last executing test programs: 29.870606875s ago: executing program 3 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES8=r1, @ANYBLOB="0c000280f5"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r8, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x13}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r12, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xbffc, 0x7}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r13 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r13}) connect$ax25(r14, &(0x7f0000000140)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fscache_access_volume\x00', r11, 0x0, 0x4}, 0x18) getsockopt$ax25_int(r13, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 29.5653901s ago: executing program 3 (id=265): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0xffff, 0xfffffffd, 0x1, 0x8, 0xfff, 0x4}}, {0xc, 0x2, [0x7, 0xc, 0x4, 0x4]}}]}]}, 0x50}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x22, 0x80000, 0xfffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r6, 0xffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6bda7c74f8ee669a}, 0xc, &(0x7f0000000080)={&(0x7f0000005940)=ANY=[@ANYBLOB='\\R\x00\x00', @ANYRES16=r4, @ANYRES8], 0x525c}, 0x1, 0x0, 0x0, 0x4008840}, 0x8801) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4c, &(0x7f0000000040), 0x4) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x44}, 0x9}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRESDEC=r13, @ANYBLOB="00107b", @ANYRESHEX=r11, @ANYRES16=r7], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x7, 0x1000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x307e064e7be08cd0}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.206692376s ago: executing program 3 (id=270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x503, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x40100}, [@IFLA_MTU={0x8, 0x4, 0x2}]}, 0x28}}, 0x0) 17.757733063s ago: executing program 3 (id=270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x503, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x40100}, [@IFLA_MTU={0x8, 0x4, 0x2}]}, 0x28}}, 0x0) 8.932787845s ago: executing program 3 (id=270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x503, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x40100}, [@IFLA_MTU={0x8, 0x4, 0x2}]}, 0x28}}, 0x0) 2.737383912s ago: executing program 2 (id=605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8b, &(0x7f0000000000), &(0x7f0000000240)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PROTO={0x6, 0x4, 0xd}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x26048851, &(0x7f0000001380)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) r5 = accept(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1ac", 0x11}], 0x1}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x6, 0x9, 0x8, 0x3, 0x6a1, 0x8}}}, 0x12) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) syz_emit_ethernet(0xae, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x23, 0x4, 0x0, 0x1, 0x9c, 0x65, 0x0, 0x3, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, {[@ssrr={0x89, 0x17, 0xe0, [@local, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @loopback]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x84, [@dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, @multicast1, @empty, @private=0xa010100, @local, @private=0xa010102]}, @lsrr={0x83, 0xf, 0x59, [@multicast1, @multicast2, @loopback]}, @timestamp={0x44, 0x4, 0xa7}, @end, @lsrr={0x83, 0x1b, 0x2d, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0xd2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x0, "ca27e0", 0xf, "b3953e"}}}}}}}, 0x0) 2.20003475s ago: executing program 2 (id=610): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x1, 0xfff) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.997571815s ago: executing program 2 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) 1.661710075s ago: executing program 2 (id=618): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x6, 0xa83, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@noop]}}}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="5fc1b4d86c85fea2b383a727cbe65dba23f3bb0d838248b896", @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="38002d800400007a7fa9b2a6b15943c7020202000a0200000202020202020000c6c9b0fb0a78834b3444c74c688d1133c908e985687379f1d303a12bf01b4824b1b5ee1ce85926644ce4d11bb45fcaee2d391906a17fc7e473af61d7069c663627ead65f01bd2ee09fb2dd9233f7402fa9109e7e811ba4197e"], 0x54}}, 0x20000000) 1.54402546s ago: executing program 4 (id=621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x4}}], 0x10) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 1.422392562s ago: executing program 4 (id=623): r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000000c0)=0x28) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="00000000000000000000030000000800018004b140d1500002800800020000000000080001"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000514020027bd7000ffdbdf250810010002000000080003000000000008000100000000000800030001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2804) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000205140000000000000000000008000100000000001d0003000000001d080009000000000008000300040000000800010001"], 0x40}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001806"], 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xf26}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$isdn(0x22, 0x3, 0x3) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 1.341514395s ago: executing program 0 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x6, @local}, 0x32, {0x2, 0x4e22, @loopback}, 'erspan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SEQ_NR={0x6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x6, @local}, 0x32, {0x2, 0x4e22, @loopback}, 'erspan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SEQ_NR={0x6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x58}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) (async) 1.340490613s ago: executing program 1 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000040)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400002001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c05863000600080003000000"], 0x40}}, 0x0) 1.248424103s ago: executing program 0 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073112200000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x1ff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$alg(r2, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="5b20e8b738eea91b9bcc359788c1714b", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001900)='\"', 0x1}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x3, 0x10000) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/206, 0xce}], 0x1, &(0x7f0000000100)=""/99, 0x63}, 0x5}, {{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/112, 0x70}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/183, 0xb7}], 0x7, &(0x7f0000000b00)=""/201, 0xc9}, 0xc0}], 0x2, 0x2000, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x9, &(0x7f0000000c80)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x2, 0x2, 0x1, 0x3, 0x3, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x1, 0x6, 0x9, 0x7, 0x10, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x10, 0x8, 0x0, 0x1f4, 0x9}], &(0x7f00000002c0)='GPL\x00', 0x6, 0xd1, &(0x7f0000000d00)=""/209, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0xb, 0x101, 0x6e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x0, 0xd, 0xed, &(0x7f0000000f80)="cedfba8fb5571dbfbb885c92d1", &(0x7f0000000fc0)=""/237, 0x5, 0x0, 0x1000, 0xeb, &(0x7f0000001c00)="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", &(0x7f00000010c0)="ec60380805e38c5314fe30890f5ba109fafe304f4036febe56a3d1e780839805eaf958563068e279387cc08fc49f90980ddd99e3e670a9064ccb744be37ba4640e42c8303a3ade14c6ec6b703a05e8d617beca9a31680c0cf6133238e4658d02b11250fcf37422931b04039bd78864ce3f34ffe261af3beac9c8950ec45e10dabd32b4808cb7cadbe88b964eef64b58404020636a47f5efd9b280a953ea34a558f7c18c25082af4feda1bde12286425d0f517d15f4f55c5a90826a3882ea6beea8e41402b88206e3691a967943e1636e5b0fedf19b28079b7a57d4eb508d4603e1fc1a8fd71d468a0555ca", 0x6, 0x0, 0x5}, 0x50) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf255c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00k\x00'], 0x24}}, 0x0) 1.217101448s ago: executing program 1 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x0, @broadcast}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r3, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.157323556s ago: executing program 4 (id=628): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0xad7f585b85390de9) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9be04c5dded2cc308b286165bc58b7369ce9b40629cd6ee9806502839e55eedecfba", @ANYRES16=r4, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x80d0}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) unshare(0x22020400) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) shutdown(r3, 0xad7f585b85390de9) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x6d}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x68}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9be04c5dded2cc308b286165bc58b7369ce9b40629cd6ee9806502839e55eedecfba", @ANYRES16=r4, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x80d0}, 0x4010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1.144383171s ago: executing program 1 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) bind$llc(r2, &(0x7f0000000040), 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006007d"], 0x48}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a7e"], 0x3c}}, 0x0) 989.02824ms ago: executing program 4 (id=630): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) 933.615312ms ago: executing program 0 (id=631): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) 933.217703ms ago: executing program 1 (id=632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x80, '\x00', {0xe, 0x6, 'W;L', 0x8000, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [], "1a34d0f0eccb8473"}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000140)=@getae={0x4c, 0x1f, 0x101, 0x70bd2a, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0xa, 0x6c}, @in6=@private2, 0xfffffc01, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x22008040) 897.886409ms ago: executing program 1 (id=633): socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000000)="dc3429f8992c663b8efca5f7d2bfab93d45425d958140fdaa3b98ec53e5b9ce66f44f4e7267d1f10f80f42a536b09021f073283823fe03fb727ec05a7453cc836b9e3ef99e2a3565905847ba9ba7cc8d7624", &(0x7f0000000140)=""/195, &(0x7f0000000240)="06fe3ad7951b85105d5efcda6fe8298122a6a711e76202bdb10d54164079fec81b761d5dc778b0d0378abd204542b98ab0e8762c79165b83321198516d9a9b415b1a2ebfed1f3a71a2ef8e25dd6304f81d7db9ecbdf72a95036edaebcace64f8379e76e57edb300802dddcd3b5a4f68b9579317b906bbe5a0917f49e74c3950bf9c42839b10d24ea45a5681bd794c21c9d425b4fbcfa9f1ce82829e449a786e387dd79f40b1a6c3849b76b2fdeb5479e61abb2338b81f5a392103bd94487f8d5234cf3af2501e850a6", &(0x7f0000000340)="5acdf9cceb4558ace9369c9ab2caad52d8f2f753883b81231d4953bb9791906d25424a04f43ca366f807c01df92ac3eb231c4f8185931cf84cdef5453b939771a59fad7894aa01d4405817460a909314079bf499bff3fff57d8da1facf56e3524d722aa9dc8f1ef566043f8712d13a92a74a656bf1963d", 0xfffffffe, r2, 0x4}, 0x38) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa2aaaaaaa2b080045000050000400000006907864010104ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fc00000590780000020499041d12910000000000006f00000000000000001312047362d4843af5cce037a189c9077f3f"], 0x0) 825.061224ms ago: executing program 0 (id=634): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @tracing=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @dev}, &(0x7f00000000c0)=0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x3, 0x9, 0x4, 0xe508, r0, 0x5, '\x00', r1, r2, 0x1, 0x2, 0x0, 0x0, @value=r3, @void, @void, @value}, 0x50) 824.726174ms ago: executing program 3 (id=270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x503, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x40100}, [@IFLA_MTU={0x8, 0x4, 0x2}]}, 0x28}}, 0x0) 297.455634ms ago: executing program 4 (id=635): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x23, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000ff0000000006000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e110000"], 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/185, 0x116000, 0x800, 0xffffff81, 0x1}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r8, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) 296.867616ms ago: executing program 0 (id=636): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ppoll(&(0x7f0000000100)=[{r0, 0x1260}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) write$tun(r0, &(0x7f0000000ac0)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000005ffff00080001"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x80c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)={0x20, r10, 0x1, 0xfffffffc, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}}, 0x4080) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x7c, r14, 0x5eae78d9c54e9d3f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7c9436238c99f1af451dae15da516a9bf0fe15c2cd395050a2b31929f8582390"}]}]}, 0x7c}}, 0x0) 296.291596ms ago: executing program 1 (id=637): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f234e0000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 294.896796ms ago: executing program 2 (id=638): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="9c38ee464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x11, 0x4, 0x0, @remote}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xc, 0x7, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x700, 0x5, 0x9}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, r2, 0x29, r3}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000007740)=ANY=[@ANYBLOB="0e000000000000000a004e2200000009ff01000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000c08be9cdb46cd4188f4ef74cd500"/144], 0x90) getsockopt$inet6_buf(r0, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) 170.915968ms ago: executing program 4 (id=639): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) (async, rerun: 64) listen(r2, 0x7fffffff) (rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400)={0x1f, 0x0, @none}, 0xe) (async) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0) 79.41044ms ago: executing program 2 (id=640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @generic={0xff, 0x2, 0xc, 0xffff, 0xfffffffd}], &(0x7f0000000100)='syzkaller\x00', 0x1000, 0x93, &(0x7f0000000240)=""/147, 0x61680, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r4, r5, r6, 0xffffffffffffffff, 0x1, r7, r8, 0x1], &(0x7f0000000540)=[{0x2, 0x5, 0x5, 0x3bbdd727b5cc2d03}], 0x10, 0x3, @void, @value}, 0x94) 0s ago: executing program 0 (id=641): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080), 0x1000000000000075, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x24b5, 0x100009, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f050e000302120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 66.889677][ T5218] cgroup: Unknown subsys name 'net' [ 67.017734][ T5218] cgroup: Unknown subsys name 'cpuset' [ 67.026713][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.618447][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.940323][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.949131][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.955595][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.963651][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.964378][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.972242][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.981942][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.991604][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.996313][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.000088][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.008579][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.017010][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.021427][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.029350][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.043139][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.043363][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.050984][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.058129][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.065090][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.081588][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.089393][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.098749][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.106660][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.120465][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.158818][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.170971][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.183721][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.205133][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.214724][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.223264][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.573230][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 71.718786][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.725953][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.750124][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 71.764856][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 71.789186][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.797495][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.805076][ T5235] bridge_slave_0: entered allmulticast mode [ 71.811924][ T5235] bridge_slave_0: entered promiscuous mode [ 71.825023][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.832153][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.839436][ T5235] bridge_slave_1: entered allmulticast mode [ 71.846436][ T5235] bridge_slave_1: entered promiscuous mode [ 71.858404][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 71.884296][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 71.956000][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.995167][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.059521][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.066869][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.074670][ T5229] bridge_slave_0: entered allmulticast mode [ 72.081435][ T5229] bridge_slave_0: entered promiscuous mode [ 72.115680][ T5235] team0: Port device team_slave_0 added [ 72.126885][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.134285][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.141532][ T5229] bridge_slave_1: entered allmulticast mode [ 72.148836][ T5229] bridge_slave_1: entered promiscuous mode [ 72.162990][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.173603][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.180874][ T5233] bridge_slave_0: entered allmulticast mode [ 72.188231][ T5233] bridge_slave_0: entered promiscuous mode [ 72.196825][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.204244][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.211482][ T5233] bridge_slave_1: entered allmulticast mode [ 72.218518][ T5233] bridge_slave_1: entered promiscuous mode [ 72.231774][ T5235] team0: Port device team_slave_1 added [ 72.297420][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.305433][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.331710][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.344969][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.352204][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.359797][ T5245] bridge_slave_0: entered allmulticast mode [ 72.367381][ T5245] bridge_slave_0: entered promiscuous mode [ 72.376361][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.389580][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.409913][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.427579][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.434839][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.460958][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.477102][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.484888][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.492274][ T5245] bridge_slave_1: entered allmulticast mode [ 72.499800][ T5245] bridge_slave_1: entered promiscuous mode [ 72.526954][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.540015][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.547592][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.554951][ T5228] bridge_slave_0: entered allmulticast mode [ 72.561710][ T5228] bridge_slave_0: entered promiscuous mode [ 72.570442][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.577685][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.584924][ T5228] bridge_slave_1: entered allmulticast mode [ 72.591824][ T5228] bridge_slave_1: entered promiscuous mode [ 72.613424][ T5229] team0: Port device team_slave_0 added [ 72.665118][ T5229] team0: Port device team_slave_1 added [ 72.685055][ T5233] team0: Port device team_slave_0 added [ 72.692929][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.719063][ T5235] hsr_slave_0: entered promiscuous mode [ 72.725758][ T5235] hsr_slave_1: entered promiscuous mode [ 72.734836][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.747070][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.766058][ T5233] team0: Port device team_slave_1 added [ 72.773888][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.833401][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.841343][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.867443][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.899508][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.906613][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.933141][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.945744][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.952747][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.979050][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.992868][ T5228] team0: Port device team_slave_0 added [ 72.999679][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.008223][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.034973][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.055393][ T5245] team0: Port device team_slave_0 added [ 73.073711][ T5228] team0: Port device team_slave_1 added [ 73.105409][ T5245] team0: Port device team_slave_1 added [ 73.155280][ T5243] Bluetooth: hci0: command tx timeout [ 73.160926][ T4624] Bluetooth: hci3: command tx timeout [ 73.160938][ T5231] Bluetooth: hci2: command tx timeout [ 73.199464][ T5233] hsr_slave_0: entered promiscuous mode [ 73.206741][ T5233] hsr_slave_1: entered promiscuous mode [ 73.213033][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.221036][ T5233] Cannot create hsr debugfs directory [ 73.227577][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.236750][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.244583][ T4624] Bluetooth: hci1: command tx timeout [ 73.268812][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.280570][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.287908][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.314071][ T4624] Bluetooth: hci4: command tx timeout [ 73.319913][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.332524][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.339604][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.365719][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.383434][ T5229] hsr_slave_0: entered promiscuous mode [ 73.390098][ T5229] hsr_slave_1: entered promiscuous mode [ 73.396693][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.404394][ T5229] Cannot create hsr debugfs directory [ 73.420873][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.427975][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.453988][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.604471][ T5228] hsr_slave_0: entered promiscuous mode [ 73.610808][ T5228] hsr_slave_1: entered promiscuous mode [ 73.617602][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.625585][ T5228] Cannot create hsr debugfs directory [ 73.638199][ T5245] hsr_slave_0: entered promiscuous mode [ 73.644882][ T5245] hsr_slave_1: entered promiscuous mode [ 73.651216][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.659207][ T5245] Cannot create hsr debugfs directory [ 73.829500][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.841943][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.877336][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.909318][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.963834][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.988379][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.000223][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.029261][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.098995][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.120474][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.131766][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.146474][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.235574][ T5245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.250619][ T5245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.284840][ T5245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.319848][ T5245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.368791][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.399994][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.410509][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.429455][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.461824][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.473288][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.492637][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.539192][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.559870][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.577154][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.587994][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.595295][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.634619][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.641778][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.651493][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.658655][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.668083][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.675272][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.685267][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.692369][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.779837][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.787016][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.836972][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.862128][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.881991][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.952124][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.975759][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.003387][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.010614][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.075807][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.082947][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.107763][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.114982][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.147836][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.155631][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.226448][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.237379][ T4624] Bluetooth: hci0: command tx timeout [ 75.242865][ T4624] Bluetooth: hci2: command tx timeout [ 75.244206][ T5243] Bluetooth: hci3: command tx timeout [ 75.315040][ T5243] Bluetooth: hci1: command tx timeout [ 75.377781][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.394313][ T5243] Bluetooth: hci4: command tx timeout [ 75.412303][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.435666][ T5235] veth0_vlan: entered promiscuous mode [ 75.499732][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.533378][ T5235] veth1_vlan: entered promiscuous mode [ 75.677336][ T5235] veth0_macvtap: entered promiscuous mode [ 75.715831][ T5233] veth0_vlan: entered promiscuous mode [ 75.725032][ T5235] veth1_macvtap: entered promiscuous mode [ 75.776388][ T5233] veth1_vlan: entered promiscuous mode [ 75.815787][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.842060][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.857358][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.885477][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.895083][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904983][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.914567][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.959299][ T5233] veth0_macvtap: entered promiscuous mode [ 75.969515][ T5233] veth1_macvtap: entered promiscuous mode [ 75.997966][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.056912][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.071776][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.086190][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.128400][ T5228] veth0_vlan: entered promiscuous mode [ 76.137465][ T5229] veth0_vlan: entered promiscuous mode [ 76.159120][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.169898][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.181934][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.205992][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.214904][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.240779][ T5229] veth1_vlan: entered promiscuous mode [ 76.254347][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.263149][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272622][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.281719][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.293183][ T5245] veth0_vlan: entered promiscuous mode [ 76.313166][ T5228] veth1_vlan: entered promiscuous mode [ 76.341489][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.356075][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.362945][ T5245] veth1_vlan: entered promiscuous mode [ 76.437323][ T5228] veth0_macvtap: entered promiscuous mode [ 76.457659][ T5229] veth0_macvtap: entered promiscuous mode [ 76.461655][ T5235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.467803][ T5229] veth1_macvtap: entered promiscuous mode [ 76.494567][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.505164][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.515692][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.526298][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.538334][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.582807][ T5228] veth1_macvtap: entered promiscuous mode [ 76.627120][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.638427][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.648398][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.659122][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.671457][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.701547][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.704768][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.716110][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724304][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.727315][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743226][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.757022][ T5245] veth0_macvtap: entered promiscuous mode [ 76.795820][ T5245] veth1_macvtap: entered promiscuous mode [ 76.816861][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.827877][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.832421][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.848197][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.853467][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.866542][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.877668][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.888325][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.899622][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.934452][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.945216][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.955480][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.966158][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.976495][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.988037][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.001681][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.030061][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.041138][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.054510][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.065931][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.088271][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.110763][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.122892][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.138520][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.150324][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.169250][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.182579][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.194505][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.205483][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.215485][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.226164][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.236435][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.248567][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.260520][ T5321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.265162][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.284368][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.293270][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304006][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312855][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.322328][ T5243] Bluetooth: hci3: command tx timeout [ 77.323900][ T5243] Bluetooth: hci2: command tx timeout [ 77.328114][ T5231] Bluetooth: hci0: command tx timeout [ 77.341106][ T5319] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 77.370928][ T5245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.379977][ T5245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.389642][ T5245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.400164][ T5245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402451][ T5243] Bluetooth: hci1: command tx timeout [ 77.474782][ T5243] Bluetooth: hci4: command tx timeout [ 77.507163][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.537783][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.647730][ T2458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.657613][ T2458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.671993][ T5328] Zero length message leads to an empty skb [ 77.672495][ T5327] tap0: tun_chr_ioctl cmd 1074025673 [ 77.692093][ T5327] tap0: tun_chr_ioctl cmd 1074025673 [ 77.810565][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.828757][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.855192][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.863142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.021291][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.044546][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.069608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.094115][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.509658][ T5348] netlink: 'syz.3.11': attribute type 3 has an invalid length. [ 78.545179][ T5348] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.601978][ T5354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.621928][ T5354] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.725314][ T5359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 79.108725][ T5376] pimreg3: entered allmulticast mode [ 79.304433][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 79.394762][ T5231] Bluetooth: hci0: command tx timeout [ 79.400410][ T5231] Bluetooth: hci2: command tx timeout [ 79.406373][ T4624] Bluetooth: hci3: command tx timeout [ 79.465647][ T5397] netlink: 116 bytes leftover after parsing attributes in process `syz.2.23'. [ 79.475700][ T55] Bluetooth: hci1: command tx timeout [ 79.557339][ T55] Bluetooth: hci4: command tx timeout [ 79.738833][ T5352] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 79.949160][ T5411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26'. [ 80.175991][ T5427] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 80.184798][ T5427] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.217573][ T5426] vlan0: entered promiscuous mode [ 80.319351][ T5431] netlink: 348 bytes leftover after parsing attributes in process `syz.2.33'. [ 80.411766][ T5435] openvswitch: netlink: nsh attr 3516 is out of range max 3 [ 80.452242][ T5435] openvswitch: netlink: Actions may not be safe on all matching packets [ 80.718705][ T5451] netlink: 'syz.4.40': attribute type 4 has an invalid length. [ 80.746708][ T5454] netlink: 'syz.0.41': attribute type 3 has an invalid length. [ 80.749209][ T5451] netlink: 224 bytes leftover after parsing attributes in process `syz.4.40'. [ 80.997287][ T5471] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 81.263454][ T5484] netlink: 'syz.2.48': attribute type 13 has an invalid length. [ 81.308591][ T5484] netlink: 'syz.2.48': attribute type 58 has an invalid length. [ 81.398524][ T5503] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.474283][ T55] Bluetooth: hci0: command 0x080f tx timeout [ 81.482978][ T5503] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 81.640763][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 81.669904][ T5512] Bluetooth: MGMT ver 1.23 [ 81.849276][ T5521] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 81.935298][ T5526] nbd: illegal input index 46429696 [ 81.962884][ T5525] veth0_: entered promiscuous mode [ 81.971486][ T5525] veth0_: entered allmulticast mode [ 82.901614][ T5566] validate_nla: 4 callbacks suppressed [ 82.901636][ T5566] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 83.137436][ T5574] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.161409][ T5574] gretap1: entered promiscuous mode [ 83.203885][ T5574] gretap1: entered allmulticast mode [ 83.565163][ T5598] __nla_validate_parse: 13 callbacks suppressed [ 83.565183][ T5598] netlink: 4908 bytes leftover after parsing attributes in process `syz.2.79'. [ 83.750206][ T5605] tipc: Failed to obtain node identity [ 83.759524][ T5605] tipc: Enabling of bearer rejected, failed to enable media [ 83.822369][ T5616] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.834414][ T5616] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 83.866027][ T5616] netlink: 48 bytes leftover after parsing attributes in process `syz.0.83'. [ 84.027676][ T5625] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.84'. [ 84.044897][ T5625] openvswitch: netlink: VXLAN extension 101 out of range max 1 [ 84.298069][ T5630] "syz.2.87" (5630) uses obsolete ecb(arc4) skcipher [ 84.738996][ T4686] udevd[4686]: worker [5248] terminated by signal 33 (Unknown signal 33) [ 84.782978][ T5660] netlink: 'syz.2.95': attribute type 3 has an invalid length. [ 84.790981][ T5660] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.95'. [ 85.021358][ T5669] netlink: 72 bytes leftover after parsing attributes in process `syz.2.100'. [ 85.125243][ T5672] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 85.172862][ T5677] macvlan2: entered promiscuous mode [ 85.184064][ T5677] macvlan2: entered allmulticast mode [ 85.197898][ T5680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 85.238583][ T5679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 85.252865][ T5679] vlan3: entered promiscuous mode [ 85.426684][ T5691] netlink: 'syz.1.109': attribute type 3 has an invalid length. [ 85.444805][ T5691] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.109'. [ 85.501206][ T5699] warning: `syz.3.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.561024][ T5703] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 85.570491][ T5703] netlink: 128 bytes leftover after parsing attributes in process `syz.2.112'. [ 85.606280][ T5703] netlink: 'syz.2.112': attribute type 5 has an invalid length. [ 85.619393][ T5703] netlink: 3 bytes leftover after parsing attributes in process `syz.2.112'. [ 85.688815][ T5671] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 85.792946][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 85.864814][ T5721] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 86.086809][ T5731] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 86.222172][ T5739] tc_dump_action: action bad kind [ 86.433047][ T5754] trusted_key: syz.4.129 sent an empty control message without MSG_MORE. [ 87.096431][ T8] cfg80211: failed to load regulatory.db [ 87.436753][ T5804] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.535652][ T5810] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 87.590611][ T5815] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 87.697628][ T5823] Cannot find set identified by id 0 to match [ 87.945659][ T5832] openvswitch: netlink: Missing key (keys=40, expected=80) [ 88.041189][ T5843] sctp: [Deprecated]: syz.0.159 (pid 5843) Use of int in max_burst socket option deprecated. [ 88.041189][ T5843] Use struct sctp_assoc_value instead [ 88.058451][ T5843] xt_policy: output policy not valid in PREROUTING and INPUT [ 88.066540][ T5843] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 88.437948][ T5869] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 88.610904][ T5881] sctp: [Deprecated]: syz.4.172 (pid 5881) Use of int in max_burst socket option deprecated. [ 88.610904][ T5881] Use struct sctp_assoc_value instead [ 88.965596][ T5903] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 89.080657][ T5911] __nla_validate_parse: 20 callbacks suppressed [ 89.080678][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'. [ 89.270155][ T5928] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 89.297227][ T5928] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 89.319761][ T5926] IPv6: sit1: Disabled Multicast RS [ 89.340155][ T5928] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 89.348428][ T5928] netlink: 224 bytes leftover after parsing attributes in process `syz.3.181'. [ 89.545829][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 89.595917][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 89.626707][ T5950] SET target dimension over the limit! [ 89.665195][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.674164][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.835341][ T5957] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 90.110772][ T5973] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 90.120588][ T5973] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 90.138873][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 90.251156][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 90.546825][ T5982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.581149][ T6006] netlink: 404 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.636882][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.673591][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.704262][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.925733][ T6018] IPv6: sit1: Disabled Multicast RS [ 91.071496][ T6024] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 91.504091][ T6048] set match dimension is over the limit! [ 91.622661][ T6014] netlink: ct family unspecified [ 91.631850][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.680843][ T6056] syz.4.217 uses obsolete (PF_INET,SOCK_PACKET) [ 92.248850][ T29] audit: type=1107 audit(1729283381.464:2): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 92.283635][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.143790][ T6132] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 93.307507][ T6147] Unsupported ieee802154 address type: 0 [ 93.411482][ T6150] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.679067][ T6169] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 93.689787][ T6169] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 93.756221][ T6155] syz.0.242 (6155) used greatest stack depth: 17456 bytes left [ 94.366641][ T6201] __nla_validate_parse: 9 callbacks suppressed [ 94.366665][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 94.383375][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 94.402489][ T6204] veth0_to_bond: entered promiscuous mode [ 94.456048][ T6203] veth0_to_bond: left promiscuous mode [ 94.652601][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'. [ 94.664079][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 94.693440][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'. [ 94.698938][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.260'. [ 94.729569][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'. [ 94.744347][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.260'. [ 94.774400][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.260'. [ 95.396818][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.732797][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.940743][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.941304][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.978592][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.987300][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.996920][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.005156][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.014552][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.143942][ T62] bond0: (slave netdevsim0): Releasing backup interface [ 96.161607][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.185117][ T6266] netlink: 'syz.0.280': attribute type 4 has an invalid length. [ 96.193945][ T6268] netlink: 'syz.2.281': attribute type 4 has an invalid length. [ 96.319205][ T62] bridge_slave_1: left allmulticast mode [ 96.325817][ T62] bridge_slave_1: left promiscuous mode [ 96.332795][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.368750][ T62] bridge_slave_0: left allmulticast mode [ 96.374644][ T62] bridge_slave_0: left promiscuous mode [ 96.380422][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.387020][ T6271] netlink: 'syz.0.280': attribute type 9 has an invalid length. [ 96.396751][ T6271] netlink: 134688 bytes leftover after parsing attributes in process `syz.0.280'. [ 96.859420][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.876500][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.890891][ T62] bond0 (unregistering): Released all slaves [ 96.928280][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 97.402513][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.410994][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.420804][ T6318] netlink: ct family unspecified [ 97.426608][ T6318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.604864][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.617573][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.630204][ T6254] bridge_slave_0: entered allmulticast mode [ 97.638421][ T6254] bridge_slave_0: entered promiscuous mode [ 97.741012][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.763801][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.774854][ T6254] bridge_slave_1: entered allmulticast mode [ 97.782071][ T6254] bridge_slave_1: entered promiscuous mode [ 97.857747][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.898419][ T62] hsr_slave_0: left promiscuous mode [ 97.909040][ T62] hsr_slave_1: left promiscuous mode [ 97.920662][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.932571][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.950001][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.961457][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.989377][ T62] veth1_macvtap: left promiscuous mode [ 97.995357][ T62] veth0_macvtap: left promiscuous mode [ 98.001000][ T62] veth1_vlan: left promiscuous mode [ 98.006746][ T62] veth0_vlan: left promiscuous mode [ 98.115287][ T55] Bluetooth: hci2: command tx timeout [ 98.496348][ T62] team0 (unregistering): Port device team_slave_1 removed [ 98.567113][ T62] team0 (unregistering): Port device team_slave_0 removed [ 98.941976][ T6338] netlink: 'syz.1.299': attribute type 20 has an invalid length. [ 98.954988][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.079306][ T6254] team0: Port device team_slave_0 added [ 99.102571][ T6254] team0: Port device team_slave_1 added [ 99.226001][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.244671][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.272761][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.342305][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.352106][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.410155][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.530269][ T6376] netlink: 'syz.1.310': attribute type 5 has an invalid length. [ 99.595281][ T6254] hsr_slave_0: entered promiscuous mode [ 99.614268][ T6254] hsr_slave_1: entered promiscuous mode [ 99.635339][ T6254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.660752][ T6254] Cannot create hsr debugfs directory [ 99.724523][ T6380] __nla_validate_parse: 7 callbacks suppressed [ 99.724545][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 100.051151][ T6403] netlink: 68 bytes leftover after parsing attributes in process `syz.1.320'. [ 100.132259][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 100.193800][ T55] Bluetooth: hci2: command tx timeout [ 100.485847][ T6431] netlink: 'syz.2.329': attribute type 3 has an invalid length. [ 100.502157][ T6431] netlink: 'syz.2.329': attribute type 3 has an invalid length. [ 100.572143][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 100.607491][ T6254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.648513][ T6438] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.331'. [ 100.659846][ T6438] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 100.672055][ T6438] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.331'. [ 100.685071][ T6438] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 100.694039][ T6438] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.331'. [ 100.703374][ T6438] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 100.711010][ T6254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.803072][ T6254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.821914][ T6254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.039255][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.090419][ T6457] batadv0: entered promiscuous mode [ 101.134632][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.185603][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.242436][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.249659][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.326891][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.334096][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.385990][ T6471] geneve2: entered promiscuous mode [ 101.392019][ T6471] geneve2: entered allmulticast mode [ 101.454275][ T6480] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'. [ 101.831456][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.914195][ T6504] C: renamed from team_slave_0 (while UP) [ 101.931881][ T6504] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 101.952038][ T6504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 101.991077][ T6509] netlink: 'syz.4.350': attribute type 2 has an invalid length. [ 102.018717][ T6509] netlink: 1 bytes leftover after parsing attributes in process `syz.4.350'. [ 102.050225][ T6254] veth0_vlan: entered promiscuous mode [ 102.076064][ T6254] veth1_vlan: entered promiscuous mode [ 102.115468][ T6254] veth0_macvtap: entered promiscuous mode [ 102.126006][ T6254] veth1_macvtap: entered promiscuous mode [ 102.180371][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 102.200681][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.216167][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.226286][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.236918][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.247543][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.259306][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.274354][ T55] Bluetooth: hci2: command tx timeout [ 102.282499][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.293259][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.305892][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.331611][ T6517] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 102.359696][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.377104][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.389096][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.400036][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.414219][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.424958][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.436615][ T6254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.447287][ T6254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.459083][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.477492][ T6254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.486547][ T6254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.496342][ T6254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.505182][ T6254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.628835][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.641302][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.649734][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.688079][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.696498][ T8] IPVS: starting estimator thread 0... [ 102.803871][ T6531] IPVS: using max 15 ests per chain, 36000 per kthread [ 103.056264][ T6533] tipc: Started in network mode [ 103.061211][ T6533] tipc: Node identity 4, cluster identity 2 [ 103.077024][ T6533] tipc: Node number set to 4 [ 103.082253][ T6533] tipc: Cannot configure node identity twice [ 103.097937][ T6556] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.146021][ T6556] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 103.263349][ T6564] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 103.374315][ T6571] dvmrp1: entered allmulticast mode [ 103.841699][ T6603] netlink: 'syz.2.378': attribute type 63 has an invalid length. [ 103.870907][ T6603] netlink: 'syz.2.378': attribute type 63 has an invalid length. [ 104.357064][ T5243] Bluetooth: hci2: command tx timeout [ 104.673057][ T6670] sctp: [Deprecated]: syz.2.395 (pid 6670) Use of int in max_burst socket option. [ 104.673057][ T6670] Use struct sctp_assoc_value instead [ 104.699381][ T6670] netdevsim netdevsim2 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 104.715383][ T6670] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 104.784460][ T6673] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 104.820381][ T6678] : renamed from bond0 (while UP) [ 104.849950][ T6673] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 104.869468][ T6673] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.879257][ T6673] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.919552][ T6673] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 104.938118][ T6673] bond0: (slave team0): Releasing backup interface [ 104.949390][ T6673] bridge0: port 3(team0) entered blocking state [ 104.956061][ T6673] bridge0: port 3(team0) entered disabled state [ 104.962505][ T6673] team0: entered allmulticast mode [ 104.967753][ T6673] team_slave_0: entered allmulticast mode [ 104.973676][ T6673] team_slave_1: entered allmulticast mode [ 104.980660][ T6673] team0: entered promiscuous mode [ 104.985977][ T6673] team_slave_0: entered promiscuous mode [ 104.991849][ T6673] team_slave_1: entered promiscuous mode [ 105.143855][ T6695] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 105.151668][ T6695] __nla_validate_parse: 8 callbacks suppressed [ 105.151688][ T6695] netlink: 220 bytes leftover after parsing attributes in process `syz.4.403'. [ 105.332761][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 105.343555][ T6708] netlink: 'syz.4.407': attribute type 3 has an invalid length. [ 105.356723][ T6708] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.366022][ T6708] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.374930][ T6708] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.383926][ T6708] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.499889][ T6713] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 105.658440][ T6720] netlink: 96 bytes leftover after parsing attributes in process `syz.1.411'. [ 105.669362][ T6720] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 105.679092][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 105.878392][ T6736] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 105.886546][ T6736] netlink: 220 bytes leftover after parsing attributes in process `syz.1.415'. [ 105.992817][ T6743] xt_l2tp: unknown flags: 18 [ 105.998954][ T6744] Unsupported ieee802154 address type: 0 [ 106.156715][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.174955][ T6748] netlink: 'syz.2.419': attribute type 9 has an invalid length. [ 106.182831][ T6748] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.419'. [ 106.280727][ T6760] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 106.292180][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.420'. [ 106.453856][ T5243] Bluetooth: hci2: command 0x0405 tx timeout [ 106.826613][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.970165][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.150052][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.171774][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.199358][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.236040][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.254076][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.275394][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.289794][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.414027][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.614800][ T1107] bridge_slave_1: left allmulticast mode [ 107.620838][ T1107] bridge_slave_1: left promiscuous mode [ 107.627384][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.646158][ T1107] bridge_slave_0: left allmulticast mode [ 107.651882][ T1107] bridge_slave_0: left promiscuous mode [ 107.670586][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.696700][ T6836] raw_sendmsg: syz.1.445 forgot to set AF_INET. Fix it! [ 108.170475][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.182194][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.197507][ T1107] bond0 (unregistering): Released all slaves [ 108.212283][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 108.568516][ T6856] bridge_slave_0: left allmulticast mode [ 108.574568][ T6856] bridge_slave_0: left promiscuous mode [ 108.580332][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.590565][ T6856] bridge_slave_1: left allmulticast mode [ 108.599938][ T6856] bridge_slave_1: left promiscuous mode [ 108.609624][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.622156][ T6856] bond0: (slave bond_slave_0): Releasing backup interface [ 108.642150][ T6856] bond0: (slave bond_slave_1): Releasing backup interface [ 108.672271][ T6856] team0: Port device team_slave_0 removed [ 108.697211][ T6856] team0: Port device team_slave_1 removed [ 108.719534][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.727685][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.740473][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.748099][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.840155][ T6862] wg2: entered promiscuous mode [ 108.863343][ T6872] netlink: 120 bytes leftover after parsing attributes in process `syz.4.453'. [ 108.879694][ T6862] team0: Port device wg2 added [ 109.002119][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.017420][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.028286][ T6807] bridge_slave_0: entered allmulticast mode [ 109.032917][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'. [ 109.035695][ T6807] bridge_slave_0: entered promiscuous mode [ 109.105252][ T1107] hsr_slave_0: left promiscuous mode [ 109.123218][ T1107] hsr_slave_1: left promiscuous mode [ 109.131338][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.142985][ T6883] Cannot find add_set index 0 as target [ 109.145160][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.160184][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.168621][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.188484][ T1107] veth1_macvtap: left promiscuous mode [ 109.194262][ T1107] veth0_macvtap: left promiscuous mode [ 109.199905][ T1107] veth1_vlan: left promiscuous mode [ 109.206321][ T1107] veth0_vlan: left promiscuous mode [ 109.401464][ T5243] Bluetooth: hci2: command tx timeout [ 109.788546][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 109.831530][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 110.193172][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.200706][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.209225][ T6807] bridge_slave_1: entered allmulticast mode [ 110.217140][ T6807] bridge_slave_1: entered promiscuous mode [ 110.282965][ T6902] netlink: 'syz.2.458': attribute type 4 has an invalid length. [ 110.291505][ T6902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.458'. [ 110.306639][ T6902] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 110.382687][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.498411][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.576564][ T6912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.594561][ T6912] batadv_slave_1: entered promiscuous mode [ 110.600449][ T6912] batadv_slave_1: entered allmulticast mode [ 110.629378][ T6807] team0: Port device team_slave_0 added [ 110.659837][ T6807] team0: Port device team_slave_1 added [ 110.781358][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.788659][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.821963][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.858997][ T6929] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 110.867776][ T6929] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.877029][ T6929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.884642][ T6929] IPv6: NLM_F_CREATE should be set when creating new route [ 110.891949][ T6929] IPv6: NLM_F_CREATE should be set when creating new route [ 110.899274][ T6929] IPv6: NLM_F_CREATE should be set when creating new route [ 110.928702][ T6935] xt_recent: Unsupported userspace flags (00000042) [ 110.951682][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.963716][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.048692][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.174842][ T6944] xt_l2tp: unknown flags: 18 [ 111.177179][ T6807] hsr_slave_0: entered promiscuous mode [ 111.215289][ T6807] hsr_slave_1: entered promiscuous mode [ 111.223106][ T6807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.231556][ T6807] Cannot create hsr debugfs directory [ 111.480427][ T5243] Bluetooth: hci2: command tx timeout [ 111.619149][ T6968] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.653867][ T6968] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.478'. [ 111.664611][ T6968] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.716454][ T6968] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.745909][ T6974] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.761637][ T6974] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.478'. [ 111.777518][ T6974] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.786900][ T6974] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 111.953730][ T6985] netlink: 'syz.4.483': attribute type 4 has an invalid length. [ 112.051335][ T6991] FAULT_INJECTION: forcing a failure. [ 112.051335][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.067076][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.2.485 Not tainted 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0 [ 112.077735][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.087852][ T6991] Call Trace: [ 112.091173][ T6991] [ 112.094148][ T6991] dump_stack_lvl+0x241/0x360 [ 112.098892][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.104136][ T6991] ? __pfx__printk+0x10/0x10 [ 112.108781][ T6991] ? snprintf+0xda/0x120 [ 112.113091][ T6991] should_fail_ex+0x3b0/0x4e0 [ 112.115616][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 112.117811][ T6991] _copy_to_user+0x2f/0xb0 [ 112.131081][ T6991] simple_read_from_buffer+0xca/0x150 [ 112.136521][ T6991] proc_fail_nth_read+0x1e9/0x250 [ 112.141603][ T6991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.147208][ T6991] ? rw_verify_area+0x55e/0x6f0 [ 112.149848][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 112.152088][ T6991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.162012][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.487'. [ 112.166563][ T6991] vfs_read+0x201/0xbc0 [ 112.166604][ T6991] ? __pfx_lock_release+0x10/0x10 [ 112.184738][ T6991] ? __pfx_vfs_read+0x10/0x10 [ 112.189489][ T6991] ? __fget_files+0x3f3/0x470 [ 112.194233][ T6991] ? fdget_pos+0x24e/0x320 [ 112.198706][ T6991] ksys_read+0x183/0x2b0 [ 112.203002][ T6991] ? __pfx_ksys_read+0x10/0x10 [ 112.207820][ T6991] ? do_syscall_64+0x100/0x230 [ 112.212637][ T6991] ? do_syscall_64+0xb6/0x230 [ 112.217367][ T6991] do_syscall_64+0xf3/0x230 [ 112.221927][ T6991] ? clear_bhb_loop+0x35/0x90 [ 112.226658][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.232630][ T6991] RIP: 0033:0x7fa14d97ca3c [ 112.237096][ T6991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 112.256749][ T6991] RSP: 002b:00007fa14e78b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.265226][ T6991] RAX: ffffffffffffffda RBX: 00007fa14db35f80 RCX: 00007fa14d97ca3c [ 112.273246][ T6991] RDX: 000000000000000f RSI: 00007fa14e78b0a0 RDI: 0000000000000003 [ 112.281265][ T6991] RBP: 00007fa14e78b090 R08: 0000000000000000 R09: 0000000000000000 [ 112.289280][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.297318][ T6991] R13: 0000000000000000 R14: 00007fa14db35f80 R15: 00007ffcb8be81e8 [ 112.305324][ T6991] [ 112.415480][ T5243] block nbd0: Receive control failed (result -107) [ 112.446738][ T6807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.480759][ T6807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.502124][ T6807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.551725][ T7012] netlink: 'syz.2.490': attribute type 3 has an invalid length. [ 112.579215][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 112.614378][ T6807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.871361][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.910889][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.939026][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 113.091336][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 113.101144][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 113.169191][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.176758][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.215903][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.223373][ T7045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.230822][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.237964][ T7045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.261366][ T7045] : (slave bridge0): Enslaving as an active interface with an up link [ 113.273402][ T7046] lo: entered promiscuous mode [ 113.289840][ T7046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.376318][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.383672][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.398138][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.405404][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.487292][ T6807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.553720][ T5243] Bluetooth: hci2: command tx timeout [ 113.697119][ T7070] bridge0: port 1(vlan2) entered blocking state [ 113.709495][ T7070] bridge0: port 1(vlan2) entered disabled state [ 113.717938][ T7070] vlan2: entered allmulticast mode [ 113.754431][ T7070] vlan2: left allmulticast mode [ 113.799859][ T7076] openvswitch: netlink: Message has 8 unknown bytes. [ 113.947561][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.045099][ T6807] veth0_vlan: entered promiscuous mode [ 114.066546][ T6807] veth1_vlan: entered promiscuous mode [ 114.153136][ T6807] veth0_macvtap: entered promiscuous mode [ 114.172764][ T6807] veth1_macvtap: entered promiscuous mode [ 114.201708][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.220831][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.230987][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.247513][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.259205][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.271653][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.284155][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.298813][ T7092] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 114.313934][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.333552][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.350477][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.361039][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.372482][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.387269][ T6807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.406059][ T6807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.423260][ T6807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.432637][ T6807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.538165][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.551861][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.587486][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.620603][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.831396][ T7112] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 115.317281][ T7138] validate_nla: 5 callbacks suppressed [ 115.317304][ T7138] netlink: 'syz.1.533': attribute type 10 has an invalid length. [ 115.330974][ T7138] macvlan0: entered promiscuous mode [ 115.336502][ T7138] macvlan0: entered allmulticast mode [ 115.343078][ T7138] veth1_vlan: entered allmulticast mode [ 115.351645][ T7138] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 115.439747][ T7142] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 115.609057][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.774343][ T7149] veth1_vlan: left allmulticast mode [ 116.031929][ T7158] x_tables: unsorted underflow at hook 4 [ 116.278232][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.293614][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.302216][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.310846][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.318682][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.328937][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.368074][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.562542][ T7195] __nla_validate_parse: 6 callbacks suppressed [ 116.562563][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 116.631267][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 116.680457][ T7198] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.547'. [ 116.692331][ T7198] netlink: 133 bytes leftover after parsing attributes in process `syz.0.547'. [ 116.737153][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.796537][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 116.846052][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.930170][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.947243][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.955897][ T7173] bridge_slave_0: entered allmulticast mode [ 116.972401][ T7173] bridge_slave_0: entered promiscuous mode [ 116.981827][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.993961][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.001490][ T7173] bridge_slave_1: entered allmulticast mode [ 117.008878][ T7173] bridge_slave_1: entered promiscuous mode [ 117.109407][ T7223] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.144644][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.173281][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.326396][ T7173] team0: Port device team_slave_0 added [ 117.372255][ T7173] team0: Port device team_slave_1 added [ 117.385391][ T12] bridge_slave_1: left allmulticast mode [ 117.401354][ T12] bridge_slave_1: left promiscuous mode [ 117.417559][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.444815][ T12] bridge_slave_0: left allmulticast mode [ 117.450704][ T12] bridge_slave_0: left promiscuous mode [ 117.461863][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.889024][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.902037][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.913364][ T12] bond0 (unregistering): Released all slaves [ 118.066027][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.083689][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.135088][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.180588][ T7252] tipc: Started in network mode [ 118.185828][ T7252] tipc: Node identity ffffffff, cluster identity 4711 [ 118.192707][ T7252] tipc: Node number set to 4294967295 [ 118.201117][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.212519][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.239112][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.299044][ T7262] Driver unsupported XDP return value 0 on prog (id 178) dev N/A, expect packet loss! [ 118.356872][ T55] Bluetooth: hci2: command tx timeout [ 118.380440][ T7267] netlink: 'syz.1.567': attribute type 6 has an invalid length. [ 118.423157][ T7173] hsr_slave_0: entered promiscuous mode [ 118.446276][ T7173] hsr_slave_1: entered promiscuous mode [ 118.460156][ T7173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.469213][ T7173] Cannot create hsr debugfs directory [ 118.484391][ T12] hsr_slave_0: left promiscuous mode [ 118.490770][ T12] hsr_slave_1: left promiscuous mode [ 118.500703][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.508223][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.521145][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.528873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.555379][ T12] veth1_macvtap: left promiscuous mode [ 118.561167][ T12] veth0_macvtap: left promiscuous mode [ 118.568030][ T12] veth1_vlan: left promiscuous mode [ 118.581221][ T12] veth0_vlan: left promiscuous mode [ 119.184444][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.223182][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.029715][ T7313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.581'. [ 120.355202][ T7326] vlan2: entered allmulticast mode [ 120.366841][ T7326] : entered allmulticast mode [ 120.371770][ T7326] bond_slave_0: entered allmulticast mode [ 120.381209][ T7326] bond_slave_1: entered allmulticast mode [ 120.391986][ T7326] bridge0: entered allmulticast mode [ 120.413854][ T7326] : left allmulticast mode [ 120.418512][ T7326] bond_slave_0: left allmulticast mode [ 120.431186][ T7326] bond_slave_1: left allmulticast mode [ 120.438088][ T7326] bridge0: left allmulticast mode [ 120.443923][ T55] Bluetooth: hci2: command tx timeout [ 120.496855][ T7333] netlink: 'syz.1.587': attribute type 6 has an invalid length. [ 120.599284][ T7173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.625322][ T7173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.661235][ T7173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.686038][ T7173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.723071][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 120.889640][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.941135][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'. [ 120.993846][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.592'. [ 121.036399][ T7348] gretap1: entered promiscuous mode [ 121.041642][ T7348] gretap1: entered allmulticast mode [ 121.144530][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.180608][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.187841][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.223038][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.230253][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.370395][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 121.711722][ T7392] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 121.781553][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.846112][ T7173] veth0_vlan: entered promiscuous mode [ 121.870376][ T7173] veth1_vlan: entered promiscuous mode [ 121.902936][ T7173] veth0_macvtap: entered promiscuous mode [ 121.925772][ T7173] veth1_macvtap: entered promiscuous mode [ 121.950420][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.971220][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.982156][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.998756][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.008695][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.019461][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.036213][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.054885][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.074623][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.095710][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.113695][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.149634][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.287129][ T7173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.302440][ T7173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.312347][ T7173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.326503][ T7173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.473318][ T2458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.503009][ T2458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.524862][ T55] Bluetooth: hci2: command tx timeout [ 122.589684][ T7425] dvmrp1: left allmulticast mode [ 122.709640][ T7432] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.617'. [ 122.719849][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.725584][ T7432] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.617'. [ 122.743330][ T7432] netlink: 332 bytes leftover after parsing attributes in process `syz.4.617'. [ 122.767552][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.984938][ T7447] batman_adv: batadv0: Adding interface: dummy0 [ 122.991252][ T7447] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.020479][ T7447] batman_adv: batadv0: Interface activated: dummy0 [ 123.148803][ T7459] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 123.160971][ T4353] wlan1: Trigger new scan to find an IBSS to join [ 123.161689][ T7459] netlink: 'syz.4.623': attribute type 2 has an invalid length. [ 123.184882][ T7459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.623'. [ 123.715814][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.313419][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.555540][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.564882][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.573250][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.583960][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.595109][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.602531][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.631720][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.743161][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.959481][ T1107] bridge_slave_1: left allmulticast mode [ 124.965352][ T1107] bridge_slave_1: left promiscuous mode [ 124.971198][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.006744][ T1107] bridge_slave_0: left allmulticast mode [ 125.021566][ T1107] bridge_slave_0: left promiscuous mode [ 125.028098][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.547869][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.562646][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.575212][ T1107] bond0 (unregistering): Released all slaves [ 125.588579][ T7519] chnl_net:caif_netlink_parms(): no params data found [ 125.758506][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.766038][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.773207][ T7519] bridge_slave_0: entered allmulticast mode [ 125.780026][ T7519] bridge_slave_0: entered promiscuous mode [ 125.793734][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.800932][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.808497][ T7519] bridge_slave_1: entered allmulticast mode [ 125.815681][ T7519] bridge_slave_1: entered promiscuous mode [ 125.867310][ T7519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.880721][ T7519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.922837][ T7519] team0: Port device team_slave_0 added [ 125.935319][ T1107] hsr_slave_0: left promiscuous mode [ 125.941283][ T1107] hsr_slave_1: left promiscuous mode [ 125.947692][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.955583][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.964519][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.971945][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.991189][ T1107] veth1_macvtap: left promiscuous mode [ 125.996836][ T1107] veth0_macvtap: left promiscuous mode [ 126.002388][ T1107] veth1_vlan: left promiscuous mode [ 126.007764][ T1107] veth0_vlan: left promiscuous mode [ 126.194692][ T11] wlan1: Trigger new scan to find an IBSS to join [ 126.420480][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 126.462405][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 126.673684][ T55] Bluetooth: hci2: command tx timeout [ 126.823338][ T7519] team0: Port device team_slave_1 added [ 126.854370][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.861369][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.896498][ T7519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.913933][ T7519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.920955][ T7519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.949592][ T7519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.999933][ T7519] hsr_slave_0: entered promiscuous mode [ 127.006852][ T7519] hsr_slave_1: entered promiscuous mode [ 127.012958][ T7519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.020878][ T7519] Cannot create hsr debugfs directory [ 127.344217][ T7519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.354277][ T7519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.363562][ T7519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.372625][ T7519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.438164][ T7519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.461309][ T7519] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.472383][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.479588][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.494106][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.501268][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.657923][ T7519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.697772][ T7519] veth0_vlan: entered promiscuous mode [ 127.710733][ T7519] veth1_vlan: entered promiscuous mode [ 127.739121][ T7519] veth0_macvtap: entered promiscuous mode [ 127.748086][ T7519] veth1_macvtap: entered promiscuous mode [ 127.767011][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.778520][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.788882][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.799848][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.809815][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.820487][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.831729][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.844350][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.855058][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.865686][ T7519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.876613][ T7519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.888209][ T7519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.900047][ T7519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.910045][ T7519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.919056][ T7519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.929029][ T7519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.990276][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.004856][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.026024][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.035391][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.164821][ T82] wlan1: Trigger new scan to find an IBSS to join [ 129.738247][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.095145][ T62] wlan1: Creating new IBSS network, BSSID 66:e1:77:43:2d:c8 [ 130.116922][ C1] ------------[ cut here ]------------ [ 130.122687][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 130.133614][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 [ 130.143428][ C1] Modules linked in: [ 130.147440][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0 [ 130.157863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.167990][ C1] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 130.174300][ C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 130.194126][ C1] RSP: 0018:ffffc90000a18760 EFLAGS: 00010246 [ 130.200253][ C1] RAX: 787647c1f75ace00 RBX: 000000000000000c RCX: ffff88801d2f0000 [ 130.208291][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.216332][ C1] RBP: ffff8880651d62a8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8 [ 130.224392][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800 [ 130.232395][ C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 130.240405][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 130.249394][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.256029][ C1] CR2: 00007ffd08851f10 CR3: 000000000e734000 CR4: 00000000003526f0 [ 130.264067][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.272068][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.280076][ C1] Call Trace: [ 130.283368][ C1] [ 130.286263][ C1] ? __warn+0x168/0x4e0 [ 130.290487][ C1] ? __rate_control_send_low+0x659/0x890 [ 130.296199][ C1] ? report_bug+0x2b3/0x500 [ 130.300737][ C1] ? __rate_control_send_low+0x659/0x890 [ 130.306430][ C1] ? handle_bug+0x60/0x90 [ 130.310815][ C1] ? exc_invalid_op+0x1a/0x50 [ 130.315572][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 130.320609][ C1] ? __warn_printk+0x292/0x360 [ 130.325432][ C1] ? __rate_control_send_low+0x659/0x890 [ 130.331113][ C1] rate_control_send_low+0x1a8/0x770 [ 130.336447][ C1] rate_control_get_rate+0x20e/0x5e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 130.341828][ C1] ieee80211_beacon_get_finish+0x49e/0x870 [ 130.347775][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 130.354206][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 130.359824][ C1] ? __ieee80211_beacon_get+0xa71/0x15c0 [ 130.365570][ C1] __ieee80211_beacon_get+0xf7e/0x15c0 [ 130.371165][ C1] ? __ieee80211_beacon_get+0x36/0x15c0 [ 130.376813][ C1] ieee80211_beacon_get_tim+0xb4/0x320 [ 130.382339][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 130.388545][ C1] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 130.394196][ C1] __iterate_interfaces+0x222/0x510 [ 130.399468][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.405628][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.411749][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 130.419029][ C1] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 130.426165][ C1] mac80211_hwsim_beacon+0xd4/0x1f0 [ 130.431425][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 130.437315][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 130.442575][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 130.448668][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 130.454468][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 130.460597][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 130.465805][ C1] handle_softirqs+0x2c5/0x980 [ 130.470639][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 130.475507][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 130.480860][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 130.486154][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 130.490914][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 130.496221][ C1] irq_exit_rcu+0x9/0x30 [ 130.500522][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 130.506248][ C1] [ 130.509215][ C1] [ 130.512186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.518254][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 130.523616][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d a5 41 a4 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 130.543394][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 130.549656][ C1] RAX: ffff88801d2f0000 RBX: ffff888144299064 RCX: 0000000000028fe9 [ 130.557730][ C1] RDX: 0000000000000001 RSI: ffff888144299000 RDI: ffff888144299064 [ 130.565791][ C1] RBP: 000000000003a9b8 R08: ffff8880b8737e9b R09: 1ffff110170e6fd3 [ 130.573863][ C1] R10: dffffc0000000000 R11: ffffffff8bc68950 R12: ffff888146afe800 [ 130.581868][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f12dea0 [ 130.589930][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 130.595300][ C1] acpi_idle_enter+0xe4/0x140 [ 130.600032][ C1] cpuidle_enter_state+0x109/0x470 [ 130.605199][ C1] ? __pfx_menu_select+0x10/0x10 [ 130.610193][ C1] cpuidle_enter+0x5d/0xa0 [ 130.614672][ C1] do_idle+0x375/0x5d0 [ 130.618786][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.625165][ C1] ? __pfx_do_idle+0x10/0x10 [ 130.629780][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 130.635167][ C1] cpu_startup_entry+0x42/0x60 [ 130.639987][ C1] start_secondary+0x102/0x110 [ 130.644845][ C1] common_startup_64+0x13e/0x147 [ 130.649851][ C1] [ 130.652920][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.660242][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-rc3-syzkaller-00140-g07d6bf634bc8 #0 [ 130.670596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.680663][ C1] Call Trace: [ 130.683964][ C1] [ 130.686830][ C1] dump_stack_lvl+0x241/0x360 [ 130.691517][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.696781][ C1] ? __pfx__printk+0x10/0x10 [ 130.701425][ C1] ? vscnprintf+0x5d/0x90 [ 130.705771][ C1] panic+0x349/0x880 [ 130.709693][ C1] ? __warn+0x177/0x4e0 [ 130.713870][ C1] ? __pfx_panic+0x10/0x10 [ 130.718322][ C1] ? common_startup_64+0x13e/0x147 [ 130.723468][ C1] __warn+0x34b/0x4e0 [ 130.727478][ C1] ? __rate_control_send_low+0x659/0x890 [ 130.733125][ C1] report_bug+0x2b3/0x500 [ 130.737482][ C1] ? __rate_control_send_low+0x659/0x890 [ 130.743259][ C1] handle_bug+0x60/0x90 [ 130.747429][ C1] exc_invalid_op+0x1a/0x50 [ 130.751982][ C1] asm_exc_invalid_op+0x1a/0x20 [ 130.756881][ C1] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 130.763162][ C1] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 00 6a 2a 8d 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 c8 41 1f f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 130.782796][ C1] RSP: 0018:ffffc90000a18760 EFLAGS: 00010246 [ 130.788920][ C1] RAX: 787647c1f75ace00 RBX: 000000000000000c RCX: ffff88801d2f0000 [ 130.796920][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.804928][ C1] RBP: ffff8880651d62a8 R08: ffffffff8155e402 R09: fffffbfff1cf9fd8 [ 130.812952][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd8 R12: 0000000000000800 [ 130.820946][ C1] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 130.828943][ C1] ? __warn_printk+0x292/0x360 [ 130.833769][ C1] rate_control_send_low+0x1a8/0x770 [ 130.839113][ C1] rate_control_get_rate+0x20e/0x5e0 [ 130.844456][ C1] ieee80211_beacon_get_finish+0x49e/0x870 [ 130.850303][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 130.856678][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 130.862360][ C1] ? __ieee80211_beacon_get+0xa71/0x15c0 [ 130.868018][ C1] __ieee80211_beacon_get+0xf7e/0x15c0 [ 130.873502][ C1] ? __ieee80211_beacon_get+0x36/0x15c0 [ 130.879088][ C1] ieee80211_beacon_get_tim+0xb4/0x320 [ 130.884573][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 130.890675][ C1] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 130.896263][ C1] __iterate_interfaces+0x222/0x510 [ 130.901490][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.907568][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 130.913686][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 130.920923][ C1] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 130.927965][ C1] mac80211_hwsim_beacon+0xd4/0x1f0 [ 130.933203][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 130.939038][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 130.944285][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 130.950312][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 130.956056][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 130.962164][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 130.967312][ C1] handle_softirqs+0x2c5/0x980 [ 130.972094][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 130.976888][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 130.982231][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 130.987441][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 130.992040][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 130.997275][ C1] irq_exit_rcu+0x9/0x30 [ 131.001555][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 131.007206][ C1] [ 131.010138][ C1] [ 131.013069][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.019068][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 131.024387][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d a5 41 a4 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 131.044136][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 131.050261][ C1] RAX: ffff88801d2f0000 RBX: ffff888144299064 RCX: 0000000000028fe9 [ 131.058258][ C1] RDX: 0000000000000001 RSI: ffff888144299000 RDI: ffff888144299064 [ 131.066285][ C1] RBP: 000000000003a9b8 R08: ffff8880b8737e9b R09: 1ffff110170e6fd3 [ 131.074276][ C1] R10: dffffc0000000000 R11: ffffffff8bc68950 R12: ffff888146afe800 [ 131.082281][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f12dea0 [ 131.090283][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 131.095638][ C1] acpi_idle_enter+0xe4/0x140 [ 131.100350][ C1] cpuidle_enter_state+0x109/0x470 [ 131.105473][ C1] ? __pfx_menu_select+0x10/0x10 [ 131.110432][ C1] cpuidle_enter+0x5d/0xa0 [ 131.114886][ C1] do_idle+0x375/0x5d0 [ 131.119010][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.125391][ C1] ? __pfx_do_idle+0x10/0x10 [ 131.130013][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 131.135254][ C1] cpu_startup_entry+0x42/0x60 [ 131.140067][ C1] start_secondary+0x102/0x110 [ 131.144862][ C1] common_startup_64+0x13e/0x147 [ 131.149845][ C1] [ 131.153160][ C1] Kernel Offset: disabled [ 131.157517][ C1] Rebooting in 86400 seconds..