393.659933][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.755742][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.789965][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.041017][T13322] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 394.076695][ T7900] hsr_slave_0: left promiscuous mode [ 394.087506][ T7900] hsr_slave_1: left promiscuous mode [ 394.107705][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.118859][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.140249][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.147761][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.256550][ T7900] veth1_macvtap: left promiscuous mode [ 394.273442][ T7900] veth0_macvtap: left promiscuous mode [ 394.283695][ T7900] veth1_vlan: left promiscuous mode [ 394.298378][ T7900] veth0_vlan: left promiscuous mode [ 394.708711][ T5240] Bluetooth: hci3: command tx timeout [ 395.454645][ T7900] team0 (unregistering): Port device team_slave_1 removed [ 395.531527][ T7900] team0 (unregistering): Port device team_slave_0 removed [ 395.755147][ T5240] Bluetooth: hci4: command tx timeout [ 396.273984][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1834'. [ 396.285022][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 396.295975][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 396.389775][ T5240] Bluetooth: hci6: command 0x040f tx timeout [ 396.690378][T13357] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.1839'. [ 396.700088][T13357] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1839'. [ 396.745150][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1838'. [ 396.798042][ T5234] Bluetooth: hci3: command tx timeout [ 396.905188][T13355] netlink: 'syz.3.1838': attribute type 21 has an invalid length. [ 396.934344][T13285] chnl_net:caif_netlink_parms(): no params data found [ 396.948369][T13367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1838'. [ 397.146734][T13306] chnl_net:caif_netlink_parms(): no params data found [ 397.302175][T13378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.423205][ T7900] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.456956][T13285] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.489672][T13285] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.497005][T13285] bridge_slave_0: entered allmulticast mode [ 397.517063][T13285] bridge_slave_0: entered promiscuous mode [ 397.580194][T13285] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.587398][T13285] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.635478][T13398] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20002 [ 397.648862][T13285] bridge_slave_1: entered allmulticast mode [ 397.678478][T13285] bridge_slave_1: entered promiscuous mode [ 397.799823][ T7900] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.828567][ T5234] Bluetooth: hci4: command tx timeout [ 397.902379][T13285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.020076][ T7900] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.088509][T13285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.133766][T13306] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.159773][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.167069][T13306] bridge_slave_0: entered allmulticast mode [ 398.190949][T13306] bridge_slave_0: entered promiscuous mode [ 398.241293][ T7900] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.267482][T13285] team0: Port device team_slave_0 added [ 398.281628][T13285] team0: Port device team_slave_1 added [ 398.324909][T13306] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.338433][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.345890][T13306] bridge_slave_1: entered allmulticast mode [ 398.357265][T13306] bridge_slave_1: entered promiscuous mode [ 398.412966][T13285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.435621][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.495187][T13285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.572108][T13433] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 398.606116][T13285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.618634][T13285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.658365][T13285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.710970][T13306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.757348][T13306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.878119][ T5234] Bluetooth: hci3: command tx timeout [ 398.935129][T13306] team0: Port device team_slave_0 added [ 398.953014][T13306] team0: Port device team_slave_1 added [ 399.020197][T13285] hsr_slave_0: entered promiscuous mode [ 399.037584][T13285] hsr_slave_1: entered promiscuous mode [ 399.049338][T13285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.064117][T13285] Cannot create hsr debugfs directory [ 399.184947][T13448] x_tables: duplicate underflow at hook 2 [ 399.224501][T13448] x_tables: duplicate underflow at hook 1 [ 399.225092][T13306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.248379][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.284126][T13306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.299011][T13306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.306474][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.333950][T13306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.385473][T13450] tc_dump_action: action bad kind [ 399.461065][ T7900] bridge_slave_1: left allmulticast mode [ 399.466793][ T7900] bridge_slave_1: left promiscuous mode [ 399.484150][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.520149][ T7900] bridge_slave_0: left allmulticast mode [ 399.526318][ T7900] bridge_slave_0: left promiscuous mode [ 399.542215][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.619245][T13460] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 399.908526][ T5234] Bluetooth: hci4: command tx timeout [ 400.139101][T13480] tipc: Trying to set illegal importance in message [ 400.290567][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 400.302451][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'. [ 400.433222][ T7900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.447202][ T7900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.461669][ T7900] bond0 (unregistering): Released all slaves [ 400.516687][T13477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1873'. [ 400.783648][T13306] hsr_slave_0: entered promiscuous mode [ 400.810909][T13306] hsr_slave_1: entered promiscuous mode [ 400.829390][T13306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.837109][T13306] Cannot create hsr debugfs directory [ 400.950431][ T5234] Bluetooth: hci3: command tx timeout [ 401.208084][ T7900] hsr_slave_0: left promiscuous mode [ 401.215108][ T7900] hsr_slave_1: left promiscuous mode [ 401.234033][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.250612][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.265688][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.275393][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.307942][ T7900] veth1_macvtap: left promiscuous mode [ 401.313800][ T7900] veth0_macvtap: left promiscuous mode [ 401.320100][ T7900] veth1_vlan: left promiscuous mode [ 401.325522][ T7900] veth0_vlan: left promiscuous mode [ 401.991134][ T5234] Bluetooth: hci4: command tx timeout [ 402.265090][ T7900] team0 (unregistering): Port device team_slave_1 removed [ 402.334682][ T7900] team0 (unregistering): Port device team_slave_0 removed [ 403.085659][T13507] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1878'. [ 403.120213][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1879'. [ 404.230900][T13556] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1893'. [ 404.398202][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1895'. [ 404.479184][T13285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.492750][T13568] netlink: 'syz.3.1896': attribute type 7 has an invalid length. [ 404.513058][T13568] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1896'. [ 404.518026][T13285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.601471][T13285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.625175][T13285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.742592][T13306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.759760][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 404.773813][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 404.794670][T13306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.842659][T13306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.883596][T13306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.050255][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 405.206208][T13285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.370906][T13285] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.413439][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.420682][ T7909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.447211][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.454478][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.479464][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.559816][T13603] vcan0 speed is unknown, defaulting to 1000 [ 405.581437][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.626177][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.633435][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.665303][T13603] vcan0 speed is unknown, defaulting to 1000 [ 405.686544][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.693866][ T7900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.714304][T13603] vcan0 speed is unknown, defaulting to 1000 [ 406.263480][ T5431] vcan0 speed is unknown, defaulting to 1000 [ 406.278211][T13603] infiniband syz1: set active [ 406.292193][T13603] infiniband syz1: added vcan0 [ 406.314063][T13285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.350746][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 406.475112][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.560904][T13603] RDS/IB: syz1: added [ 406.566645][T13603] smc: adding ib device syz1 with port count 1 [ 406.593697][T13603] smc: ib device syz1 port 1 has pnetid [ 406.632629][ T5431] vcan0 speed is unknown, defaulting to 1000 [ 406.654858][T13285] veth0_vlan: entered promiscuous mode [ 406.673164][T13603] vcan0 speed is unknown, defaulting to 1000 [ 406.696882][T13285] veth1_vlan: entered promiscuous mode [ 406.846061][T13285] veth0_macvtap: entered promiscuous mode [ 406.873520][T13285] veth1_macvtap: entered promiscuous mode [ 406.964784][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.000714][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.037389][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.088324][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.115633][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.138026][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.158097][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.188308][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.221732][T13285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.291133][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.331886][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.348296][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.378081][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.399138][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.418409][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.439609][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.458246][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.478094][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.499791][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.511609][T13285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.528414][T13285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.551728][T13285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.574001][T13285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.594400][T13285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.609487][T13285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.628093][T13285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.651370][T13603] vcan0 speed is unknown, defaulting to 1000 [ 407.822788][T13306] veth0_vlan: entered promiscuous mode [ 407.889510][T13643] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.1914'. [ 407.971034][T13306] veth1_vlan: entered promiscuous mode [ 408.021087][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.040015][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.146555][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.178675][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.283054][T13306] veth0_macvtap: entered promiscuous mode [ 408.306463][T13603] vcan0 speed is unknown, defaulting to 1000 [ 408.322571][T13306] veth1_macvtap: entered promiscuous mode [ 408.410211][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.438249][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.459194][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.478383][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.498402][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.521271][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.539549][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.560599][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.588077][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.608373][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.648863][T13306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.806899][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.851192][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.868189][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.888552][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.918222][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.948494][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.978233][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.009479][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.038325][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.068152][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.088629][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.125036][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.149580][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.168189][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.190484][T13306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.201343][T13603] vcan0 speed is unknown, defaulting to 1000 [ 409.232851][T13306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.252000][T13306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.274085][T13306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.298070][T13306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.631056][ T7900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.661683][ T7900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.679102][T13662] xt_cgroup: path and classid specified [ 409.995930][ T7881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.048736][T13603] vcan0 speed is unknown, defaulting to 1000 [ 410.054927][T13664] netlink: 'syz.1.1919': attribute type 12 has an invalid length. [ 410.092709][T13664] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 410.140809][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.161634][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.414159][T13603] vcan0 speed is unknown, defaulting to 1000 [ 410.591826][T13603] vcan0 speed is unknown, defaulting to 1000 [ 410.717615][ T7881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.852997][ T7881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.866215][T13603] vcan0 speed is unknown, defaulting to 1000 [ 410.999831][ T7881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.212569][T13603] vcan0 speed is unknown, defaulting to 1000 [ 411.314718][ T7881] bridge_slave_1: left allmulticast mode [ 411.330383][ T7881] bridge_slave_1: left promiscuous mode [ 411.346615][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.391020][ T7881] bridge_slave_0: left allmulticast mode [ 411.396742][ T7881] bridge_slave_0: left promiscuous mode [ 411.419264][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.837340][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.848529][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.857946][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.904644][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.915532][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.931196][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.447168][ T7881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.474803][ T7881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.496248][ T7881] bond0 (unregistering): Released all slaves [ 412.902452][T13680] vcan0 speed is unknown, defaulting to 1000 [ 413.017740][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.030386][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.048358][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.060703][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.069853][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.077420][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.200412][T13707] Cannot find add_set index 0 as target [ 413.442887][T13701] vcan0 speed is unknown, defaulting to 1000 [ 413.819999][T13725] sctp: [Deprecated]: syz.3.1935 (pid 13725) Use of int in max_burst socket option deprecated. [ 413.819999][T13725] Use struct sctp_assoc_value instead [ 413.939790][T13680] chnl_net:caif_netlink_parms(): no params data found [ 413.988717][ T5240] Bluetooth: hci3: command tx timeout [ 414.073557][T13733] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 414.194091][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1939'. [ 414.322736][ T7881] hsr_slave_0: left promiscuous mode [ 414.334904][T13742] netlink: 'syz.2.1940': attribute type 3 has an invalid length. [ 414.350939][T13742] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1940'. [ 414.355387][ T5431] IPVS: starting estimator thread 0... [ 414.368341][ T7881] hsr_slave_1: left promiscuous mode [ 414.381672][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.406461][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.416045][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.446414][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.458769][T13747] IPVS: using max 18 ests per chain, 43200 per kthread [ 414.507334][ T7881] veth1_macvtap: left promiscuous mode [ 414.514447][ T7881] veth0_macvtap: left promiscuous mode [ 414.521085][ T7881] veth1_vlan: left promiscuous mode [ 414.526646][ T7881] veth0_vlan: left promiscuous mode [ 415.194206][ T5234] Bluetooth: hci4: command tx timeout [ 415.345625][ T7881] team0 (unregistering): Port device team_slave_1 removed [ 415.419432][ T7881] team0 (unregistering): Port device team_slave_0 removed [ 416.077621][ T5234] Bluetooth: hci3: command tx timeout [ 416.248250][T13753] netlink: 'syz.3.1942': attribute type 2 has an invalid length. [ 416.298585][T13754] dvmrp1: entered allmulticast mode [ 416.363814][T13680] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.388683][T13680] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.398439][T13680] bridge_slave_0: entered allmulticast mode [ 416.416601][T13680] bridge_slave_0: entered promiscuous mode [ 416.435155][T13759] Cannot find set identified by id 0 to match [ 416.456273][T13764] netlink: 'syz.2.1944': attribute type 5 has an invalid length. [ 416.508971][T13680] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.531508][T13763] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1945'. [ 416.531526][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.531824][T13680] bridge_slave_1: entered allmulticast mode [ 416.580095][T13680] bridge_slave_1: entered promiscuous mode [ 416.833828][T13680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.847231][T13680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.027382][T13680] team0: Port device team_slave_0 added [ 417.094926][T13680] team0: Port device team_slave_1 added [ 417.263093][T13701] chnl_net:caif_netlink_parms(): no params data found [ 417.269008][ T5234] Bluetooth: hci4: command 0x041b tx timeout [ 417.318972][T13680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.325994][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.391436][T13680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.423410][T13680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.439290][T13680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.472733][T13680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.563958][T13801] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 417.585463][T13801] team0: Cannot enslave team device to itself [ 417.812221][T13680] hsr_slave_0: entered promiscuous mode [ 417.824556][T13680] hsr_slave_1: entered promiscuous mode [ 417.862162][T13680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.871978][T13680] Cannot create hsr debugfs directory [ 417.990862][ T30] INFO: task syz.3.1313:11106 blocked for more than 143 seconds. [ 417.999232][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 418.014484][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.024655][ T30] task:syz.3.1313 state:D stack:26640 pid:11106 tgid:11104 ppid:5228 flags:0x00004004 [ 418.035109][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.038491][ T30] [ 418.041477][ T30] __schedule+0x1800/0x4a60 [ 418.060654][ T30] ? __pfx___schedule+0x10/0x10 [ 418.065598][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.118128][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.128131][ T30] ? schedule+0x90/0x320 [ 418.148400][ T5240] Bluetooth: hci3: command tx timeout [ 418.180233][ T30] schedule+0x14b/0x320 [ 418.184488][ T30] schedule_preempt_disabled+0x13/0x30 [ 418.198601][ T30] __mutex_lock+0x6a4/0xd70 [ 418.203633][ T30] ? __mutex_lock+0x527/0xd70 [ 418.213261][ T30] ? nfsd_nl_version_get_doit+0x181/0x790 [ 418.219152][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.225129][ T30] ? genlmsg_put+0x145/0x2e0 [ 418.230313][ T30] nfsd_nl_version_get_doit+0x181/0x790 [ 418.235927][ T30] ? mark_lock+0x9a/0x350 [ 418.240445][ T30] ? __lock_acquire+0x137a/0x2040 [ 418.245542][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 418.250461][ T30] ? __asan_memcpy+0x40/0x70 [ 418.255134][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 418.261334][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 418.266071][ T30] genl_rcv_msg+0xb14/0xec0 [ 418.270800][ T30] ? mark_lock+0x9a/0x350 [ 418.275194][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.280347][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 418.286521][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 418.293144][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 418.299563][ T30] ? __pfx___might_resched+0x10/0x10 [ 418.305194][ T30] netlink_rcv_skb+0x1e3/0x430 [ 418.310330][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.315506][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.320948][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 418.327337][ T30] genl_rcv+0x28/0x40 [ 418.331576][ T30] netlink_unicast+0x7f6/0x990 [ 418.336408][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 418.341802][ T30] ? __virt_addr_valid+0x183/0x530 [ 418.347061][ T30] ? __check_object_size+0x49c/0x900 [ 418.352526][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 418.357734][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 418.362671][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.368151][ T30] ? __import_iovec+0x536/0x820 [ 418.373133][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 418.378155][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.383478][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 418.389508][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.394854][ T30] __sock_sendmsg+0x221/0x270 [ 418.400851][ T30] ____sys_sendmsg+0x525/0x7d0 [ 418.405682][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.411246][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 418.415927][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.421325][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.427702][ T30] ? do_syscall_64+0x100/0x230 [ 418.433516][ T30] ? do_syscall_64+0xb6/0x230 [ 418.438303][ T30] do_syscall_64+0xf3/0x230 [ 418.442865][ T30] ? clear_bhb_loop+0x35/0x90 [ 418.447571][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.453712][ T30] RIP: 0033:0x7fcc3737def9 [ 418.458237][ T30] RSP: 002b:00007fcc3817d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.466712][ T30] RAX: ffffffffffffffda RBX: 00007fcc37536058 RCX: 00007fcc3737def9 [ 418.475188][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 418.484034][ T30] RBP: 00007fcc373f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 418.492705][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.500796][ T30] R13: 0000000000000000 R14: 00007fcc37536058 R15: 00007ffc43177098 [ 418.510044][ T30] [ 418.514275][ T30] [ 418.514275][ T30] Showing all locks held in the system: [ 418.515119][T13701] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 418.532957][ T30] 1 lock held by khungtaskd/30: [ 418.561427][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 418.584065][ T30] 2 locks held by getty/4989: [ 418.588101][T13829] netlink: 'syz.3.1966': attribute type 2 has an invalid length. [ 418.598168][ T30] #0: ffff88803090f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 418.619394][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 418.654336][ T30] 3 locks held by kworker/0:4/5241: [ 418.684990][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 418.701451][ T30] #1: ffffc900043ffd00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 418.713149][ T30] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 418.723445][ T30] 2 locks held by syz.2.435/6891: [ 418.729751][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 418.740422][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 418.751132][ T30] 2 locks held by kworker/u8:11/7881: [ 418.756536][ T30] #0: ffff8880b893e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 418.766727][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 418.778505][ T30] 6 locks held by kworker/u8:27/7900: [ 418.783940][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 418.796012][ T30] #1: ffffc9001584fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 418.806831][ T30] #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 418.816409][ T30] #3: ffff88805ea870e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 418.826709][ T30] #4: ffff88805ea83250 (&devlink->lock_key#36){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 418.837934][ T30] #5: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 418.850707][ T30] 3 locks held by kworker/u8:28/7901: [ 418.856120][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 418.867946][ T30] #1: ffffc9001585fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 418.880631][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 418.890262][ T30] 2 locks held by syz.3.1313/11106: [ 418.895690][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 418.904526][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 418.914874][ T30] 2 locks held by syz.2.1729/12903: [ 418.920159][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 418.928649][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 418.939289][ T30] 1 lock held by syz-executor/13701: [ 418.946540][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 418.957888][ T30] [ 418.962491][ T30] ============================================= [ 418.962491][ T30] [ 418.971018][ T30] NMI backtrace for cpu 0 [ 418.975394][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 418.985677][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 418.995816][ T30] Call Trace: [ 418.999112][ T30] [ 419.002172][ T30] dump_stack_lvl+0x241/0x360 [ 419.006914][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.012161][ T30] ? __pfx__printk+0x10/0x10 [ 419.016780][ T30] ? vprintk_emit+0x667/0x7c0 [ 419.021484][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 419.026553][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 419.031543][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.037116][ T30] ? _printk+0xd5/0x120 [ 419.041303][ T30] ? __pfx__printk+0x10/0x10 [ 419.045939][ T30] ? __wake_up_klogd+0xcc/0x110 [ 419.050831][ T30] ? __pfx__printk+0x10/0x10 [ 419.055455][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 419.060512][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.066549][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 419.072587][ T30] watchdog+0xff4/0x1040 [ 419.076865][ T30] ? watchdog+0x1ea/0x1040 [ 419.081319][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.086034][ T30] kthread+0x2f0/0x390 [ 419.090149][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.094880][ T30] ? __pfx_kthread+0x10/0x10 [ 419.099506][ T30] ret_from_fork+0x4b/0x80 [ 419.103977][ T30] ? __pfx_kthread+0x10/0x10 [ 419.108622][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.113479][ T30] [ 419.118483][ T30] Sending NMI from CPU 0 to CPUs 1: [ 419.124375][ C1] NMI backtrace for cpu 1 [ 419.124391][ C1] CPU: 1 UID: 0 PID: 7881 Comm: kworker/u8:11 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 419.124413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 419.124425][ C1] Workqueue: bat_events batadv_nc_worker [ 419.124455][ C1] RIP: 0010:kasan_check_range+0x1bc/0x290 [ 419.124486][ C1] Code: 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b 41 5c 41 5e <41> 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 00 75 5c f7 [ 419.124501][ C1] RSP: 0018:ffffc90015357890 EFLAGS: 00000056 [ 419.124517][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff81703fea [ 419.124534][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff941de840 [ 419.124547][ C1] RBP: 0000000000000000 R08: ffffffff941de847 R09: 1ffffffff283bd08 [ 419.124559][ C1] R10: dffffc0000000000 R11: fffffbfff283bd09 R12: ffff88801df80000 [ 419.124573][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: fffffbfff283bd09 [ 419.124586][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 419.124601][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.124613][ C1] CR2: 00007f35da2eaf98 CR3: 000000000e734000 CR4: 00000000003506f0 [ 419.124630][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.124641][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.124652][ C1] Call Trace: [ 419.124658][ C1] [ 419.124667][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 419.124688][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 419.124714][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.124745][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 419.124768][ C1] ? nmi_handle+0x14f/0x5a0 [ 419.124786][ C1] ? nmi_handle+0x2a/0x5a0 [ 419.124804][ C1] ? kasan_check_range+0x1bc/0x290 [ 419.124830][ C1] ? default_do_nmi+0x63/0x160 [ 419.124851][ C1] ? exc_nmi+0x123/0x1f0 [ 419.124871][ C1] ? end_repeat_nmi+0xf/0x53 [ 419.124897][ C1] ? mark_lock+0x9a/0x350 [ 419.124924][ C1] ? kasan_check_range+0x1bc/0x290 [ 419.124951][ C1] ? kasan_check_range+0x1bc/0x290 [ 419.124979][ C1] ? kasan_check_range+0x1bc/0x290 [ 419.125006][ C1] [ 419.125012][ C1] [ 419.125019][ C1] mark_lock+0x9a/0x350 [ 419.125047][ C1] __lock_acquire+0xc35/0x2040 [ 419.125081][ C1] lock_acquire+0x1ed/0x550 [ 419.125104][ C1] ? batadv_nc_worker+0xcb/0x610 [ 419.125131][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 419.125157][ C1] ? batadv_nc_worker+0xcb/0x610 [ 419.125179][ C1] ? __pfx_lock_release+0x10/0x10 [ 419.125206][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.125236][ C1] batadv_nc_worker+0xec/0x610 [ 419.125257][ C1] ? batadv_nc_worker+0xcb/0x610 [ 419.125279][ C1] ? batadv_nc_worker+0xcb/0x610 [ 419.125304][ C1] ? process_scheduled_works+0x945/0x1830 [ 419.125327][ C1] process_scheduled_works+0xa2c/0x1830 [ 419.125367][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 419.125396][ C1] ? assign_work+0x364/0x3d0 [ 419.125421][ C1] worker_thread+0x870/0xd30 [ 419.125454][ C1] ? __kthread_parkme+0x169/0x1d0 [ 419.125481][ C1] ? __pfx_worker_thread+0x10/0x10 [ 419.125505][ C1] kthread+0x2f0/0x390 [ 419.125537][ C1] ? __pfx_worker_thread+0x10/0x10 [ 419.125561][ C1] ? __pfx_kthread+0x10/0x10 [ 419.125588][ C1] ret_from_fork+0x4b/0x80 [ 419.125612][ C1] ? __pfx_kthread+0x10/0x10 [ 419.125639][ C1] ret_from_fork_asm+0x1a/0x30 [ 419.125674][ C1] [ 419.482508][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 419.489460][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 419.499681][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 419.510038][ T30] Call Trace: [ 419.513350][ T30] [ 419.516310][ T30] dump_stack_lvl+0x241/0x360 [ 419.521061][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.526402][ T30] ? __pfx__printk+0x10/0x10 [ 419.531037][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.537072][ T30] ? vscnprintf+0x5d/0x90 [ 419.541442][ T30] panic+0x349/0x860 [ 419.545385][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 419.551588][ T30] ? __pfx_panic+0x10/0x10 [ 419.556047][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 419.561463][ T30] ? __irq_work_queue_local+0x137/0x410 [ 419.567056][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 419.572519][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 419.578723][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 419.585095][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 419.591337][ T30] watchdog+0x1033/0x1040 [ 419.595755][ T30] ? watchdog+0x1ea/0x1040 [ 419.600221][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.604962][ T30] kthread+0x2f0/0x390 [ 419.609075][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.613962][ T30] ? __pfx_kthread+0x10/0x10 [ 419.618682][ T30] ret_from_fork+0x4b/0x80 [ 419.623146][ T30] ? __pfx_kthread+0x10/0x10 [ 419.627792][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.632658][ T30] [ 419.635965][ T30] Kernel Offset: disabled [ 419.640372][ T30] Rebooting in 86400 seconds..