last executing test programs: 1m12.845345264s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 1m11.529604115s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 59.151142362s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 58.903460473s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 45.381824548s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="a8a94bee34b72a5e864a5a5987e2492410348f197b845a3fa1cff9dd520adec621cf59b39fbc45dc6f1648a19157197c11a80ca531b2e3e34a241667439983dc289865fea94653d52fd0f4211e99e381d7ccbeebffa7ea1bfa06a150897f3f60d33b4eddd43f625b8912d072b3fe2498034213649911cf14c70ee6c16152fb15612d2d7ac41e532a2f78d243068d9293558cb7adcc709184e1ba0ecc5a474420b1656b0010338201e883803db90960aa54c4e655841beb25daae24420e50118e2e7181a18756779b29ffaa4b3ad5577c1eea9a2f60e13a95532919b463288c8513e5e721851949bf4bf477785daf02876a2d9953318e9070aea1ca2ed91ca5e7d136d72d14cd3098a7654ba0b04aaf"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 44.245080662s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 32.921823652s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 30.48427044s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 20.765854442s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 19.948558259s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 9.118141245s ago: executing program 0 (id=1086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket(0x6, 0x5, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc0000001000030428bd70000000800000000000583afa1bb67439e7437f85a98a4b06ee66ae84c0b2ac6f91911a4ca677ef45df42ae7ec938a03f5ace54e79ae84749854341dccfce2a38acab9593ee7163c237cb71495deab34fde6cc86676c53219ce06c1374535", @ANYRES32=0x0, @ANYBLOB="0168000000000000d400128009000100766c616e00000000c4000280280003800c000100fcffffff030000000c00010000000000040000000c0001000700000003000000100004800c000100040000000e09010006000100010000000600050088a80000340004800c0001002f000000010400000c00010007000000800000000c000100ff0f0000a20400000c00010007000000018000000c0002000500000000000000280004800c00010040000000050000000c000100010000007f4400000c00010002000000010000000600010004000000060001000400000008000500", @ANYRES32=r1, @ANYBLOB="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"], 0xfc}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 8.055831578s ago: executing program 1 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18100000fcffffff000000008000000085000000a80000007b69f8ffffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 4.09623733s ago: executing program 4 (id=1513): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x30, 0xffffffffffffffff, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xfd}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="98004000000000000000cf100000951c0000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000240)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000674736c7a046d01ad8da4aa00000", @ANYRES32=r4, @ANYBLOB="08001b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x8040050}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20008041) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6873720000000018000380"], 0x44}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r8, 0x29, 0x4d, &(0x7f0000000080)=ANY=[@ANYRESDEC=r8], 0x8) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/87, 0x57}, 0x2020) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000ba0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) r11 = accept(r2, &(0x7f0000000280)=@ieee802154={0x24, @short}, &(0x7f0000000500)=0x80) getsockopt$inet6_tcp_buf(r11, 0x6, 0x1f, &(0x7f0000000700)=""/195, &(0x7f0000000400)=0xc3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) sendto$inet6(r9, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 3.787820458s ago: executing program 4 (id=1514): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) epoll_create(0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {0x4d}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xa8}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.504245942s ago: executing program 4 (id=1517): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @broadcast}, "7e5245a7c136bec9"}}}}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r0, &(0x7f0000000180)={0x0, 0x59, 0x0, 0x0, &(0x7f0000000780)=""/76, 0x4c}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000180), 0x6, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES64], 0x80}, 0x2, 0x0, 0x0, 0x10000840}, 0x4881) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) sendmsg$rds(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000080)=""/56, 0x38}], 0x3, &(0x7f0000000440)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x2}, &(0x7f00000003c0)=0x39, &(0x7f0000000400), 0x1, 0x7fff, 0xfffffffffffffff0, 0xe, 0x0, 0x9}}], 0x58, 0x40}, 0x80) 3.333749041s ago: executing program 2 (id=1518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) unshare(0x24020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000340)='cgroup\x00'}, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e080000000800002200000000c256dd9749a66771c71fe1920ba8e473a2e4daa870d1d10634ac0ffb2572247a5fbf091f750acc661176d38014a4949d51e1da778dac1e3e06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011802ee5afbf24fbcccc554cd9761e81b8dad8a2018544a3f855"], 0x30}], 0x1}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd", 0xffffff23}], 0x1}], 0x1, 0x2c004080) accept4(r7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000004000000000000000900020073797a3000000000100003006269746d61703a706f727400140007800600050000000000060004400000000005000100070000000500040000000000"], 0x5c}}, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000700)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff1a, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x68}}, 0x4) 2.584713971s ago: executing program 3 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a010100000000000000000100000920000000000a010500c285501527f0a2b40000090900f1ff72797a300000000020000000050a05000000000000000000010000060900010073797a30"], 0x9c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000)=0xa000000000000, 0x12) 2.564006125s ago: executing program 4 (id=1522): syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x4dc4}, @device_b, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x4, {0x8, 0x5}, "281830144501e8e6"}, {0x0, 0x7, {0x8, 0x3}, "622361614a225ec4"}, {0x0, 0xa, {0xd, 0x8}, "697074c1692926a1"}, {0x0, 0x8, {0x8, 0x3}, "180e423dedaccae3"}], {0x0, 0x6, {0x1, 0xff}, "1bf45d3c0face57f"}}}, 0x4e) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @from_mac=@broadcast, @broadcast, @random="03b5361b4b30", {0xb, 0xb}, "", @value={0x7, 0x0, 0x1}}, @random="daa43766c61660bf67e4fa3883761307f4dbc2f58b22320fffdd29652ce3e7461a052550eb1a4090b1573e954af2faed58e757b33c1976f9fb4d52999f250cab7a8870a2d316e0f0ca57d4ec93d69e60b51d7cb98806cfe3e14e31fe00b784e50ca5241825ef9c14b930adb00b8c182e73b60dfd3cfc73f0bc571cbad82d9e4b9d045b09feded86a490a309d9a88e1"}, 0xa9) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa}, @broadcast, @broadcast, @initial, {0x1, 0x6}}, 0x1000, 0x1512, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0xa5, "02b28749a0b6cf11b25687f2a826b5cb176fa5c965e0d6c82d0842d817514f3c35ff639254dc98ca76482e886138472afee657139f12a3ea511780df1b3039622b3de845b8ccb0caf4818edec33bcc7eb356db664c1c863bc3538cf46fb7d3089f0c4a32fba7c582093953e61bf597c6c7a040d75e721f4d61ecd3f7df05675d5619ed24c5df87e4030e03804dee11459f03b299d4d6f28938c8ffcefb4909c5b3b9f6f52c"}, {0xdd, 0xc5, "223625acab7913719bb2db46f4ae5b0ec1417c2f8eb5ba74f6a65e203c2e9ff73e414b751fea71354759269f9087b9559d9206d36b1a85c7eb567f6c03bf4efe0ec8fa5a39ab200756d08187b2683ccc8f2d7ae4968020721a24b6692923d1c1cba43d22ee91eed021115e6dc97790d75f3c5b138d4f6516b53ef636b8d8ba1566e1f5a314b648ac57a18983c7727ab9788f682f83c25d687aeac3e8e0e5bffbae54cdb7fb6761e659ff098d1d8d28b268a1b94799a3774e6c3630809db3e29d9b82ba70ef"}, {0xdd, 0x53, "1ba60026f5f033e7b51838301080217bae0eba46fcae5e398df19e2a36744f59584371d57b791ba15afd0a51d3e68d37514a7e3a0977a90969289256a2e7dddf64136e1371e657edde061773deaa79caf581bf"}, {0xdd, 0xbf, "d34aaad5fbaddc3ec1478c251a152d3a6b9c6b2efda292d9c29ed492f72afa9a85972e07db110309b50da89b81666dc291c8047f1d9e2e402b8d3d511cefbc5801aae69c59ce54e719014da99f0edf72e2675750677ac0e5a553aefc1fc4c764abb269713e4b72b3980d1dc547bb75fd1323e644b8c5e79bde001f9c150413c91efe2c5760eef2dccf2389795dae173dcbdca509e142b16e4c6399e149a944ed9fda09f094616e4f6e8fbe12009661747b0fa5de5bd2c23fe470497f385503"}, {0xdd, 0xf2, "2fe3a09a6957aa1f6205225a58a098af500ed1b95b6fd77b9740882aa12b440f22e9dccd8da065408d2cb0cb5690b26d5cf61d020e75f07cecaf4569bb3669602631ed33697570416b35581df3895a34377dcddab2449c17617a49dff4b51e6eaa6faf4a91a31e62a2862ccb01ed23bd5f2dd5d75b0dce68c69e90ae3454d1b3fe292bc81842b1c6401997119e1766c2ec63cbe8840f5c0fa7abc9dc3d7f6921a9a3c58764321aedacd49bb04b80b948457044aa66f77a83639d324a7ac4fc22ebe09ef17108a335d0a123c86c5095ae2ba63cf66f124eea4840e386d2e8ff9680e32cd0d49f3f6d75f74e1220d5c5fe1764"}]}, 0x39c) syz_80211_inject_frame(&(0x7f00000005c0), &(0x7f0000000600)=@ctrl_frame=@pspoll={{}, @random=0x100, @initial, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac, {0x5, 0x6}, "", @value={0x0, 0x1, 0x1, 0x1, 0x90}, @value=@ver_80211n={0x0, 0xd46, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x14e) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000800)=@broadcast, &(0x7f0000000840)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0x6, 0x8}, @broadcast}, @random="1fcf679ec2054507963015cd9fb400166d50cc44211c5eeb82b3a42b50c59ad271ae9cdbadfbef43655e95a719c791f6174e17328a81eea5ee3fa174257db635157ada95e761d66ae75955bc4ca168ef732b0361622c31c3294cdb396eadba723438cbccdb8d5b0a560f49d3e6153d56921584b4781374bfeb91ab0532bbc4afc1ca58f8d4038bb5bbd049d15593bef3531268d7274aab694ff444086aeb119edcadbbd9c6b8fcf95d561c66c844a5fe927102239e59f5e8df4f60cc6f366a11c68ab7b88bb344fac503ae837a058122f6d6f0359335e2b3ab7afc7468999eb81742b5ff0174b028c4368e7aa2c8"}, 0x10c) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@ctrl_frame=@rts={{}, {0x1}, @broadcast, @device_b}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='blkio.bfq.io_serviced\x00', 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000a40)=@broadcast, &(0x7f0000000a80)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x190f}, @device_a, @broadcast, @random="7f2aeaab19d9", {0x8, 0x2}, @value=@ver_80211n={0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @val={0x0, 0x1b, @random="442aa3764d366f88c512fd183e3853b0ed76d3ebe84568bc02e3cf"}, @void, @val={0x3, 0x1, 0x6c}, @void, @val={0x72, 0x6}, [{0xdd, 0xe6, "5f221c4c18b5cadfd4fceb9232ff1ce1ba6abc1e161f0c61b8e718933384d2e8c04c4f7c586f6398c6715353145e2d96b646340991c50ff7a41f7fc20ffa5d3dc427961e2dea4de06356c4fe3ade3844bfec9d88a43697e57c11ccfd54a5b9563f8d927e4ca8a9c4cd80795c2c8c67cd1c98c1a0e3e826b1a07121eccf5728fd94684bf222ac9548f2263090b3ab579caf874d1ebe020e4c247c259118005072623393b2c220fe66242e8be7005236b53f3599bb5cb04ab69adf130667a2b0d3dd8a40c56ed297e246b9f69a89f9aa17e63109dd66874931399134cc46893b17a7294a70ab0d"}, {0xdd, 0x65, "28791213868e0498d10ad4be6d9be9930dc77da18875761af19fe3f50883877a9d9cff65318b9aafeaa40af206f46b53fa79a2c84879f677a2cc9388fe79621d04898082a6b0d6492279803f82bc3fd1341f0ec54997f96392d39013e8d558ca8b34bc19a1"}, {0xdd, 0xcd, "3d3a0bde197cf9e6951288aefca9903d94f0283d6006e1b7d1a58bf0a8b7212d67d83ee89c9ceecc376b8bfb093a22a6e251be99413e431768b5c6eb61c82b2133c140db02fcf614625d9aa17a360e553a3a91188405bcd09e82a7b40ed740a7f66975656e9afbdb8dc82a9f1795ecb540aa4ae320e7d8303da7ea4b90bf3a7eb31e61e20f2b30ac14a9b52fc8f1cde5633a5fb69be58157d9d1399d2f79faffe9ebe60083bb97b12b4a76c645f901efc1f5c640b57d502fc8dd5a4a108f0599e2307af4a7685e67a62cf56ee4"}, {0xdd, 0xdc, "c9c4e9f14d468bf3b17ee30e7850e13aa24643e0bf6d02282f01a1bfbafa60c4c0f5646885ea7841b40336d59f88db9c574476b605bb582d38f94efa9d1e6f050d8952c0a9f850f5d2284487cade63fbfab206484ac2bec8cf65d80fc390786e7ce331ad4c34635f208a80e929a0f069dbebe383a938e362972bc5c1499e8d52b751ee2b28e35f4cd9619879d9bef5fbf2c3dfc8b06a82ce9c9cd64c6d6517ce3a75b51e0f32687b54eaf5b607e4b18576e18d320ad2874a522a7641738d53a3caa6410d77571e56dca45d618664a1543281f861c5e709fe7c6bea3a"}, {0xdd, 0xae, "2d929cae06ffeadfc53c124ac8fdfb3837897d52778a6b182f42ce44fdfae36d8fdaa79e4d8c89ae185e41b5ef18fb42a74fa62a703b7e7f1d287ec46c4a90f70b8412f1505e0aaa2ba14215274dbf9231ce94b3d2046e7e850932a5be4a15a2cd3b3b3a7e3a8c35f5c9375e808537cd5aa9187b59b4154c4a6f75f18c01c15506c78d3b04c1acdfc35150e77ebf99da9ae7fc23b3698c06987e2e50c9812203823c6cffcc5901036e96544567d1"}, {0xdd, 0x1c, "8dc23008a822c9f55e610f942369fc89ec1a0140cf91215373278c7e"}, {0xdd, 0x42, "7ea6795e51bafdff9fe7dfe5fef12a8b93d6347acf714deaf0ff1915d80a9fae86640a8143096d6c80b37745d79795b9dc8ec49a7c6681b7a8802420f8112e4ad297"}, {0xdd, 0xdc, "a1fac56d8e67b2625deab079e1d461735f639c55d62c19d4bc356221ae3b8aae79bc35c3c114707de0e6e0a5e1ae5dc555bcd659ee621bf4e6448fe1f66b13750bf5bbd67518095b204faf532795d5684f549d4662637db64e4faf85feb52fe1e698f3dc22bfa642dcfb7e961e9309c89f4008fdc953836adde3fcf84c0a6dfa72c4d50fc4f30fa2781f5e9a904c65a89ee2cdbb9cb503ef525cbe5ac7b3220587b12e3c68e54ee28540309e53e082d900f9189c1ea3e9da728665f63bf2624b028d5af1b94b364f0e7cfd0e62d726aa861e5c1f2a67c90e9ee19366"}, {0xdd, 0x39, "230855af811cc4da5f7697f266d85336aa2669ba45e14cf01f968d91ac9f6e8c4ae7e84f544456708d5d29fc84474c26114f09761957841eb9"}]}, 0x56b) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000001040)=[{r0, 0x80}, {r0, 0x4}, {r0, 0x3037}, {r3, 0x80}], 0x4, 0xd) syz_80211_inject_frame(&(0x7f0000001080)=@device_b, &(0x7f00000010c0)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) syz_80211_inject_frame(&(0x7f0000001100)=@device_b, &(0x7f0000001140)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @broadcast, @from_mac, {0x0, 0x5}}, @val={0x0, 0x17, @random="17e40b868b90378cb6db4e7a314a31a264cfd27f861025"}, @void, @void, @void, @void, [{0xdd, 0x6f, "f1e0138892167dc6a0ae5bdc093cc37bd1d5751cf0a8a2fda69ee00e4fa85df93d820fe3d2a2465bd43f79b82fd7ac079525782c11973c374933536e7218c689adf60d8c9c5ec9d7c15776a464073b77e5d2af37e094092a7fc1130d25584a609b223df107d2680d31ed6bc370bd5a"}, {0xdd, 0x72, "1dadfcdd8cc4b74b7c78a15872668e558fa51fc4847c9a0e5a011e784c939681a6128ab6e5ec1eb366c2c1f3658f5b353bad115d78c104ac6ebfb463cb3a6bf7c29db47a28afc5e318f48599c9b71a0a42d098e9b96dbf98d977f74a0ddb957a0dce98c0d936f17169e8cdf1159f52434215"}, {0xdd, 0xbb, "31712e297304475291526984a7effc2b82f5840dc254472d2c2443b1ecbaa5b55fabe35bd7e48d7ebc91cc529aed89526f29ecb1e936faf60eb220e4f219fe0a7a245124ff6b6fd2c5c24c21f07639220012f847ce68b0f371e2f49c101e776f906df459bc29b8fa127acc8d9a1d48fe37630c3e5ff4b84b91e8722fd83364dc565090111c833eafce7e54694c612d2cd8149c3252705f3da87abbde2d8628a47c0db851138bb3c092db853811df32ec5f8cbcbbb9bc713d2531a0"}, {0xdd, 0x61, "ad34895e3112517dbadd266f628c94344a2ef2ce6481d6439478729ae3917e7c3da7c6b3804eaea5d7b7a165d94861736526017204e0f9d429c59a9c6274e2bc1acb1791bd7687d84443f0b9afa44c6674b2eb4fdc4647dbda359405a06f79d1e9"}]}, 0x236) r4 = socket$inet6(0xa, 0xa, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001380)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001480)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000014c0)={{{@in=@multicast2, @in6=@local, 0x4e22, 0x8, 0x4e20, 0xa177, 0xa, 0xa0, 0x20, 0x2e, 0x0, r5}, {0x8, 0x5, 0x2, 0x0, 0x9, 0xb07, 0x772, 0xc}, {0x6, 0x2fc, 0x4a6, 0xd45}, 0x0, 0x6e6bbe, 0x0, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d2, 0x2b}, 0xa, @in=@multicast2, 0x3503, 0x2, 0x0, 0x5, 0xff, 0x40, 0x5}}, 0xe8) syz_80211_inject_frame(&(0x7f00000015c0)=@broadcast, &(0x7f0000001600)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfb}, @broadcast, @initial, @random="aa984f7b3a4a", {0xb, 0x80}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x1}}, @a_msdu=[{@device_a, @device_a, 0xa8, "1f4292c6e63d4b50a91f8b5187d318300ad098a6fa38727eaf7511a79cfa5e5cbe121c8f4ac76a0307683453cce2091d507c2664b63a16832f1c6ee16dbaf46255d80c89d29527b80b5cdae528455d8ec276589699cdb2f9b4c192756cfc128b9851d0461a63cde517b600851016634384a3c7aa1aca2f055e9a12576e7dcb85c270af46eefc33acfaaccd2b651cdd48fdf258634300b1889100d8d1041b1894df8e2419b0831d45"}, {@device_a, @device_b, 0x1000, "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"}, {@broadcast, @device_a, 0x1000, "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"}, {@device_b, @device_a, 0xed, "ac7413ee5de3f40d7a39638b2fa7edcfbd9dc72bb0d34d3a08d57a9c5170de0c83c9fc5c050f21b8993671933c6242322b26c534f65cc74d72c6b93e15fd88c2f582c8a4f7aa3f6322c256c22273ff56398a52ce1bbece5f0c0e738bec98c393fc05c16ae59315449e11109748823df48f508134c30a83e95fd8f6bd05771c2ffd63c54c27cfedfd63a10b341e28deca29d2c6cd5407e9e5e526d7a01fe355c9cb0422231edf2c0953f0bb1ed9eba5d9249d25d5fa62cd49f24a9f2493b5f6d5f5040c67c90e7dc9d52151740d156e347b2bccb2784f8eb0dc5649baec4abd3559a6508e0f67c71e6ae4ac52ff"}, {@device_b, @broadcast, 0xad, "82604cfcad6f945416d3a956e7a3806186ab2589067a18ad76a483bd5a057be5f3bac71cd85ae06353b372abe974aeaccd685164285d5882f6d27cbc1d46ef5d4deadc45ca4fed8d92990929058bdc3cc735061d98f711d0b1e1f4c7c228684325649dd6a75b9f22ecf946b9315594098d4e2189e149b25a2b624c4d8c34748dd4d9c08814047926e6dbb77c0f2428f31534870f7b9d0cf1bdfec07648734dc948bb031c5732bc6424cbfe8f7c"}, {@device_a, @broadcast, 0x22, "ca710788d11ef53f2ed55d1b5d9781600fee5e7c1910ba22d2ced56602e8cefcc37a"}]}, 0x22dc) syz_80211_inject_frame(&(0x7f0000003900)=@broadcast, &(0x7f0000003940)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @device_a, @initial, {0x4, 0x4}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x2c, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000003980), &(0x7f00000039c0)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x45d3}, @device_b, @broadcast, @initial, {0x6, 0x3}}, 0x800, 0x35, @random=0x4, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x5, 0x0, {0xa4, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3}, 0x800, 0xb, 0xc0}}, [{0xdd, 0x23, "32f1416de0bea39ebbf53c7d59f7e25debd36cbd14cfb20d2ed7e91d7d959bc116a4c2"}, {0xdd, 0x49, "b1e73029178a568a87dbbe8489149ea836f16e8e1ecc07bd5575bc39f672a46fc69efb4a67a32f1a3cd6492e0a554a72833e36e48c7ee05a8c25a4593d28cbbbe939aab6939bb82c9c"}, {0xdd, 0x4c, "0744f2eeb7cde57b8975b03ed1b525740e15e885fdd15fa6d57090c130549036f99f1fedc485e8b620c78aa8379bc0c487a34acc1c6c15ff7338f071496d4a5bc71fb4312d3bcd83c34c4285"}]}, 0xf8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000003c80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b80)={0x84, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x68, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b1c76daac1a252fce55fbd8c70a9ba47037b4cad821cbd15a02a192afa8f592c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c5945cba3f42eefe59f32230c9ba0870"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2e1ec485c32ff4774a6744fff6c44b2e401e668899bd2158fc8c71d522eda3e1"}]}]}, 0x84}}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000003d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x1c, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x8040) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000003e40)) 2.389230232s ago: executing program 3 (id=1523): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x14, 0x0, 0x0, {0x8}}}}]}, 0x78}}, 0x0) sendto$packet(r1, &(0x7f0000000040)="cb314518385dbd10e5ff95606f602a0edfbac5773c354239e8130785d054e1c0", 0x20, 0x4001, &(0x7f0000000140)={0x11, 0xf7, r2, 0x1, 0x6}, 0x14) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="090000ff12000100000000000000000004000000"], 0x14}], 0x1}, 0x0) 2.153948544s ago: executing program 2 (id=1524): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/87, 0x57}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x5, 0xff, 0x1]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x91}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffb2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x8, 0xb69f, 0xa4a9, 0x80, 0xe, 0x3, 0xc000, 0x200, 0x7, 0x8]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24001}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 2.119768222s ago: executing program 3 (id=1525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000002000000002c000480280001800d00010073796e70726f7879000000001400028005000200090000000600014000000000096c5f00010073797a30000000000900020073797a32000000001400000011000100"/128], 0x80}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000340)=0x40) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000540)) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x84, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x84}}, 0x0) socket$inet(0x2, 0x5, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000000c0)="6079b13d0b9ed1645b9c3a2e4e128151ae98a2b54bd149057b82c23298c6a92d9e6c6a4c11af85dc52f3525948a56a90ea64489b24e9b534c9937923eb6b5d7f5cac4effa6ea6e8a3d062cad72352596a2dc4730b09010c58056b48fa032b63257bb6f4e67338d59bcc1672015e28f167681014ba118f5c543588de50b6e938d7d5731e46cee459e017da3225b600209a5e91e1db285867f3d106f6ee6269cdc86dd4e3f49644fb59a54cb19b4a4b0b2d46431772e287c98429319b9baf326f62d779dc47bd0c59d87ffbc4f", &(0x7f0000000040)=""/49, &(0x7f00000001c0)="95fc92ad1c3c6150b0d128665173fcf66b080aa5f744a6057a8dd8ceba97d3bd961b0622c4e409f4aa915a59baa64d5e54e990fda9d673bfb4b7a9cf06b8a500367735f5713048f7ed1150c8739fcd9ad895f98eff61c3105709e7c6710c4f6e129028da2664b6126127bad67bd75fee0911b0a5bf4ca0a8445be83bf0ea71fbbdd6b3ecb1c174999545f43d503e12572274a2361eab1fbc63d0421365d3386b4cbff22bd561be86f2544302850e5d1bf0547fe3ac66e29677242e5fb3a5cdc7e9812f6c428411a82ee9d0cedb9267ffff3a1923", &(0x7f00000002c0)="3e10d49c79ae493a41c697272d4e689a801ff85dcf880b04925fe2959659e2a26eedb6ff703963ec953f1b972aa182c2d5621c3af4ff4c3e6e4991520d9448b66ab985125db3cd78be5029af6f4f593abec7cdf8f918cb49017b94b99cb43df03318b98d9decc142eb605a020ee301b5cda30b16adf4209812cb785ee583cd60a608fa7c6e47da3870", 0x3, r3, 0x4}, 0x38) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x20, 0x6, "eb025247793123a5a1113307ee2ace2e62d56e5564ecb01c673add20"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "3eed6d63217a14bab3845a6efd03781a760ddb9ccfb23911ee9a83770cc4114e433c282e2301101106f3bd0f47f2c655a6c74ba0952088caf77129bd0d120a2f4cf4d9638db05375ebfd9e310ee2c1fafdebcdfe3882ea09feac2f4e87eb248109119dc5d886ac49a547f2ff28f6f5aa03f8d2e485d7578c651c6799795a8b68007b57759c55881a00154223dbcb2cdff528843e87d43318f0a9d3cc85fa8c2cd3e1ee18e4477587174fe38b56ff5634a6062b8cc39bd9b566fc43fe8668cb2cf7cdb3b0da4fe4baf376c946e02219e1128a7ee0b6b513e1047bcd900f44"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd12}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffa822}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b4}, 0x1, 0x0, 0x0, 0x1}, 0x24000100) sendto$inet6(r2, &(0x7f0000000500)="5bf63e", 0x3, 0x40c0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c00)={0x15c, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x700000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x428}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040000) 1.91156728s ago: executing program 2 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000587324fe00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000600)=@ethtool_channels={0x3d, 0x1, 0x1, 0x5, 0x9, 0x5, 0x2, 0x2, 0x7}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="26003300d0000000080211000001080211000000505050505050000000043b030000003e01000000"], 0x44}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='fib6_table_lookup\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.735225049s ago: executing program 3 (id=1527): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x70bd2d, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}]}, 0x18}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)="fff313b5de253b2422dea10f5c3fa65bcc0a88b9d57cec11bf01fc9191342918efd748b5d9b5b253490e2c075e84fe5dc76b3cfbdafbb99735eddcbe8dc8adf0ee7a9b9e29d0122b258ab673628c39624eddc47044511a82d454ff50a4877a5682847527377683cb3de994858294f6b08103c1b0c2589d2f5902a180e4fc909a490c915ec7212919a5a908497eef501a009b9c4f95d80b058a9a6bf613959e70bce37db52d1d2e92f4e235b8ab7b1aecf2e8fb237bf533abf2f5d806d811063a2b496f610e0de8b56c9f18962e23f236515b5b95328f8936783f89932b37a6", 0xdf}, {&(0x7f0000000140)="4d3d3f245154b1be12e3a4d7343d6f51d39afece6d2501ca2ba6f39367c18b38127a77634170e77300b8716fc9568c8f37b7357bea939297e231", 0x3a}, {&(0x7f00000001c0)='w', 0x1}], 0x3, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x8002}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="afc12bfd33bdfd550c3470", 0xb}, {&(0x7f0000000800)="1a3cc52e5ef2deef6962b54691329f627076cd43c8f4321649e222b241ce5a589070c9392410f57e185f16bf3f3e1e2b9fa93777f130799f67702159b6adfea3fec7e3597ae66d768379c6ce165678f7b190b06e07e52d7dedbe1a097b0bf9677199c62e32d7b8926a329ec4e704bf10c0247521", 0x74}, {&(0x7f0000000900)="96e541d319596e58dba293a5279eaa72cdff3728a953f329d45cb11a77cf5b27261e5f951f015a7dc9ff90acd0a35faeb4d0c965869eb215fe489a4a79a73e8159a57d7fb8eede1205bfeaa613b72fdbb7b3ee9940bfab84a6c7123b3d0bfd2e924a725b5607ec7cb734747b8109c61851d1d4a0f1e3edc4264edec3c9ab321adb489b6fee2e1f1d15e01b", 0x8b}, {&(0x7f00000009c0)="b5e627d16fdaf9971661367b5c3073045c002ee8183387b49cb505fef918301958bb2f257eabf638ad74af1cc3a0bf3d3f067837baa3f9b2ed492ac37f63f86db08ee5e65cd08b2e5175cd1c75b9232c6a076b27f71bc7b8898255c210841b15ce458844c643f7ddef1da7c6b6c262825959eac82cca577135f2844227590dea0e47d96e254f72", 0x87}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x20000040}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000c40)="9d3bbfef81aa16110f002131d335b23f3f9b2ed963b6c401adcbab48b6645a52fd3185c1dfbe18e46478d96faf74dc64ad1f2b89f337a91335fbe71f2a7eb79c29f3fde538de3b2ba0b01fdfd914bdb0b5799287253697c7e6a330f0f54fa5fa6a3a8b913ca43b2480cacbcb4665b0ab1ea0b3770ea04f36650bf88666fa7a6ac363dc10202d23505c3287dc27e1e954c52776c4d9831e8a087c982ab9095594ca7e5fe752c1dfdbeee11906161d3d68e904ea1c81ef6cb0aea25a8aa95776cb082ae357758772009150a7609599ebc283e3b68a0d9bc5bec7141d09aa49", 0xde}, {&(0x7f0000000d40)="c5cc44f49d0fe8a2267f9bdb4d1d53d04a442c59af85855440fd8b5e25ba7feab7236093a22de3a0ab1cfeef0e77b141d6e8ee28b3775f00b2271deb17363d2fb4ddb7083e86487d2ce6f358b902dcd29f43b710921f8c950fe94c13a35636956f9b9ee1c8d993c38e40e5cfd9aa1e66078837b3b2d21d8d20d27c0d3f1a029ce4ef003d", 0x84}, {&(0x7f0000000e00)="15eaacdf1372bc07d2f3479dde293291d65736bb8508f4bf182cf63100809d0663c7f26eb350245eed5efa18094f9ad5b771c1fe6f6b0e538fb87ab15eb4087a1167c3ef4e304f038213f51821baab055f922d318ac39f46a193bcf402633e60fbaf1f5d91ae91b4c2dcb35b0a5d17866b04cf56ac0bd2b03dd1e255612ac0cb987d3d72ddd85a3f493c5e2b30911e67e1ae6f214f14dab11484b1c607d1e3a8785c1a64fd134615abc2d3c4ca6f2c", 0xaf}, {&(0x7f0000000ec0)="85520ee9b30eb23ac46d53233d88ca0006fbeb1fd42ddb01f41f89e0ffda345883df97907c007a0d5e3339bba8309c95301b2049569575319d7401988dda418e39889c3434fd1b988d4a1772cab78106f9422b821c7eafbb1079f47552b8e510d2cb0a912a5831c6f02dd5bd645d32867715949ac6a47591be7d56371864ec07f7e36302f61fc827ea8b55ae8bbf56813d8c45d51cba72306c", 0x99}, {&(0x7f0000000f80)="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", 0xfe}, {&(0x7f0000001080)="19df29fe4acc5fd7b99f6131aa9b65ae19298cfc73bc12507dac0e83ce2f6ae1b453984d9e134d2bc52002fa0a026b8ce58f5be7fa993bf8f185785945ea49a2f364364b8d417b1dd8f414f31ab3decba7d73d2a25f96b38d0393d8c41704cbe63b02663e192562fa030f2ed3d9f120392518fe90bd1a1fae671d790cf918ca4059cb23647293823b87e10cebba6432ed0aa992b91705e50ea9651d3767ada01aa4f70d543730767f9d1fb854189c567b8598bfe2ea287f03819205d5ba04423a9c60caf6d124b2398af98", 0xcb}, {&(0x7f0000001180)="3b179ccc70a50f042e909b4d28acfdf9b755f12768c39bba010de70a56a7b7bc6825e78f9d37f3d41080468cb0843138d30a0c6a2cb689fbf00b3cf5b49a761108de4d1fd86c2acce9de8775afdb251fed1e932afb570704e66b81439c3b588c94c8133bcbaee239d9f1a157df7f50421ad079ec873e4bfd8f5ac1196f03aff37608f875a1c291625e368f086007b318b81cabc43786816ea325ffb62943c4904e4820f5ca31bc4e3f4b3b693a73bbc421da6b0b99d800a6d5c77927ae713f9bce7f1852ba88a3117273bdfb3a0fa50c3cb4a80b826148c6bf", 0xd9}], 0x7, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x40}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x4000001}}], 0x4, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e21, 0x9, 0xa, 0x60, 0x20, 0xba}, {0x0, 0x4a1, 0xffffffffffffff2f, 0x724, 0x0, 0xf, 0x6f, 0x9}, {0x0, 0x7, 0x8, 0xfffffffffffffffc}, 0x1, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@private=0xa010101, 0x4d2, 0x3c}, 0xa, @in6=@local, 0x0, 0x3, 0x0, 0x6, 0x4, 0x4}}, 0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0xfffffffd, 0x0, 0x4000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x20004000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r10 = accept(r9, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8044) sendmmsg$alg(r10, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="27400f559dcc", 0x6}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r12, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r13, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1.732501175s ago: executing program 2 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x2bc, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x298, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x1ab, 0x1, {{}, [@loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2, @remote, @loopback, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @empty, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @remote, @empty, @loopback, @loopback, @loopback, @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}}}]}, 0x2bc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000a0000000000001104000000ffffffff000000000000000200000000000000000000000b02000000020000000000000e0300000000000000000061000000000000002e"], 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c0002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r6], 0x74}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x160, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x14c, 0x1, [@m_nat={0x148, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffd67, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x0, 0x7c8, 0x7}, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, 0xffff00}}]}, {0xf6, 0x6, "3e711c75c1f82453ba423236e1545537e9f7926b6b18b5dd54bb31be3076a540852a7c50ed420d6ffbbaf9334d72d903801009c2092bf86505e7a2dd1e6ed7ef40a776d05253f72b507ab9dab747844968248bd142dff4f0d100708083f42f61a1fabad301dd96482c676dbf99d452a795d9c352296530b490b3dd54d0c8d23698b70f34bf6f0d56d25dcce90400438058f933c6e42f1097eee87a6e5cddf7721c38725be82b316420bf33203cf090c259fb1fda528976a5dee752261fe6d579fa005efca5133e00c32a87dc229a3343f11125c78e6535ec95d570ce1865503f142e29983fdbf9864e9548b2fc994751ddb5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x160}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="00e600000a00000000000000000000000000000017b432fe10c0bb6ecaad9240ffc66ab1ee0bcf79a1dd2096e280de1424977f5eddb032d2382c36ec47dff6bd7ccd2e01626a6e3ad80982bfe10ecd8594326286d386a5981edcdf43e75a7138acb2aaabe6ac00000000a089e8739ef63f537463bc20f7b5b2297debc1cf5ad2aeb251e3ca4217df013d6193d2b75c66279aa3174740187a81f165f31b87ccff8400"/172, @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0ab0fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cde538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82684d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r9, &(0x7f0000005b40)=[{{&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2, @ANYRES32=r9], 0x80}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="c1b9061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f0f8ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}, {&(0x7f0000000080)="bb963a27d8af271a7d253d9f3c404bb5899c6a0d6e69397d65ea08f3a3f80956057644f0b0c15e3f162eeb1622a47abc5d054443e9db8925ba17063a37b4a0028199d0af49c7bd0c214b6b252b182531f54ea81e5dea9358a4a7fda60f6a7de5ddcc3c734bbd911570b70952d0d7780e7f505d0a64ace09e35b89f9df80e512d3fbaeb96f6739336abd9f918a2046c75fbe90ccfc6178bb8cf9cb8314af600428f3f7c4885c4196ff7a50d2922e322848e", 0xb1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="0c71e8d7705b19c24e8c3ec98b4243ae0be48cd79f024361b8082d328363e63e360e122e7ec929c89aea0b338987609655fb5f5f91cd457584f30946f63e00fd0e8c536ae0106beb7d02fb4eb35db10c37c4bf3f2c6df9254d540598ae9b7098b74908c7da448e8891bc1b46f58553776f43370d090df693f3a4e4a724dbb498e51860bd766e36c41c0a0ee41019a0b05b519107c1fbb944f26f16f9fc127f3cd86c3fdbcf169912fc1c42a4a7051d3e85591ccd24b19681da775dc34c98ad24ab07c6feab583ba1f5efb430a06d66c039dbf40a84f04cfdfca240676e96579502925e57864815d3fe17edaf5cdbc3a4b48843c22372f9f1cf363d8428fe6341fb474ba53db6be689703ce5f7b6639b3493a5aca4c9316df8b4600d73533021932eb359ce7c1f00a54cb1318076ccb80e27ba0934db1867e078ee47b86d3e367b96ba948c3aa029c365eb0dc99685c5fd7bfbd1916b889da42d6ad1ab2466e989b5c8304b1e2190d4efeb9ccbd3a7a48c3b393470fc215e164cb91e238c5a28c4f40b4b99ee8f9481fe62e0bcf0a9831e491dc1150ad9c023217df6432487219a3083b310958cdbc217f99d02a19414987ff1bc176e3267c205827f466ea1912cbc0e304faf034602b85db010d8796d2ab18c2c4badf39db5312ad908d8555c30d0cc7d3bce8b4fcfc5764ed6e8bf4e8e4af6bbb3f82ac014f021dc6cb81cebe4b7d071e4d019719d1b0354ce0a2ff3b66ba7bf0f4598bde90a9115ddc4f197bcd881e0cd0baabb57316e75d108b14acc668ee906acf7bffdff3aef11ecf107b3eccd67a56c6b26e0a9a72d404a7a2dd3da8759e676c0eef6a95890d4f647269d1bf972d75307bd867819f385df6f57a7c28332307f444d1157c303c30a478b056d6e11111398aafcb6fff1b6a985cf888afa04586e35e7d3b292d254acf08a6bd38fbbd22bc9919052e6693c1e454aade6348679e027d1b102618476c9ab1f9928fc7f505046cb8383b9e1d79b961895502cded12f1842705102dffddc11f7bea0b9908a781187aadd8f6bda92d35b1159e1489cf762da76c125060ffedc7cc54238b3bd2d894a91d92a6c5cce9bf5417674a2bd0e38271912f7481e58ec7ab422db826482ffb80ce45dab2cb43105356c292a2fd1db8a758b37d56f46721163f24c075d980a37917cca20acce274c404828efaed50b881a5481f9ad268e99e25884db25426d5a5f338f405748817bba32b89e4c18b0f061e6758d46b5f0f2865b1c41be4f7ff999d289538a8fca45b2cf76a2fc398b7913db0ea85ee4d00156432f764ef888094dceb05c68da62fdf667b511276ac97dcf0b34819d9307cf0066267f94ab80fcc19c9f3d682e6e375ac25d7d6b71ae6d084ca1ed7e21b46b1ca0abc6cd50b3aa40e341cfc0a75f2040cc71c26e6cff3d76cc6c629051c47d8b950d01de19d324f2705e37a7a41364ecc70e5021ef955b50144860dafe6fc8b14fb6c451c0444aef66c3081097b6072c304f17206810b4e937bd5673720071d5f1d964f8bb21ab4ffbda1ece1e95005c6abdf00f78681f37c34936e8c9ba1bf420ba0dbfb84698931da95003dd2a34f59a179420ce004664f0495d1548e04e544c238599e6c41831d05c568607f0cd59153422fea60f7de8c4c1ab308b977e2280372c1f57506c22caf84ef2d912b3dbdd9d05fd1fe78ea2965f9542b0010009efea9c642f1", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000000240)="01157d94cef7beec353864d0dfc2fbf78344a4576ef93fb1f04f0ad1411bf477da288f6667f24bdb86d433008aa0bdd7f28804b4d699efdb83d7f542343ba5568d4a7208a394b9fc48b58e6a8e99e97c9dd92ad99de0a7cf9d7eb32b0cd54b15410c4be7701ba34d1637", 0x6a}], 0x1}}], 0x4, 0x0) 1.59732749s ago: executing program 4 (id=1529): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x1}, 0x14}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffe65, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x5}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) 325.532386ms ago: executing program 3 (id=1530): r0 = socket$kcm(0x29, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb, @private0, 0x9}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000013c0)={r3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x26e1, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/213, 0xd5}, {&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000012c0)=""/89, 0x59}], 0x10d9) 324.438698ms ago: executing program 2 (id=1531): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000e00)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001240], 0x0, 0x0, &(0x7f0000001240)=[{}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x108) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x2, 0x2000004) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x4004840) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x891) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x58, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x20, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "bb91"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @empty}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x1ff}], 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x150, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x38}, @rand_addr, @loopback}}]}, {0xa, 0x6, "3eaed48f5023"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x6, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) 323.828528ms ago: executing program 4 (id=1532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001c00)=ANY=[@ANYBLOB="000088a8020002"], 0xffe) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xd3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {0x15, 0x3, 0x0, @rand_addr=0x64010100}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000fe00", @ANYRES16, @ANYBLOB="000229bd7000fcdbdf25"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8843) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 110.333267ms ago: executing program 3 (id=1533): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x1, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x10) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70b", 0xad}, {&(0x7f0000000440)}, {&(0x7f0000000280)}], 0x5}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r8, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 0s ago: executing program 2 (id=1534): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @bcast, 0x1, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @bcast, 0x1, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000000c0), 0x4) close(r1) getsockname$packet(r1, 0x0, 0x0) (async) getsockname$packet(r1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x200008c0}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x200008c0}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000030000040b0000000000000e0200000001000000090000000000000204000000100000000000000a00000000000000000200000d00000000090000000200000003000000040000000200000800000000000000000b0000000000000700000000005f00"], &(0x7f0000000100)=""/214, 0x77, 0xd6, 0xffffffff, 0x0, 0x10000, @value=r1}, 0x28) socket$vsock_stream(0x28, 0x1, 0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r10, 0x0) (async) listen(r10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r11, &(0x7f0000000900), 0x10) kernel console output (not intermixed with test programs): et [0, 0] type 1 family 0 port 8472 - 0 [ 187.013635][T10176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.070387][T10093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.075389][T10278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 187.148238][ T5845] Bluetooth: hci0: command tx timeout [ 187.160141][T10176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.173593][ T3440] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.195512][T10176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.221682][T10281] team_slave_1: mtu less than device minimum [ 187.232926][T10280] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.274938][T10290] netlink: 'syz.4.1120': attribute type 2 has an invalid length. [ 187.318923][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.372757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.379957][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.425936][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.433142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.536029][T10301] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1124'. [ 187.590070][T10301] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1124'. [ 187.634785][ T5845] Bluetooth: hci2: command tx timeout [ 187.648806][T10176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.730864][T10307] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1125'. [ 187.742935][T10307] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1125'. [ 187.770259][T10310] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.793151][T10176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.812663][T10176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.831486][T10176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.930534][T10093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.057125][T10093] veth0_vlan: entered promiscuous mode [ 188.078105][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.100687][T10093] veth1_vlan: entered promiscuous mode [ 188.123144][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.157584][T10093] veth0_macvtap: entered promiscuous mode [ 188.167106][T10093] veth1_macvtap: entered promiscuous mode [ 188.185177][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.195763][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.205750][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.216542][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.228461][T10093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.238271][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.249220][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.259319][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.270018][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.282216][T10093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.292768][T10093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.304058][T10093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.312461][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.353186][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.360467][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.403284][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.410497][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.430028][T10093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.439179][T10093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.448658][T10093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.457812][T10093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.669886][ T6674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.669904][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.669919][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.681825][T10176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.704350][ T6674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.059639][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.159027][T10176] veth0_vlan: entered promiscuous mode [ 189.211134][T10176] veth1_vlan: entered promiscuous mode [ 189.236283][T10176] veth0_macvtap: entered promiscuous mode [ 189.249933][T10176] veth1_macvtap: entered promiscuous mode [ 189.315327][ T6668] wlan0: Trigger new scan to find an IBSS to join [ 189.422762][ T7185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.480790][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.491946][ T7189] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.503904][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.514351][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.525250][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.535984][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.552157][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.571556][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.656933][ T7185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.673228][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.684528][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.695736][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.706902][ T5845] Bluetooth: hci2: command tx timeout [ 189.712409][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.722437][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.733261][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.743475][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.754245][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.765320][T10176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.778856][T10176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.788667][T10176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.797435][T10176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.806715][T10176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.882044][ T7185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.911946][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.930334][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.966356][ T6674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.977185][ T6674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.152379][T10386] __nla_validate_parse: 5 callbacks suppressed [ 190.152400][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 190.167570][T10389] netlink: 'syz.4.1144': attribute type 8 has an invalid length. [ 190.199099][T10386] smc: net device bond0 applied user defined pnetid SYZ2 [ 190.263743][T10391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1145'. [ 190.340100][ T7185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.414834][T10391] bridge0: entered promiscuous mode [ 190.454131][T10391] bridge0: left promiscuous mode [ 190.583080][T10403] macsec2: entered allmulticast mode [ 190.605777][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.623306][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.645805][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.659234][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.673142][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.685509][T10405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1148'. [ 190.701806][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.713309][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.975713][ T7185] bridge_slave_1: left allmulticast mode [ 190.981556][ T7185] bridge_slave_1: left promiscuous mode [ 190.990487][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.022986][ T7185] bridge_slave_0: left allmulticast mode [ 191.037350][ T7185] bridge_slave_0: left promiscuous mode [ 191.052182][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.240535][T10422] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 191.261955][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1153'. [ 191.329595][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.343133][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.355614][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.372589][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.385953][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.399766][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.563028][T10429] netlink: 'syz.4.1154': attribute type 9 has an invalid length. [ 191.571019][T10429] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1154'. [ 191.661901][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.676228][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.687870][ T7185] bond0 (unregistering): Released all slaves [ 191.701928][T10422] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 191.734224][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.911088][T10436] x_tables: ip_tables: udp match: only valid for protocol 17 [ 192.160035][T10450] ipvlan0: entered promiscuous mode [ 192.242271][ T7185] hsr_slave_0: left promiscuous mode [ 192.249720][ T7185] hsr_slave_1: left promiscuous mode [ 192.255990][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 192.285063][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.294591][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 192.309660][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.317485][T10458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1161'. [ 192.335232][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.343026][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.350277][ T6674] wlan0: Trigger new scan to find an IBSS to join [ 192.371117][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 192.375897][ T7185] veth1_macvtap: left promiscuous mode [ 192.386260][ T7185] veth0_macvtap: left promiscuous mode [ 192.391846][ T7185] veth1_vlan: left promiscuous mode [ 192.397316][ T7185] veth0_vlan: left promiscuous mode [ 192.749171][ T5845] Bluetooth: hci0: command tx timeout [ 192.863320][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.887201][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 192.940952][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 193.427346][T10467] pim6reg1: entered promiscuous mode [ 193.446852][T10467] pim6reg1: entered allmulticast mode [ 193.463571][ T5845] Bluetooth: hci2: command tx timeout [ 193.543316][T10406] chnl_net:caif_netlink_parms(): no params data found [ 193.925624][T10495] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.1171'. [ 193.946979][T10423] chnl_net:caif_netlink_parms(): no params data found [ 193.994692][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.025624][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.032763][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.041499][T10406] bridge_slave_0: entered allmulticast mode [ 194.048858][T10406] bridge_slave_0: entered promiscuous mode [ 194.134924][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.142060][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.155068][T10406] bridge_slave_1: entered allmulticast mode [ 194.162075][T10406] bridge_slave_1: entered promiscuous mode [ 194.290304][T10406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.385722][T10406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.400081][T10511] netlink: 'syz.2.1172': attribute type 21 has an invalid length. [ 194.417067][T10511] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 194.425452][T10511] netlink: 'syz.2.1172': attribute type 5 has an invalid length. [ 194.434719][T10497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.450196][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.461020][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.468511][T10423] bridge_slave_0: entered allmulticast mode [ 194.475860][T10423] bridge_slave_0: entered promiscuous mode [ 194.483563][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.491093][T10423] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.498433][T10423] bridge_slave_1: entered allmulticast mode [ 194.506026][T10423] bridge_slave_1: entered promiscuous mode [ 194.522971][T10513] pimreg: entered allmulticast mode [ 194.549649][T10513] pimreg: left allmulticast mode [ 194.626334][T10423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.655248][T10423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.689880][T10406] team0: Port device team_slave_0 added [ 194.701807][T10406] team0: Port device team_slave_1 added [ 194.746805][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.824684][ T5845] Bluetooth: hci0: command tx timeout [ 194.849131][ T7185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.898773][T10423] team0: Port device team_slave_0 added [ 194.936145][T10406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.943134][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.997528][T10406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.011422][T10423] team0: Port device team_slave_1 added [ 195.062843][ T7185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.115265][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.144832][T10406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.151953][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.178785][T10406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.278550][ T7185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.303891][ T3429] wlan0: Trigger new scan to find an IBSS to join [ 195.304596][T10423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.318294][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.344786][T10423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.357341][T10423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.364380][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.390886][T10423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.460468][ T7185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.522595][T10550] syzkaller1: entered promiscuous mode [ 195.532473][T10550] syzkaller1: entered allmulticast mode [ 195.545038][ T5845] Bluetooth: hci2: command tx timeout [ 195.578119][T10406] hsr_slave_0: entered promiscuous mode [ 195.584935][T10406] hsr_slave_1: entered promiscuous mode [ 195.671547][T10423] hsr_slave_0: entered promiscuous mode [ 195.682421][T10423] hsr_slave_1: entered promiscuous mode [ 195.688762][T10423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.696581][T10423] Cannot create hsr debugfs directory [ 195.975522][ T7185] bridge_slave_1: left allmulticast mode [ 195.981360][ T7185] bridge_slave_1: left promiscuous mode [ 195.991658][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.018017][ T7185] bridge_slave_0: left allmulticast mode [ 196.030643][ T7185] bridge_slave_0: left promiscuous mode [ 196.036724][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.036731][T10573] openvswitch: netlink: IP tunnel dst address not specified [ 196.248205][ T6668] wlan0: Creating new IBSS network, BSSID 8e:e3:26:d9:f0:51 [ 196.275084][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.485235][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.501327][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.511939][ T7185] bond0 (unregistering): Released all slaves [ 196.546019][T10571] __nla_validate_parse: 5 callbacks suppressed [ 196.546039][T10571] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1192'. [ 196.561982][T10572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1192'. [ 196.683305][T10583] xt_hashlimit: size too large, truncated to 1048576 [ 196.903813][ T5845] Bluetooth: hci0: command tx timeout [ 197.091360][ T7185] hsr_slave_0: left promiscuous mode [ 197.104298][ T7185] hsr_slave_1: left promiscuous mode [ 197.110455][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.123767][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.135295][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.142954][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.170725][ T7185] veth1_macvtap: left promiscuous mode [ 197.176620][ T7185] veth0_macvtap: left promiscuous mode [ 197.182363][ T7185] veth1_vlan: left promiscuous mode [ 197.188004][ T7185] veth0_vlan: left promiscuous mode [ 197.374759][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.634674][ T5845] Bluetooth: hci2: command tx timeout [ 197.931492][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 198.001707][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 198.480976][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.744331][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1200'. [ 198.932163][T10615] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 198.970274][T10615] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 198.983987][ T5845] Bluetooth: hci0: command tx timeout [ 198.989546][T10615] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.1204'. [ 199.203991][T10621] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1205'. [ 199.276853][T10620] gre1: entered promiscuous mode [ 199.440914][T10423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.467700][T10423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.515433][T10423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.546510][T10423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.614328][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.664375][T10406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.694809][T10406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.704049][ T5845] Bluetooth: hci2: command tx timeout [ 199.707070][T10406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.760373][T10406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.945765][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.059777][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.125631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.132801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.155434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.162638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.218381][T10406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.246435][T10634] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 200.345638][T10406] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.391487][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.398678][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.484893][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.492050][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.735537][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.836808][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.002788][T10423] veth0_vlan: entered promiscuous mode [ 201.066405][T10423] veth1_vlan: entered promiscuous mode [ 201.126898][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.160439][T10653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1212'. [ 201.229761][T10423] veth0_macvtap: entered promiscuous mode [ 201.267834][T10423] veth1_macvtap: entered promiscuous mode [ 201.342565][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.383292][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.403221][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 201.412761][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 201.413982][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.422338][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 201.477035][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.505225][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.536334][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.565688][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.586652][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.603330][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.620866][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.644157][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.662273][T10423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.672683][T10406] veth0_vlan: entered promiscuous mode [ 201.689955][T10423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.711802][T10423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.723158][T10423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.739782][T10423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.780822][T10406] veth1_vlan: entered promiscuous mode [ 201.895547][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.904741][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 201.947980][T10406] veth0_macvtap: entered promiscuous mode [ 201.978294][ T6674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.991650][ T6674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.036506][T10406] veth1_macvtap: entered promiscuous mode [ 202.094823][ T7189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.095874][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.102750][ T7189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.119326][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.131091][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.141986][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.160275][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.171838][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.185185][T10406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.230374][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.246006][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.257021][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.269422][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.280909][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.291720][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.302577][T10406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.321751][T10406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.352118][T10406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.406712][T10406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.423598][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.443489][T10406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.461043][T10406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.470084][T10406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.708714][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.733679][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.776792][ T7185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.787328][ T7185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.935703][T10682] xt_TCPMSS: Only works on TCP SYN packets [ 202.960392][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'. [ 203.056293][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.399257][ T7189] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.467730][ T7185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.488759][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.498754][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.511399][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.530873][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.551787][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.559684][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.751656][T10695] chnl_net:caif_netlink_parms(): no params data found [ 203.805730][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.813690][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.820951][T10695] bridge_slave_0: entered allmulticast mode [ 203.829007][T10695] bridge_slave_0: entered promiscuous mode [ 203.858140][ T7185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.876062][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.883310][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.890821][T10695] bridge_slave_1: entered allmulticast mode [ 203.898074][T10695] bridge_slave_1: entered promiscuous mode [ 203.925348][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.937092][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.970740][T10695] team0: Port device team_slave_0 added [ 203.980174][T10695] team0: Port device team_slave_1 added [ 204.001808][T10695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.009215][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.036987][T10695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.051436][T10695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.058587][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.084848][T10695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.124248][T10695] hsr_slave_0: entered promiscuous mode [ 204.130621][T10695] hsr_slave_1: entered promiscuous mode [ 204.163607][T10695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.207672][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 204.208171][ T7189] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.224383][T10695] Cannot create hsr debugfs directory [ 204.288214][ T7185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.478755][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.488616][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.496752][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.515079][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.522705][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.530539][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.626385][ T7185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.128174][T10740] xt_TCPMSS: Only works on TCP SYN packets [ 205.136114][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1236'. [ 205.180147][ T7185] bridge_slave_1: left allmulticast mode [ 205.195034][ T7185] bridge_slave_1: left promiscuous mode [ 205.201003][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.213124][ T7185] bridge_slave_0: left allmulticast mode [ 205.219409][ T7185] bridge_slave_0: left promiscuous mode [ 205.226606][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.364590][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.596848][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.609164][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.621535][ T7185] bond0 (unregistering): Released all slaves [ 205.628439][ T5845] Bluetooth: hci0: command tx timeout [ 205.666958][T10744] vlan3: entered promiscuous mode [ 205.792420][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 205.844405][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 206.062082][T10756] netlink: zone id is out of range [ 206.068647][T10756] netlink: zone id is out of range [ 206.074040][T10756] netlink: zone id is out of range [ 206.079276][T10756] netlink: zone id is out of range [ 206.084602][T10756] netlink: zone id is out of range [ 206.089803][T10756] netlink: zone id is out of range [ 206.128585][T10756] netlink: zone id is out of range [ 206.143549][T10756] netlink: zone id is out of range [ 206.150208][T10761] delete_channel: no stack [ 206.174286][T10756] netlink: zone id is out of range [ 206.181901][T10756] netlink: zone id is out of range [ 206.205139][T10714] chnl_net:caif_netlink_parms(): no params data found [ 206.276653][ T7185] hsr_slave_0: left promiscuous mode [ 206.293788][ T7185] hsr_slave_1: left promiscuous mode [ 206.312699][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.333923][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.346385][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.376087][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.438379][ T7185] veth1_macvtap: left promiscuous mode [ 206.449539][ T7185] veth0_macvtap: left promiscuous mode [ 206.460773][ T7185] veth1_vlan: left promiscuous mode [ 206.471988][ T7185] veth0_vlan: left promiscuous mode [ 206.493949][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.570356][T10778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 206.585159][ T5845] Bluetooth: hci2: command tx timeout [ 206.677179][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 207.500733][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 207.567471][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 207.625494][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.707949][ T5845] Bluetooth: hci0: command tx timeout [ 208.092960][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 208.267432][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 208.277444][T10805] bridge_slave_1: left allmulticast mode [ 208.283111][T10805] bridge_slave_1: left promiscuous mode [ 208.290356][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.342199][T10805] bridge_slave_0: left allmulticast mode [ 208.363781][T10805] bridge_slave_0: left promiscuous mode [ 208.379558][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.494625][T10695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.550236][T10695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.627556][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.644296][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.661745][T10714] bridge_slave_0: entered allmulticast mode [ 208.664835][ T5845] Bluetooth: hci2: command tx timeout [ 208.672790][T10714] bridge_slave_0: entered promiscuous mode [ 208.702089][T10695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.755912][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.774997][T10695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.819045][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.834830][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.859240][T10714] bridge_slave_1: entered allmulticast mode [ 208.881923][T10714] bridge_slave_1: entered promiscuous mode [ 208.949122][T10714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.982771][T10714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.097981][T10714] team0: Port device team_slave_0 added [ 209.125393][T10714] team0: Port device team_slave_1 added [ 209.312247][ T7185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.419209][T10714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.436490][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.494406][T10714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.507105][T10714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.514161][T10714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.540827][T10714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.726403][ T7185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.785171][ T5845] Bluetooth: hci0: command tx timeout [ 209.908136][T10714] hsr_slave_0: entered promiscuous mode [ 209.916135][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.929694][T10714] hsr_slave_1: entered promiscuous mode [ 209.942823][T10714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.952949][T10714] Cannot create hsr debugfs directory [ 209.969457][T10846] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.978838][T10846] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.987807][T10846] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.996567][T10846] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.067776][ T7185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.234859][ T7185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.450782][T10695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.693257][T10695] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.710025][ T7185] bridge_slave_1: left allmulticast mode [ 210.717440][ T7185] bridge_slave_1: left promiscuous mode [ 210.723494][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.736031][ T7185] bridge_slave_0: left allmulticast mode [ 210.741706][ T7185] bridge_slave_0: left promiscuous mode [ 210.747456][ T5845] Bluetooth: hci2: command tx timeout [ 210.759420][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.838413][ T5880] IPVS: starting estimator thread 0... [ 210.943835][T10878] IPVS: using max 20 ests per chain, 48000 per kthread [ 211.007559][T10880] xt_bpf: check failed: parse error [ 211.066984][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.275339][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.286925][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.298185][ T7185] bond0 (unregistering): Released all slaves [ 211.351544][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.358785][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.391604][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.398769][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.863821][ T5845] Bluetooth: hci0: command tx timeout [ 211.970037][ T7185] hsr_slave_0: left promiscuous mode [ 211.989666][ T7185] hsr_slave_1: left promiscuous mode [ 211.997884][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.016429][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.063138][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.110887][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.162652][ T7185] veth1_macvtap: left promiscuous mode [ 212.168607][ T7185] veth0_macvtap: left promiscuous mode [ 212.185531][ T7185] veth1_vlan: left promiscuous mode [ 212.190837][ T7185] veth0_vlan: left promiscuous mode [ 212.214504][ T3440] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.638600][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 212.687164][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 212.825943][ T5845] Bluetooth: hci2: command tx timeout [ 213.282038][T10695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.315593][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.329067][T10714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.395779][T10714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.528603][T10925] batadv_slave_1: entered promiscuous mode [ 213.566837][T10714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.610298][T10922] veth0_to_team: entered promiscuous mode [ 213.616825][T10922] veth0_to_team: entered allmulticast mode [ 213.639978][T10714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.656036][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 213.662751][T10695] veth0_vlan: entered promiscuous mode [ 213.671307][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1279'. [ 213.796174][T10695] veth1_vlan: entered promiscuous mode [ 213.816067][T10922] tap0: tun_chr_ioctl cmd 1074025677 [ 213.821647][T10922] tap0: linktype set to 0 [ 213.873203][T10924] batadv_slave_1: left promiscuous mode [ 213.987433][T10714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.051337][T10695] veth0_macvtap: entered promiscuous mode [ 214.085786][T10714] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.118116][T10695] veth1_macvtap: entered promiscuous mode [ 214.142061][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.175844][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.186651][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.197898][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.212942][T10695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.257164][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.264344][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.331305][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.338501][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.385384][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.401709][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.412684][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.429818][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.439948][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.451109][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.462579][T10695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.488495][T10955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.500008][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.588107][T10955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.637266][T10695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.649623][T10695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.658620][T10695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.667941][T10695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.698820][T10714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.799071][T10964] syzkaller1: entered promiscuous mode [ 214.807506][T10964] syzkaller1: entered allmulticast mode [ 214.884115][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 215.116100][T10971] batman_adv: batadv0: Interface deactivated: dummy0 [ 215.417704][T10971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.577718][T10971] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.593635][T10971] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.602666][T10971] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.612221][T10971] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.625739][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.960629][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 216.109919][ T6668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.126409][ T6668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.158415][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.166986][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.181783][T10714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.334268][T10714] veth0_vlan: entered promiscuous mode [ 216.350032][T10714] veth1_vlan: entered promiscuous mode [ 216.378361][T10714] veth0_macvtap: entered promiscuous mode [ 216.389531][T10714] veth1_macvtap: entered promiscuous mode [ 216.410817][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.422033][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.432292][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.449943][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.461195][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.472590][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.494474][T10714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.515276][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.529097][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.539228][T10714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.549911][T10714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.560884][T10714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.574508][T10714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.583271][T10714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.592560][T10714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.603766][T10714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.693274][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.717811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.759863][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.921187][ T3440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.964754][ T6668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.972702][ T6668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.029689][ T3440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.129197][ T3440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.483214][ T3440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.535177][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.566976][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.594577][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.603078][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.620289][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.621469][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 217.628671][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.748132][ T3440] bridge_slave_1: left allmulticast mode [ 217.754348][ T3440] bridge_slave_1: left promiscuous mode [ 217.760104][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.792866][ T3440] bridge_slave_0: left allmulticast mode [ 217.803133][ T3440] bridge_slave_0: left promiscuous mode [ 217.815521][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.925005][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.258985][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.270332][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.281830][ T3440] bond0 (unregistering): Released all slaves [ 218.534430][T11020] chnl_net:caif_netlink_parms(): no params data found [ 218.595275][ T3440] hsr_slave_0: left promiscuous mode [ 218.601083][ T3440] hsr_slave_1: left promiscuous mode [ 218.607225][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.614839][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.623324][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.631200][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.653039][ T3440] veth1_macvtap: left promiscuous mode [ 218.659300][ T3440] veth0_macvtap: left promiscuous mode [ 218.666404][ T3440] veth1_vlan: left promiscuous mode [ 218.671713][ T3440] veth0_vlan: left promiscuous mode [ 218.808483][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'. [ 219.073740][ T7189] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.219003][T11069] sctp: [Deprecated]: syz.3.1311 (pid 11069) Use of int in maxseg socket option. [ 219.219003][T11069] Use struct sctp_assoc_value instead [ 219.344128][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.364965][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.383832][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.394371][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.401972][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.409580][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.569442][T11085] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 219.707881][ T5845] Bluetooth: hci0: command tx timeout [ 219.772532][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 219.826103][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 220.184243][ T7185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.336002][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.363789][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.371167][T11020] bridge_slave_0: entered allmulticast mode [ 220.379858][T11020] bridge_slave_0: entered promiscuous mode [ 220.387691][T11020] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.394903][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.402735][T11020] bridge_slave_1: entered allmulticast mode [ 220.411289][T11020] bridge_slave_1: entered promiscuous mode [ 220.547641][T11020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.595380][T11020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.729426][T11020] team0: Port device team_slave_0 added [ 220.816517][T11020] team0: Port device team_slave_1 added [ 220.827186][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 220.849908][T11106] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1319'. [ 220.938904][T11020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.963572][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.021877][T11020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.123065][T11020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.140561][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.167994][T11020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.309647][T11020] hsr_slave_0: entered promiscuous mode [ 221.325321][T11020] hsr_slave_1: entered promiscuous mode [ 221.335102][ T7185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.464464][ T5845] Bluetooth: hci2: command tx timeout [ 221.572488][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 221.621846][ T3440] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.755896][ T3440] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.783757][ T5845] Bluetooth: hci0: command tx timeout [ 221.837689][T11074] chnl_net:caif_netlink_parms(): no params data found [ 221.976185][ T3440] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.190359][ T3440] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.246813][T11137] netlink: 'syz.2.1326': attribute type 30 has an invalid length. [ 222.463543][T11074] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.464023][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.481486][T11074] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.493222][T11074] bridge_slave_0: entered allmulticast mode [ 222.503255][T11074] bridge_slave_0: entered promiscuous mode [ 222.553345][T11074] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.562754][T11074] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.579246][T11074] bridge_slave_1: entered allmulticast mode [ 222.588617][T11074] bridge_slave_1: entered promiscuous mode [ 222.662276][ T3440] bridge_slave_1: left allmulticast mode [ 222.669387][ T3440] bridge_slave_1: left promiscuous mode [ 222.675879][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.700627][ T3440] bridge_slave_0: left allmulticast mode [ 222.713182][ T3440] bridge_slave_0: left promiscuous mode [ 222.732823][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.883793][T11159] Bluetooth: MGMT ver 1.23 [ 223.427219][ T3440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.449586][ T3440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.475595][ T3440] bond0 (unregistering): Released all slaves [ 223.513600][T11074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.545770][ T5845] Bluetooth: hci2: command tx timeout [ 223.606585][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.625331][T11074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.830804][T11074] team0: Port device team_slave_0 added [ 223.864058][ T5845] Bluetooth: hci0: command tx timeout [ 223.878270][T11074] team0: Port device team_slave_1 added [ 223.921100][T11020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.950291][T11074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.958104][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.960204][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 223.985209][T11074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.048506][T11020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.062263][T11074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.070118][T11074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.099445][T11074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.121901][T11020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.164452][T11020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.254799][ T3440] hsr_slave_0: left promiscuous mode [ 224.288580][ T3440] hsr_slave_1: left promiscuous mode [ 224.306796][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.327595][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.339528][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.351552][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.450432][ T3440] veth1_macvtap: left promiscuous mode [ 224.484708][ T3440] veth0_macvtap: left promiscuous mode [ 224.517170][ T3440] veth1_vlan: left promiscuous mode [ 224.546830][ T3440] veth0_vlan: left promiscuous mode [ 224.763920][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.635085][ T5845] Bluetooth: hci2: command tx timeout [ 225.732439][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 225.825061][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 225.921633][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.952867][ T5845] Bluetooth: hci0: command tx timeout [ 225.975989][T11196] netlink: 'syz.4.1339': attribute type 3 has an invalid length. [ 225.984939][T11196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1339'. [ 226.463264][T11074] hsr_slave_0: entered promiscuous mode [ 226.523047][T11074] hsr_slave_1: entered promiscuous mode [ 226.540354][T11074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.548853][T11074] Cannot create hsr debugfs directory [ 226.735586][T11210] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 226.822313][T11208] net_ratelimit: 306 callbacks suppressed [ 226.822332][T11208] dccp_v6_rcv: dropped packet with invalid checksum [ 226.840258][T11020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.860278][T11208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.978818][T11020] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.056079][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.085602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.092770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.134156][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.141390][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.318552][T11020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.677461][T11074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.713797][ T5845] Bluetooth: hci2: command tx timeout [ 227.737124][T11074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.748809][T11074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.774937][T11245] tipc: Enabling of bearer rejected, already enabled [ 227.800491][T11245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1349'. [ 227.813753][T11074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.842526][T11020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.970502][T11020] veth0_vlan: entered promiscuous mode [ 227.982080][T11020] veth1_vlan: entered promiscuous mode [ 228.065227][T11020] veth0_macvtap: entered promiscuous mode [ 228.074193][T11256] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 228.096157][T11020] veth1_macvtap: entered promiscuous mode [ 228.122734][T11020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.141452][T11020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.166533][T11020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.194373][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.202751][T11020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.222191][T11020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.304440][T11074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.313834][T11020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.325363][T11020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.362947][T11020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.395513][T11020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.405398][T11020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.414429][T11020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.423149][T11020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.441281][T11277] xt_NFQUEUE: number of total queues is 0 [ 228.470812][T11278] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1357'. [ 228.481071][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 228.491213][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1357'. [ 228.500386][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'. [ 228.557319][T11074] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.602871][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.610054][ T6674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.636097][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.640483][T11283] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1359'. [ 228.643269][ T6674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.664254][ T6674] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.715409][ T7185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.723308][ T7185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.790985][ T6668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.807406][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 228.816483][ T6668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.014532][T11302] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 229.140611][T11074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.175690][T11309] GUP no longer grows the stack in syz.2.1364 (11309): 20006000-2000a000 (20005000) [ 229.211002][T11074] veth0_vlan: entered promiscuous mode [ 229.213689][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.2.1364 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 229.227292][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.237388][T11309] Call Trace: [ 229.240685][T11309] [ 229.243639][T11309] dump_stack_lvl+0x241/0x360 [ 229.248376][T11309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.253605][T11309] ? __pfx__printk+0x10/0x10 [ 229.258234][T11309] ? find_vma+0xf9/0x170 [ 229.262541][T11309] ? vma_is_secretmem+0xd/0x50 [ 229.267346][T11309] ? check_vma_flags+0x52b/0x5a0 [ 229.272319][T11309] __get_user_pages+0x4385/0x49e0 [ 229.277377][T11309] ? 0xffffffffa0000958 [ 229.281605][T11309] ? __pfx___get_user_pages+0x10/0x10 [ 229.287055][T11309] __gup_longterm_locked+0x49a/0x17f0 [ 229.292471][T11309] ? __pfx___might_resched+0x10/0x10 [ 229.297805][T11309] ? __pfx___gup_longterm_locked+0x10/0x10 [ 229.303647][T11309] ? down_read+0x82b/0xa40 [ 229.308094][T11309] ? is_valid_gup_args+0x124/0x200 [ 229.313217][T11309] pin_user_pages+0x137/0x1f0 [ 229.317899][T11309] ? __pfx_pin_user_pages+0x10/0x10 [ 229.323100][T11309] ? trace_kmalloc+0x1f/0xd0 [ 229.327706][T11309] xdp_umem_create+0x978/0xf30 [ 229.332488][T11309] xsk_setsockopt+0x732/0x950 [ 229.337170][T11309] ? __pfx_xsk_setsockopt+0x10/0x10 [ 229.342376][T11309] ? __pfx_lock_acquire+0x10/0x10 [ 229.347402][T11309] ? aa_sock_opt_perm+0x79/0x120 [ 229.352341][T11309] ? __pfx_xsk_setsockopt+0x10/0x10 [ 229.357542][T11309] do_sock_setsockopt+0x3af/0x720 [ 229.362576][T11309] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 229.368219][T11309] ? __fget_files+0x395/0x410 [ 229.372898][T11309] ? __fget_files+0x2a/0x410 [ 229.377496][T11309] __x64_sys_setsockopt+0x1ee/0x280 [ 229.382701][T11309] do_syscall_64+0xf3/0x230 [ 229.387231][T11309] ? clear_bhb_loop+0x35/0x90 [ 229.391935][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.397861][T11309] RIP: 0033:0x7f1719385d29 [ 229.402288][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.421907][T11309] RSP: 002b:00007f171a29b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.430341][T11309] RAX: ffffffffffffffda RBX: 00007f1719575fa0 RCX: 00007f1719385d29 [ 229.438354][T11309] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 229.446335][T11309] RBP: 00007f1719401b08 R08: 0000000000000020 R09: 0000000000000000 [ 229.454323][T11309] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 229.462319][T11309] R13: 0000000000000000 R14: 00007f1719575fa0 R15: 00007ffc47fd1b28 [ 229.470508][T11309] [ 229.486603][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.531876][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 229.635950][ T7185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.679865][T11309] IPVS: Error joining to the multicast group [ 229.701555][T11074] veth1_vlan: entered promiscuous mode [ 229.746287][ T7185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.774779][T11316] syzkaller1: entered promiscuous mode [ 229.786315][T11316] syzkaller1: entered allmulticast mode [ 229.836968][T11074] veth0_macvtap: entered promiscuous mode [ 229.846796][T11074] veth1_macvtap: entered promiscuous mode [ 229.861274][T11074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.872588][T11074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.883239][T11074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.894249][T11074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.904224][T11074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.914880][T11074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.926567][T11074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.952831][T11074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.971423][T11074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.981418][T11074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.992440][T11074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.004095][T11074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.017564][T11074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.027395][T11074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.036975][T11074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.045952][T11074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.110146][ T7185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.150328][ T7189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.159263][ T7189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.178435][ T7189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.188521][ T7189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.414133][T11327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1369'. [ 230.596681][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.608312][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.610886][ T7185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.627527][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.628520][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.650246][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.675730][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.684983][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.952717][T11355] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 230.979465][T11338] chnl_net:caif_netlink_parms(): no params data found [ 231.209509][ T7185] bridge_slave_1: left allmulticast mode [ 231.222338][ T7185] bridge_slave_1: left promiscuous mode [ 231.234658][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.243270][ T7185] bridge_slave_0: left allmulticast mode [ 231.249291][ T7185] bridge_slave_0: left promiscuous mode [ 231.256204][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.280855][T11380] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.1377'. [ 231.314098][T11380] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.690021][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.718769][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.730832][ T7185] bond0 (unregistering): Released all slaves [ 231.743927][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.791953][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.799409][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.807005][T11338] bridge_slave_0: entered allmulticast mode [ 231.814437][T11338] bridge_slave_0: entered promiscuous mode [ 231.830610][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.847148][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.857217][T11338] bridge_slave_1: entered allmulticast mode [ 231.866666][T11338] bridge_slave_1: entered promiscuous mode [ 231.988259][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.006686][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.059080][T11338] team0: Port device team_slave_0 added [ 232.078991][T11338] team0: Port device team_slave_1 added [ 232.122959][ T7185] hsr_slave_0: left promiscuous mode [ 232.132187][ T7185] hsr_slave_1: left promiscuous mode [ 232.139914][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.149007][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.158781][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.166429][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.190374][ T7185] veth1_macvtap: left promiscuous mode [ 232.195995][ T7185] veth0_macvtap: left promiscuous mode [ 232.201515][ T7185] veth1_vlan: left promiscuous mode [ 232.207011][ T7185] veth0_vlan: left promiscuous mode [ 232.642331][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 232.749706][ T5833] Bluetooth: hci0: command tx timeout [ 232.762869][T11392] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 232.780971][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 232.874013][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.923775][T11390] netlink: 'syz.4.1383': attribute type 8 has an invalid length. [ 233.115907][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 233.159990][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.170369][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.180567][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.221361][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.238712][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.248526][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.866122][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.873096][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.940559][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.992504][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.014081][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.043269][ T7189] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.057801][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.190711][T11338] hsr_slave_0: entered promiscuous mode [ 234.204288][T11338] hsr_slave_1: entered promiscuous mode [ 234.205016][T11417] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1387'. [ 234.253954][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 234.288288][T11417] macvlan1: left allmulticast mode [ 234.300929][T11417] veth1_vlan: left allmulticast mode [ 234.314672][T11417] macvlan1: left promiscuous mode [ 234.325408][T11417] bridge0: port 3(macvlan1) entered disabled state [ 234.345098][T11417] bridge_slave_1: left allmulticast mode [ 234.356379][T11417] bridge_slave_1: left promiscuous mode [ 234.370668][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.391928][T11417] bridge_slave_0: left allmulticast mode [ 234.407542][T11417] bridge_slave_0: left promiscuous mode [ 234.413385][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.436421][T11428] sctp: [Deprecated]: syz.3.1392 (pid 11428) Use of int in max_burst socket option. [ 234.436421][T11428] Use struct sctp_assoc_value instead [ 234.528584][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.823909][ T5833] Bluetooth: hci0: command tx timeout [ 234.900257][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 235.007395][T11402] chnl_net:caif_netlink_parms(): no params data found [ 235.154745][ T7185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.173827][ T6668] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.189155][T11452] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.196027][T11452] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 235.297267][ T7185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.304474][ T5833] Bluetooth: hci2: command tx timeout [ 235.429369][ T7185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.458743][T11402] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.469193][T11402] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.478218][T11402] bridge_slave_0: entered allmulticast mode [ 235.485473][T11402] bridge_slave_0: entered promiscuous mode [ 235.549000][ T7185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.568210][T11402] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.576480][T11475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 235.576494][T11402] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.576681][T11402] bridge_slave_1: entered allmulticast mode [ 235.591761][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 235.594421][T11402] bridge_slave_1: entered promiscuous mode [ 235.601053][T11475] netlink: 'syz.3.1403': attribute type 2 has an invalid length. [ 235.637073][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 235.667684][T11402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.709455][T11402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.895942][T11473] infiniband syz!: set down [ 235.905007][T11473] infiniband syz!: added team_slave_0 [ 235.917368][T11482] bridge2: entered promiscuous mode [ 235.924766][T11482] bridge2: entered allmulticast mode [ 235.949886][T11482] team0: Port device bridge2 added [ 235.963681][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 235.976549][T11473] RDS/IB: syz!: added [ 235.981303][T11473] smc: adding ib device syz! with port count 1 [ 235.990250][T11402] team0: Port device team_slave_0 added [ 236.016465][T11402] team0: Port device team_slave_1 added [ 236.024070][T11473] smc: ib device syz! port 1 has pnetid [ 236.031194][T11338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.048915][T11483] bridge0: port 1(ip6gretap0) entered blocking state [ 236.068013][T11483] bridge0: port 1(ip6gretap0) entered disabled state [ 236.083732][T11483] ip6gretap0: entered allmulticast mode [ 236.091724][T11483] ip6gretap0: entered promiscuous mode [ 236.095872][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 236.119746][T11338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.142219][ T7185] bridge_slave_1: left allmulticast mode [ 236.148714][ T7185] bridge_slave_1: left promiscuous mode [ 236.159108][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.168596][ T7185] bridge_slave_0: left allmulticast mode [ 236.175803][ T7185] bridge_slave_0: left promiscuous mode [ 236.181588][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.294116][ T3440] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.530863][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.542227][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.554825][ T7185] bond0 (unregistering): Released all slaves [ 236.601366][T11338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.646107][T11338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.779304][T11402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.792258][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.831661][T11402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.860991][T11402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.890466][T11402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.918652][ T5833] Bluetooth: hci0: command tx timeout [ 236.937730][T11402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.169325][T11498] ebt_among: dst integrity fail: 101 [ 237.185236][T11402] hsr_slave_0: entered promiscuous mode [ 237.202398][T11402] hsr_slave_1: entered promiscuous mode [ 237.220040][T11402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.230288][T11402] Cannot create hsr debugfs directory [ 237.247528][T11500] bond0: entered allmulticast mode [ 237.383811][ T5833] Bluetooth: hci2: command tx timeout [ 237.425269][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.490360][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.552694][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.572452][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.579624][ T6668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.658286][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.665495][ T6668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.695759][T11508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.728355][T11508] netlink: 'syz.4.1413': attribute type 10 has an invalid length. [ 238.051035][T11402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.064767][T11402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.094976][T11402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.116973][T11402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.170994][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.265045][T11402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.281925][T11402] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.295841][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.302967][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.362260][T11338] veth0_vlan: entered promiscuous mode [ 238.373878][T11338] veth1_vlan: entered promiscuous mode [ 238.402023][T11338] veth0_macvtap: entered promiscuous mode [ 238.410917][T11338] veth1_macvtap: entered promiscuous mode [ 238.428147][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.438733][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.448619][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.459209][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.469106][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.479622][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.490747][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.522900][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.530027][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.544585][ T3429] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.586101][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.597159][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.611289][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.643787][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.659722][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.694028][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 238.702946][T11519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 238.724625][T11402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.738589][T11402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.749456][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'. [ 238.776779][T11526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 238.832684][T11526] vlan0: entered allmulticast mode [ 238.930356][T11519] vlan0: entered allmulticast mode [ 238.950563][T11530] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 238.984939][ T5845] Bluetooth: hci0: command tx timeout [ 239.007435][T11338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.025085][T11338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.038472][T11338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.049261][T11338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.114354][ T7185] hsr_slave_0: left promiscuous mode [ 239.163685][ T7185] hsr_slave_1: left promiscuous mode [ 239.216293][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.235195][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.265775][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.273372][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.302961][ T7185] veth1_macvtap: left promiscuous mode [ 239.310015][ T7185] veth0_macvtap: left promiscuous mode [ 239.320732][ T7185] veth1_vlan: left promiscuous mode [ 239.326189][ T7185] veth0_vlan: left promiscuous mode [ 239.465345][ T5845] Bluetooth: hci2: command tx timeout [ 239.699216][ T6669] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.773941][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 239.822050][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 240.369832][T11402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.540156][ T6667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.573649][ T6667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.663386][T11402] veth0_vlan: entered promiscuous mode [ 240.671003][T11570] __nla_validate_parse: 3 callbacks suppressed [ 240.671022][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 240.709875][ T6674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.719995][ T6674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.737736][T11570] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 240.758566][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 240.771944][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 240.805097][T11402] veth1_vlan: entered promiscuous mode [ 240.814336][ T7190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.889384][T11402] veth0_macvtap: entered promiscuous mode [ 240.918306][T11402] veth1_macvtap: entered promiscuous mode [ 241.042417][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.058183][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.071824][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.088932][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.102516][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.117876][T11588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.129158][T11588] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1429'. [ 241.138772][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.151163][T11402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.178130][T11586] netlink: 'syz.3.1430': attribute type 4 has an invalid length. [ 241.198615][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.226650][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.236794][T11402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.259332][T11402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.271576][T11402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.288889][T11402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.298714][T11402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.316346][T11402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.329344][T11402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.466402][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 241.490445][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1430'. [ 241.521636][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.551630][ T5845] Bluetooth: hci2: command tx timeout [ 241.577167][ T7185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.585448][ T7185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.608552][ T7185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.623818][ T7185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.946844][ T7185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.979586][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.042689][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.106269][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.468729][T11610] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 242.512010][T11611] tun0: tun_chr_ioctl cmd 1074030121 [ 242.528926][T11610] syz_tun: entered promiscuous mode [ 242.549898][ T35] bridge_slave_1: left allmulticast mode [ 242.563081][T11611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.563555][ T35] bridge_slave_1: left promiscuous mode [ 242.600770][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.618371][ T35] bridge_slave_0: left allmulticast mode [ 242.633252][ T35] bridge_slave_0: left promiscuous mode [ 242.654664][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.670122][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.679639][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.688302][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.701856][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.710377][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.721376][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.075360][ T7190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.088229][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.099110][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.109639][ T35] bond0 (unregistering): Released all slaves [ 243.396159][T11615] chnl_net:caif_netlink_parms(): no params data found [ 243.552211][T11626] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 243.590173][T11628] xt_ipcomp: unknown flags 12 [ 243.776230][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 243.812758][ T35] hsr_slave_0: left promiscuous mode [ 243.864319][ T35] hsr_slave_1: left promiscuous mode [ 243.866407][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 243.890606][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.890627][T11637] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1442'. [ 243.898111][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.915436][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.933523][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.969179][ T35] veth1_macvtap: left promiscuous mode [ 243.975462][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.983792][ T35] veth0_macvtap: left promiscuous mode [ 243.991045][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.992009][ T35] veth1_vlan: left promiscuous mode [ 244.007842][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.007880][ T35] veth0_vlan: left promiscuous mode [ 244.021046][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.033852][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.044720][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.195505][ T151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.522535][ T35] team0 (unregistering): Port device team_slave_1 removed [ 244.568413][ T35] team0 (unregistering): Port device team_slave_0 removed [ 244.745392][ T5833] Bluetooth: hci0: command tx timeout [ 245.139178][T11615] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.173629][T11615] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.190102][T11615] bridge_slave_0: entered allmulticast mode [ 245.196340][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 245.212912][T11615] bridge_slave_0: entered promiscuous mode [ 245.220081][T11615] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.222795][T11651] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.227860][T11615] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.228035][T11615] bridge_slave_1: entered allmulticast mode [ 245.251455][T11615] bridge_slave_1: entered promiscuous mode [ 245.267390][T11651] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.314613][ T7190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.375829][T11615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.404205][T11615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.584092][T11615] team0: Port device team_slave_0 added [ 245.612883][T11615] team0: Port device team_slave_1 added [ 245.626222][T11664] 8021q: VLANs not supported on lo [ 245.695050][T11615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.702236][T11615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.728711][T11615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.735487][T11672] ebtables: ebtables: counters copy to user failed while replacing table [ 245.741433][T11615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.755170][T11615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.781313][T11615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.824900][T11675] __nla_validate_parse: 3 callbacks suppressed [ 245.824919][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 245.876975][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 245.902218][T11615] hsr_slave_0: entered promiscuous mode [ 245.909939][T11615] hsr_slave_1: entered promiscuous mode [ 246.063994][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.104151][ T5833] Bluetooth: hci2: command tx timeout [ 246.160063][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.187779][T11640] chnl_net:caif_netlink_parms(): no params data found [ 246.285089][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.302518][T11689] netlink: 'syz.2.1456': attribute type 10 has an invalid length. [ 246.411885][T11693] ax25_connect(): syz.3.1458 uses autobind, please contact jreuter@yaina.de [ 246.455123][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.485984][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.633547][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.640773][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.667321][T11640] bridge_slave_0: entered allmulticast mode [ 246.693588][T11640] bridge_slave_0: entered promiscuous mode [ 246.722857][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.734654][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.741859][T11640] bridge_slave_1: entered allmulticast mode [ 246.750103][T11640] bridge_slave_1: entered promiscuous mode [ 246.812511][T11640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.823903][ T5833] Bluetooth: hci0: command tx timeout [ 246.842506][T11640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.935349][ T35] bridge_slave_1: left allmulticast mode [ 246.941037][ T35] bridge_slave_1: left promiscuous mode [ 246.951053][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.959930][ T35] bridge_slave_0: left allmulticast mode [ 246.966271][ T35] bridge_slave_0: left promiscuous mode [ 246.972001][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.141446][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1459'. [ 247.422243][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.436585][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.448403][ T35] bond0 (unregistering): Released all slaves [ 247.475410][T11640] team0: Port device team_slave_0 added [ 247.554034][ T6667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.651781][T11640] team0: Port device team_slave_1 added [ 247.772963][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 247.785070][T11716] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1464'. [ 247.790912][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 247.842952][T11615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.870568][T11640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.884109][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.915380][T11640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.928136][T11640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.935343][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.966997][T11640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.984115][T11615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.056865][T11615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.185051][ T5833] Bluetooth: hci2: command tx timeout [ 248.208571][T11615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.360802][T11640] hsr_slave_0: entered promiscuous mode [ 248.380587][T11640] hsr_slave_1: entered promiscuous mode [ 248.387083][T11640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.399120][T11640] Cannot create hsr debugfs directory [ 248.410681][ T35] hsr_slave_0: left promiscuous mode [ 248.425664][ T35] hsr_slave_1: left promiscuous mode [ 248.432432][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.462072][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.471607][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.480989][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.546319][ T35] veth1_macvtap: left promiscuous mode [ 248.551898][ T35] veth0_macvtap: left promiscuous mode [ 248.571823][ T35] veth1_vlan: left promiscuous mode [ 248.583823][ T35] veth0_vlan: left promiscuous mode [ 248.674283][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.892658][T11746] "syz.4.1471" (11746) uses obsolete ecb(arc4) skcipher [ 248.909543][ T5833] Bluetooth: hci0: command tx timeout [ 249.181173][ T35] team0 (unregistering): Port device team_slave_1 removed [ 249.231385][ T35] team0 (unregistering): Port device team_slave_0 removed [ 249.787077][ T7185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.865556][T11753] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 249.873248][T11753] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 249.959933][T11615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.070357][T11760] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 250.097441][T11615] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.152088][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.159269][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.197278][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.204467][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.264877][ T5833] Bluetooth: hci2: command tx timeout [ 250.461502][T11756] team0: Device vlan0 failed to change mtu [ 250.684253][T11640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.710316][T11640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.729331][T11640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.745843][T11640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.826785][T11615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.909495][T11615] veth0_vlan: entered promiscuous mode [ 250.924341][ T151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.961835][T11615] veth1_vlan: entered promiscuous mode [ 250.984579][ T5833] Bluetooth: hci0: command tx timeout [ 250.999001][T11640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.038228][T11615] veth0_macvtap: entered promiscuous mode [ 251.050220][T11790] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1483'. [ 251.061550][T11640] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.075336][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.082490][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.109209][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.116469][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.128907][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 251.138921][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 251.160691][T11793] syz.3.1481[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.160770][T11793] syz.3.1481[11793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.187638][T11615] veth1_macvtap: entered promiscuous mode [ 251.263073][T11615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.280233][T11615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.302327][T11615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.330460][T11615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.343320][T11615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.385901][T11615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.421600][T11615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.445609][T11615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.489659][T11615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.507908][T11615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.519604][T11615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.536805][T11615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.692606][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.723737][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.749852][T11640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.791059][ T6667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.811025][ T6667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.904694][T11640] veth0_vlan: entered promiscuous mode [ 251.952494][T11640] veth1_vlan: entered promiscuous mode [ 251.995916][T11640] veth0_macvtap: entered promiscuous mode [ 252.011796][T11640] veth1_macvtap: entered promiscuous mode [ 252.065031][ T6667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.098577][T11640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.130563][T11640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.161331][T11640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.176724][T11640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.191053][T11640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.202256][T11640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.230786][T11640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.268539][T11823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.286665][T11640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.302627][T11640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.313061][T11640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.333505][T11640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.351369][ T5833] Bluetooth: hci2: command tx timeout [ 252.360923][T11640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.461574][T11640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.470836][T11640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.480090][T11640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.489234][T11640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.683590][ T6667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.716460][ T6667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.763554][T11842] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1495'. [ 252.789736][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.810619][T11839] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 252.819365][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.835027][T11839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1495'. [ 252.867138][T11849] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 252.876944][T11849] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 252.888186][T11849] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 252.956009][T11849] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 253.005213][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1497'. [ 253.014772][T11849] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 253.022244][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 253.025076][T11849] netlink: 'syz.3.1498': attribute type 2 has an invalid length. [ 253.141508][T11853] bridge0: entered promiscuous mode [ 253.164552][T11853] bridge0: entered allmulticast mode [ 253.173792][ T151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.325781][ T7185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.001046][ T7185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.069821][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.126356][T11867] netlink: 'syz.3.1502': attribute type 10 has an invalid length. [ 254.232459][ T7185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.277565][T11867] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 254.286606][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.399729][ T7185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.483357][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.513374][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.524857][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.537221][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.549132][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.560390][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.568596][ T7185] bridge_slave_1: left allmulticast mode [ 254.577524][ T7185] bridge_slave_1: left promiscuous mode [ 254.584440][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.597561][ T7185] bridge_slave_0: left allmulticast mode [ 254.604457][ T7185] bridge_slave_0: left promiscuous mode [ 254.610199][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.936760][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.949503][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.960662][ T7185] bond0 (unregistering): Released all slaves [ 255.239058][T11878] chnl_net:caif_netlink_parms(): no params data found [ 255.296061][ T7185] hsr_slave_0: left promiscuous mode [ 255.313324][ T7185] hsr_slave_1: left promiscuous mode [ 255.380965][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.405382][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.428960][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.484753][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.500723][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.598482][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.611403][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.620632][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.631599][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.634617][ T7185] veth1_macvtap: left promiscuous mode [ 255.644374][ T7185] veth0_macvtap: left promiscuous mode [ 255.649987][ T7185] veth1_vlan: left promiscuous mode [ 255.655690][ T7185] veth0_vlan: left promiscuous mode [ 255.655853][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.670412][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.807802][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 256.187217][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.344072][ T6670] wlan1: Trigger new scan to find an IBSS to join [ 256.432168][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 256.484059][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 256.564056][ T6667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.587173][ T5845] Bluetooth: hci0: command tx timeout [ 256.962211][T11890] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 256.983320][T11890] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 257.157322][T11878] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.188130][T11878] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.199352][T11878] bridge_slave_0: entered allmulticast mode [ 257.210907][T11878] bridge_slave_0: entered promiscuous mode [ 257.220683][T11878] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.228281][T11878] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.236098][T11878] bridge_slave_1: entered allmulticast mode [ 257.243145][T11878] bridge_slave_1: entered promiscuous mode [ 257.282940][T11914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.367232][T11878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.387131][T11878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.501473][T11878] team0: Port device team_slave_0 added [ 257.520243][T11878] team0: Port device team_slave_1 added [ 257.599977][T11878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.613738][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.648045][T11878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.673945][ T151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.683266][T11923] netlink: 'syz.2.1512': attribute type 2 has an invalid length. [ 257.703605][ T5845] Bluetooth: hci2: command tx timeout [ 257.709942][T11923] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 257.723033][T11878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.733296][T11923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1512'. [ 257.738663][T11878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.772690][T11878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.839064][T11878] hsr_slave_0: entered promiscuous mode [ 257.845780][T11878] hsr_slave_1: entered promiscuous mode [ 257.926406][ T7185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.030539][ T7185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.141732][ T7185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.240059][T11897] chnl_net:caif_netlink_parms(): no params data found [ 258.266155][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1513'. [ 258.266591][ T7185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.303267][T11929] netlink: 'syz.4.1513': attribute type 2 has an invalid length. [ 258.504502][T11897] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.512090][T11897] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.524436][T11897] bridge_slave_0: entered allmulticast mode [ 258.531054][T11897] bridge_slave_0: entered promiscuous mode [ 258.539472][T11897] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.547493][T11897] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.555529][T11897] bridge_slave_1: entered allmulticast mode [ 258.562121][T11897] bridge_slave_1: entered promiscuous mode [ 258.647280][T11897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.664207][ T5845] Bluetooth: hci0: command tx timeout [ 258.732536][T11897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.755643][T11947] netlink: 'syz.4.1517': attribute type 2 has an invalid length. [ 258.795034][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.871389][T11897] team0: Port device team_slave_0 added [ 258.900004][ T7185] bridge_slave_1: left allmulticast mode [ 258.914449][ T7185] bridge_slave_1: left promiscuous mode [ 258.920146][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.932122][ T7185] bridge_slave_0: left allmulticast mode [ 258.953918][ T7185] bridge_slave_0: left promiscuous mode [ 258.959695][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.064833][T11952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1518'. [ 259.203082][T11959] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1520'. [ 259.212876][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1520'. [ 259.435477][ T7185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.447412][ T7185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.458316][ T7185] bond0 (unregistering): Released all slaves [ 259.490491][T11897] team0: Port device team_slave_1 added [ 259.650140][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.672543][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.684620][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.696048][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.715327][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.734406][T11897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.741402][T11897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.746685][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.781462][T11897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.783688][ T5845] Bluetooth: hci2: command tx timeout [ 259.806164][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.829282][T11897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.836931][T11897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.837336][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.863337][T11897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.877474][T11878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.894745][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.904676][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.907133][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.933631][T11878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.956987][T11878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.977667][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.992112][T11966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.082392][T11878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.091178][T11975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 260.146439][T11897] hsr_slave_0: entered promiscuous mode [ 260.154494][T11897] hsr_slave_1: entered promiscuous mode [ 260.160883][T11897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.169558][T11897] Cannot create hsr debugfs directory [ 260.242526][T11975] netlink: 'syz.3.1525': attribute type 10 has an invalid length. [ 260.434437][ T7185] hsr_slave_0: left promiscuous mode [ 260.443828][ T7185] hsr_slave_1: left promiscuous mode [ 260.462893][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.473211][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.486844][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.494440][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.519394][ T7185] veth1_macvtap: left promiscuous mode [ 260.525208][ T7185] veth0_macvtap: left promiscuous mode [ 260.530740][ T7185] veth1_vlan: left promiscuous mode [ 260.537073][ T7185] veth0_vlan: left promiscuous mode [ 260.673254][T11997] netlink: 'syz.4.1529': attribute type 10 has an invalid length. [ 260.675209][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 260.749099][ T5845] Bluetooth: hci0: command tx timeout [ 261.050807][ T7185] team0 (unregistering): Port device team_slave_1 removed [ 261.074740][ T151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.106778][ T7185] team0 (unregistering): Port device team_slave_0 removed [ 261.384542][ T7190] wlan1: Trigger new scan to find an IBSS to join [ 261.636333][T11989] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1528'. [ 261.676245][T11994] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1528'. [ 261.696737][T11994] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1528'. [ 261.733136][T11997] team0: Port device netdevsim0 added [ 261.864467][ T5845] Bluetooth: hci2: command tx timeout [ 262.086395][T11878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.204557][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.267975][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.330832][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.338075][ T6674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.349117][ T35] wlan1: Creating new IBSS network, BSSID aa:b0:91:1e:32:0e [ 262.364066][ T52] [ 262.366835][ T52] ============================= [ 262.371758][ T52] WARNING: suspicious RCU usage [ 262.375525][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.377178][ T52] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 262.383772][ T6674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.399701][ T52] ----------------------------- [ 262.404649][ T52] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 262.413554][ T52] [ 262.413554][ T52] other info that might help us debug this: [ 262.413554][ T52] [ 262.424810][ T52] [ 262.424810][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 262.432922][ T52] 3 locks held by kworker/u8:3/52: [ 262.438446][ T52] #0: ffff88805e2de948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 262.447419][T11878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.449641][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 262.460565][T11878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.473990][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 262.494715][ T52] [ 262.494715][ T52] stack backtrace: [ 262.500641][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 262.511320][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.521391][ T52] Workqueue: bond0 bond_mii_monitor [ 262.526624][ T52] Call Trace: [ 262.529920][ T52] [ 262.532860][ T52] dump_stack_lvl+0x241/0x360 [ 262.537542][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.542741][ T52] ? __pfx__printk+0x10/0x10 [ 262.547347][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 262.552735][ T52] dev_activate+0xf8/0x1240 [ 262.557243][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 262.563133][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 262.568331][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.574222][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.580542][ T52] ? __pfx_dev_activate+0x10/0x10 [ 262.585568][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.591465][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.597807][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 262.602660][ T52] linkwatch_do_dev+0xfb/0x170 [ 262.607426][ T52] ethtool_op_get_link+0x15/0x60 [ 262.612363][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 262.617993][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 262.623106][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 262.628781][ T52] bond_mii_monitor+0x49a/0x3170 [ 262.633743][ T52] ? __lock_acquire+0x1397/0x2100 [ 262.638775][ T52] ? bond_mii_monitor+0x174/0x3170 [ 262.643906][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.649111][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 262.654504][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 262.659537][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.665517][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.671849][ T52] ? process_scheduled_works+0x976/0x1840 [ 262.677562][ T52] process_scheduled_works+0xa66/0x1840 [ 262.683119][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.689104][ T52] ? assign_work+0x364/0x3d0 [ 262.693694][ T52] worker_thread+0x870/0xd30 [ 262.698286][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.704177][ T52] ? __kthread_parkme+0x169/0x1d0 [ 262.709211][ T52] ? __pfx_worker_thread+0x10/0x10 [ 262.714318][ T52] kthread+0x2f0/0x390 [ 262.718388][ T52] ? __pfx_worker_thread+0x10/0x10 [ 262.723500][ T52] ? __pfx_kthread+0x10/0x10 [ 262.728100][ T52] ret_from_fork+0x4b/0x80 [ 262.732512][ T52] ? __pfx_kthread+0x10/0x10 [ 262.737138][ T52] ret_from_fork_asm+0x1a/0x30 [ 262.741909][ T52] [ 262.753729][ T52] [ 262.756110][ T52] ============================= [ 262.760971][ T52] WARNING: suspicious RCU usage [ 262.766053][ T52] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 262.773168][ T52] ----------------------------- [ 262.778133][ T52] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 262.786990][ T52] [ 262.786990][ T52] other info that might help us debug this: [ 262.786990][ T52] [ 262.797355][ T52] [ 262.797355][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 262.805565][ T52] 3 locks held by kworker/u8:3/52: [ 262.810684][ T52] #0: ffff88805e2de948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 262.821847][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 262.834937][ T5845] Bluetooth: hci0: command tx timeout [ 262.840314][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 262.850155][ T52] [ 262.850155][ T52] stack backtrace: [ 262.856472][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 262.867273][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.877363][ T52] Workqueue: bond0 bond_mii_monitor [ 262.882599][ T52] Call Trace: [ 262.885876][ T52] [ 262.888804][ T52] dump_stack_lvl+0x241/0x360 [ 262.893496][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.898715][ T52] ? __pfx__printk+0x10/0x10 [ 262.903311][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 262.908692][ T52] transition_one_qdisc+0x8e/0x1c0 [ 262.913835][ T52] dev_activate+0x838/0x1240 [ 262.918457][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.924798][ T52] ? __pfx_dev_activate+0x10/0x10 [ 262.929820][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.935710][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.942066][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 262.946914][ T52] linkwatch_do_dev+0xfb/0x170 [ 262.951679][ T52] ethtool_op_get_link+0x15/0x60 [ 262.956615][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 262.962249][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 262.967385][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 262.973055][ T52] bond_mii_monitor+0x49a/0x3170 [ 262.978022][ T52] ? __lock_acquire+0x1397/0x2100 [ 262.983072][ T52] ? bond_mii_monitor+0x174/0x3170 [ 262.988212][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.993423][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 262.998824][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 263.003861][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.009843][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.016190][ T52] ? process_scheduled_works+0x976/0x1840 [ 263.021909][ T52] process_scheduled_works+0xa66/0x1840 [ 263.027474][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.033477][ T52] ? assign_work+0x364/0x3d0 [ 263.038076][ T52] worker_thread+0x870/0xd30 [ 263.042672][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 263.048566][ T52] ? __kthread_parkme+0x169/0x1d0 [ 263.053601][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.058708][ T52] kthread+0x2f0/0x390 [ 263.062772][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.067887][ T52] ? __pfx_kthread+0x10/0x10 [ 263.072481][ T52] ret_from_fork+0x4b/0x80 [ 263.076894][ T52] ? __pfx_kthread+0x10/0x10 [ 263.081481][ T52] ret_from_fork_asm+0x1a/0x30 [ 263.086253][ T52] [ 263.100519][ T52] [ 263.102931][ T52] ============================= [ 263.107898][ T52] WARNING: suspicious RCU usage [ 263.112778][ T52] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted [ 263.119990][ T52] ----------------------------- [ 263.124986][ T52] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 263.134117][ T52] [ 263.134117][ T52] other info that might help us debug this: [ 263.134117][ T52] [ 263.144484][ T52] [ 263.144484][ T52] rcu_scheduler_active = 2, debug_locks = 1 [ 263.152547][ T52] 3 locks held by kworker/u8:3/52: [ 263.157770][ T52] #0: ffff88805e2de948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 263.169022][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 263.182009][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 263.191878][ T52] [ 263.191878][ T52] stack backtrace: [ 263.197921][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 263.208606][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.218678][ T52] Workqueue: bond0 bond_mii_monitor [ 263.223882][ T52] Call Trace: [ 263.227161][ T52] [ 263.230114][ T52] dump_stack_lvl+0x241/0x360 [ 263.234815][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.240021][ T52] ? __pfx__printk+0x10/0x10 [ 263.244637][ T52] lockdep_rcu_suspicious+0x226/0x340 [ 263.250028][ T52] dev_activate+0x925/0x1240 [ 263.254638][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.260996][ T52] ? __pfx_dev_activate+0x10/0x10 [ 263.266045][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 263.271954][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.278278][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 263.283125][ T52] linkwatch_do_dev+0xfb/0x170 [ 263.287901][ T52] ethtool_op_get_link+0x15/0x60 [ 263.292853][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 263.298592][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 263.303719][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 263.309407][ T52] bond_mii_monitor+0x49a/0x3170 [ 263.314386][ T52] ? __lock_acquire+0x1397/0x2100 [ 263.319426][ T52] ? bond_mii_monitor+0x174/0x3170 [ 263.324537][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 263.329733][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 263.335107][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 263.340130][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.346112][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.352444][ T52] ? process_scheduled_works+0x976/0x1840 [ 263.358178][ T52] process_scheduled_works+0xa66/0x1840 [ 263.363783][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.369781][ T52] ? assign_work+0x364/0x3d0 [ 263.374372][ T52] worker_thread+0x870/0xd30 [ 263.378988][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 263.384916][ T52] ? __kthread_parkme+0x169/0x1d0 [ 263.389964][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.395095][ T52] kthread+0x2f0/0x390 [ 263.399172][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.404298][ T52] ? __pfx_kthread+0x10/0x10 [ 263.408923][ T52] ret_from_fork+0x4b/0x80 [ 263.413365][ T52] ? __pfx_kthread+0x10/0x10 [ 263.417978][ T52] ret_from_fork_asm+0x1a/0x30 [ 263.422758][ T52] [ 263.427127][ T52] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 263.436639][ T52] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 52, name: kworker/u8:3 [ 263.446050][ T52] preempt_count: 0, expected: 0 [ 263.450925][ T52] RCU nest depth: 1, expected: 0 [ 263.455941][ T52] 3 locks held by kworker/u8:3/52: [ 263.461047][ T52] #0: ffff88805e2de948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 263.472769][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 263.485880][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 263.495727][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 263.506443][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.516504][ T52] Workqueue: bond0 bond_mii_monitor [ 263.521720][ T52] Call Trace: [ 263.525009][ T52] [ 263.527934][ T52] dump_stack_lvl+0x241/0x360 [ 263.532610][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.537807][ T52] ? __pfx__printk+0x10/0x10 [ 263.542391][ T52] ? __schedule+0x1858/0x4c30 [ 263.547067][ T52] __might_resched+0x5d4/0x780 [ 263.551842][ T52] ? preempt_schedule_notrace+0xf6/0x140 [ 263.557507][ T52] ? __pfx___might_resched+0x10/0x10 [ 263.562814][ T52] ? __pfx___schedule+0x10/0x10 [ 263.567673][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 263.572875][ T52] down_read+0x8e/0xa40 [ 263.577028][ T52] ? dump_stack_lvl+0x2f9/0x360 [ 263.581883][ T52] ? preempt_schedule_notrace+0x100/0x140 [ 263.587596][ T52] ? __pfx_down_read+0x10/0x10 [ 263.592356][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.597556][ T52] ? __pfx__printk+0x10/0x10 [ 263.602147][ T52] ? dev_get_flags+0x147/0x1d0 [ 263.606917][ T52] wext_netdev_notifier_call+0x1f/0x120 [ 263.612471][ T52] notifier_call_chain+0x1a5/0x3f0 [ 263.617593][ T52] netdev_state_change+0x11f/0x1a0 [ 263.622711][ T52] ? __pfx_netdev_state_change+0x10/0x10 [ 263.628348][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 263.634240][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.640563][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 263.645412][ T52] linkwatch_do_dev+0x112/0x170 [ 263.650257][ T52] ethtool_op_get_link+0x15/0x60 [ 263.655193][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 263.660829][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 263.665943][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 263.671593][ T52] bond_mii_monitor+0x49a/0x3170 [ 263.676540][ T52] ? __lock_acquire+0x1397/0x2100 [ 263.681560][ T52] ? bond_mii_monitor+0x174/0x3170 [ 263.686674][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 263.691869][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 263.697250][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 263.702271][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.708259][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.714600][ T52] ? process_scheduled_works+0x976/0x1840 [ 263.720322][ T52] process_scheduled_works+0xa66/0x1840 [ 263.725883][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.731863][ T52] ? assign_work+0x364/0x3d0 [ 263.736450][ T52] worker_thread+0x870/0xd30 [ 263.741041][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 263.746930][ T52] ? __kthread_parkme+0x169/0x1d0 [ 263.751952][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.757063][ T52] kthread+0x2f0/0x390 [ 263.761132][ T52] ? __pfx_worker_thread+0x10/0x10 [ 263.766268][ T52] ? __pfx_kthread+0x10/0x10 [ 263.770865][ T52] ret_from_fork+0x4b/0x80 [ 263.775276][ T52] ? __pfx_kthread+0x10/0x10 [ 263.779862][ T52] ret_from_fork_asm+0x1a/0x30 [ 263.784629][ T52] [ 263.792369][ T52] [ 263.794721][ T52] ============================= [ 263.799563][ T52] [ BUG: Invalid wait context ] [ 263.804418][ T52] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Tainted: G W [ 263.815939][ T52] ----------------------------- [ 263.820786][ T52] kworker/u8:3/52 is trying to lock: [ 263.826056][ T52] ffffffff8fca7410 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1f/0x120 [ 263.835537][ T52] other info that might help us debug this: [ 263.841437][ T52] context-{5:5} [ 263.844909][ T52] 3 locks held by kworker/u8:3/52: [ 263.850021][ T52] #0: ffff88805e2de948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 263.861071][ T52] #1: ffffc90000bc7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 263.873932][ T52] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 263.883580][ T52] stack backtrace: [ 263.887282][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 263.896115][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.899407][ T52] Tainted: [W]=WARN [ 263.910907][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.920953][ T52] Workqueue: bond0 bond_mii_monitor [ 263.926149][ T52] Call Trace: [ 263.929421][ T52] [ 263.932354][ T52] dump_stack_lvl+0x241/0x360 [ 263.937023][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.942211][ T52] ? __pfx__printk+0x10/0x10 [ 263.946797][ T52] __lock_acquire+0x15a8/0x2100 [ 263.951643][ T52] lock_acquire+0x1ed/0x550 [ 263.956134][ T52] ? wext_netdev_notifier_call+0x1f/0x120 [ 263.961842][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 263.966850][ T52] ? preempt_schedule_notrace+0xf6/0x140 [ 263.972474][ T52] ? __pfx___might_resched+0x10/0x10 [ 263.977753][ T52] ? __pfx___schedule+0x10/0x10 [ 263.982613][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 263.987811][ T52] down_read+0xb1/0xa40 [ 263.991954][ T52] ? wext_netdev_notifier_call+0x1f/0x120 [ 263.997664][ T52] ? dump_stack_lvl+0x2f9/0x360 [ 264.002503][ T52] ? preempt_schedule_notrace+0x100/0x140 [ 264.008210][ T52] ? __pfx_down_read+0x10/0x10 [ 264.012964][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.018147][ T52] ? __pfx__printk+0x10/0x10 [ 264.022732][ T52] ? dev_get_flags+0x147/0x1d0 [ 264.027484][ T52] wext_netdev_notifier_call+0x1f/0x120 [ 264.033022][ T52] notifier_call_chain+0x1a5/0x3f0 [ 264.038118][ T52] netdev_state_change+0x11f/0x1a0 [ 264.043220][ T52] ? __pfx_netdev_state_change+0x10/0x10 [ 264.048847][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 264.054727][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 264.061040][ T52] ? rfc2863_policy+0x1db/0x3b0 [ 264.065876][ T52] linkwatch_do_dev+0x112/0x170 [ 264.070714][ T52] ethtool_op_get_link+0x15/0x60 [ 264.075646][ T52] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 264.081276][ T52] bond_check_dev_link+0x1f1/0x3f0 [ 264.086399][ T52] ? __pfx_bond_check_dev_link+0x10/0x10 [ 264.092023][ T52] bond_mii_monitor+0x49a/0x3170 [ 264.096955][ T52] ? __lock_acquire+0x1397/0x2100 [ 264.101967][ T52] ? bond_mii_monitor+0x174/0x3170 [ 264.107066][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 264.112255][ T52] ? __pfx_bond_mii_monitor+0x10/0x10 [ 264.117616][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 264.122628][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.128603][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.134920][ T52] ? process_scheduled_works+0x976/0x1840 [ 264.140628][ T52] process_scheduled_works+0xa66/0x1840 [ 264.146183][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.152165][ T52] ? assign_work+0x364/0x3d0 [ 264.156742][ T52] worker_thread+0x870/0xd30 [ 264.161327][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 264.167211][ T52] ? __kthread_parkme+0x169/0x1d0 [ 264.172228][ T52] ? __pfx_worker_thread+0x10/0x10 [ 264.177325][ T52] kthread+0x2f0/0x390 [ 264.181385][ T52] ? __pfx_worker_thread+0x10/0x10 [ 264.186480][ T52] ? __pfx_kthread+0x10/0x10 [ 264.191055][ T52] ret_from_fork+0x4b/0x80 [ 264.195470][ T52] ? __pfx_kthread+0x10/0x10 [ 264.200069][ T52] ret_from_fork_asm+0x1a/0x30 [ 264.204827][ T52] [ 264.209896][ T5845] Bluetooth: hci2: command tx timeout [ 264.300542][ T6674] bond0: (slave wlan1): link status definitely up, 0 Mbps full duplex [ 264.339571][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.366434][T11878] veth0_vlan: entered promiscuous mode [ 264.389040][T11878] veth1_vlan: entered promiscuous mode [ 264.400697][T11897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.409314][T11897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.429186][T11897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.438029][T11897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.462935][T11878] veth0_macvtap: entered promiscuous mode [ 264.473146][T11878] veth1_macvtap: entered promiscuous mode [ 264.494556][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.505541][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.516294][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.526798][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.538548][T11878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.549689][T11878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.560398][T11878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.571037][T11878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.581791][T11878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.590603][T11878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.599626][T11878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.608715][T11878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.646438][T11897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.653858][T11878] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 264.675295][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.676495][T11878] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 264.683128][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.710248][T11897] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.720676][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.727789][ T6674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.736579][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.745163][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.757632][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.764756][ T6674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.883376][T11897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.908243][T11897] veth0_vlan: entered promiscuous mode [ 264.918137][T11897] veth1_vlan: entered promiscuous mode [ 264.937011][T11897] veth0_macvtap: entered promiscuous mode [ 264.945447][T11897] veth1_macvtap: entered promiscuous mode [ 264.956718][T11897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.967996][T11897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.978711][T11897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.989425][T11897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.999395][T11897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.010135][T11897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.021013][T11897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.032423][T11897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.044294][T11897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.054274][T11897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.065250][T11897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.076000][T11897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.085249][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.097999][T11897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.107026][T11897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.116134][T11897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.125196][T11897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.149918][T11897] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 265.167928][ T7190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.169135][T11897] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 265.183536][ T7190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.199549][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.208158][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.429316][ T6674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.555997][ T6670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.717529][ T6674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.017865][ T6674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.184431][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.238514][ T6674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.433552][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.822544][ T6674] bridge_slave_1: left allmulticast mode [ 266.833464][ T6674] bridge_slave_1: left promiscuous mode [ 266.839210][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.850197][ T6674] bridge_slave_0: left allmulticast mode [ 266.859630][ T6674] bridge_slave_0: left promiscuous mode [ 266.865485][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.982491][ T6674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.994588][ T6674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.005457][ T6674] bond0 (unregistering): Released all slaves [ 267.267224][ T6674] hsr_slave_0: left promiscuous mode [ 267.272998][ T6674] hsr_slave_1: left promiscuous mode [ 267.300786][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.314891][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.322328][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.334123][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.341659][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.353190][ T6674] veth1_macvtap: left promiscuous mode [ 267.359585][ T6674] veth0_macvtap: left promiscuous mode [ 267.367425][ T6674] veth1_vlan: left promiscuous mode [ 267.372691][ T6674] veth0_vlan: left promiscuous mode [ 267.561289][ T6674] team0 (unregistering): Port device team_slave_1 removed [ 267.595298][ T6674] team0 (unregistering): Port device team_slave_0 removed [ 268.017966][ T6674] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.433592][ T7185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.517341][ T6674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.598621][ T6674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.658715][ T6674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.736161][ T6674] bridge_slave_1: left allmulticast mode [ 268.741845][ T6674] bridge_slave_1: left promiscuous mode [ 268.750979][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.760838][ T6674] bridge_slave_0: left allmulticast mode [ 268.768724][ T6674] bridge_slave_0: left promiscuous mode [ 268.774573][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.882366][ T6674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.895119][ T6674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.907060][ T6674] bond0 (unregistering): Released all slaves [ 269.201964][ T6674] hsr_slave_0: left promiscuous mode [ 269.212894][ T6674] hsr_slave_1: left promiscuous mode [ 269.221131][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.235899][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.244623][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.252047][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.263998][ T6674] veth1_macvtap: left promiscuous mode [ 269.269515][ T6674] veth0_macvtap: left promiscuous mode [ 269.276958][ T6674] veth1_vlan: left promiscuous mode [ 269.282218][ T6674] veth0_vlan: left promiscuous mode [ 269.508150][ T6674] team0 (unregistering): Port device team_slave_1 removed [ 269.545161][ T7190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.554370][ T6674] team0 (unregistering): Port device team_slave_0 removed [ 270.643673][ T6674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.745219][ T6670] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!