last executing test programs: 1m29.850686356s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m28.558217148s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 1m23.215355379s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 1m10.457817636s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m9.617508108s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 1m3.72662473s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 52.970145063s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 52.918327146s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 51.172979092s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 35.869335037s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 34.857504882s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 33.838221603s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 21.010889289s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 19.778391809s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 18.603223933s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 6.602654721s ago: executing program 2 (id=768): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 5.258608379s ago: executing program 0 (id=672): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x808}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40884) socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x140, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x12c, 0x1, [@m_skbmod={0xb4, 0x21, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x0, 0x20000000, 0x1, 0x7f}, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x74, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1af8053ec8d6e5ca524547a7f78fd07a433657384713ec716aa73e8f57c3d88a1c103fafa7c06ce3bd734c4f70f70c480da2e113d5431b892b4f34c9d8eed23b80400fb58555eb79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x140}}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_int(r6, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d", 0x20) accept$alg(r5, 0x0, 0x0) (async) r8 = accept$alg(r5, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) 3.756303088s ago: executing program 4 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x1000, 0x200, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0xf8, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0x7b, [@multicast2, @empty, @remote]}, @end]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xe8, 0x3, 0xa, 0x627a3, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200371f4ff900000000000000000000f000"/33, @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r8, &(0x7f00000003c0)=""/52, 0x34) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x4c3858e00e5cbf10, 0x1, 0x0, r1}], &(0x7f0000000000)='GPL\x00', 0x6, 0x2e, &(0x7f0000000100)=""/46, 0x41000, 0x1c, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r4, r5, 0xffffffffffffffff, r6, r7, 0x1, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x2, 0xa, 0x1}], 0x10, 0x7, @void, @value}, 0x94) close(r0) 1.273371695s ago: executing program 3 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000002c0)={@private2, 0x0}, &(0x7f0000000300)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) poll(0x0, 0x0, 0x46) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x5d0, 0x16, 0x20, 0x70bd27, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e24, 0x6, 0x4e21, 0x9, 0xa, 0x20, 0xc0, 0x33, 0x0, r2}, {@in=@private=0xa010101, 0x4d5, 0x33}, @in6=@mcast2, {0x80, 0xfc7, 0x26, 0x8080000000, 0x7, 0x5, 0x0, 0x7}, {0x8, 0x6, 0x5, 0x100000001}, {0x4, 0x1, 0x3}, 0x70bd25, 0x3504, 0xa, 0x3, 0x33, 0x90}, 0x0, 0x10000}, [@algo_crypt={0x76, 0x2, {{'ctr(cast6)\x00'}, 0x170, "5bb4a416df2807c81a74a22fd8bcccfaab5eb1785da6a5268c36b951645c281cf38f401c87b69789f2921d444a61"}}, @mark={0xc, 0x15, {0x35075d, 0x4}}, @coaddr={0x14, 0xe, @in=@empty}, @offload={0xc, 0x1c, {r3, 0x2}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e24, 0x7114, 0x4e23, 0x6, 0xa, 0x0, 0x80, 0x3a, r4, r7}, {0x3ff, 0x3, 0x4, 0x875, 0x2, 0xfffffffffffffffb, 0x5, 0xbd}, {0x3, 0x0, 0x6, 0x40}, 0x4, 0x6e6bb2, 0x2, 0x1, 0x0, 0x3}}, @tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x3505, 0x2, 0x3, 0x3, 0x89, 0x8, 0xfffffffe}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x33}, 0x10, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x2, 0x3, 0x4, 0x6, 0x9, 0x5e}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x3507, 0x0, 0x1, 0x9, 0x602c, 0x0, 0xe}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x0, 0xaef6, 0xd76b, 0x9}, {{@in=@private=0xa010101, 0x4d2, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x1, 0x1, 0x7, 0xec91, 0x6, 0x5}, {{@in6=@private1, 0x4d2, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3504, 0x3, 0x1, 0x32, 0x7ff, 0x71, 0x9}]}, @algo_crypt={0x96, 0x2, {{'ecb-cipher_null\x00'}, 0x270, "8ef7b6a367208484d7adc0456df892bca1e73275c59e40d0d8ac0c06ce56c77ef1334a0406f00993b6026a9ba00b9e5b3832b3a8d116152d1bfffaf8cb995baff16bb14881a26a131aa3c3f07d54"}}, @algo_auth_trunc={0x133, 0x14, {{'rmd320-generic\x00'}, 0x738, 0xa0, "d8a4cc89d88fcb80f54b1958f69563c48ff08cbe5a88e0da718c79037dd36fb5a78d1ff0b0d4016c6f157289961213fa6b48d5dc3739681c2b58a3f5c78cf0f0b0b2e60cdb5fbcee0fcc42e9bf7a54d12e40e46bc3dda79d19e5c360c0a3f860383245beaf7fc0170fc90041ca608b25357a484d7c5f2b3ead213dfffaa5c4816d033b401f213bf817b446e6ed9e3677437bb1f586df4c2117b9c254f4da157745e55bc8fefa289c054a799299713305865e85b405a5d0d2d1cefb139c8529abc7ef54211c5a68311b3f915f6aebd2f75a5ae743870d32a9affeb57fb846ed65428dfc954a92e2"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast2, 0xa, 0x4, 0xd2}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2d, 0x5}}]}, 0x5d0}}, 0x0) accept4(r0, 0x0, &(0x7f0000000140)=0x61, 0x80800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r8, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r10, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) (async) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x8907, 0x0) 1.040048595s ago: executing program 3 (id=1346): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb0d6}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3800000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000300)='GPL\x00', 0x0, 0x61, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 978.820654ms ago: executing program 3 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x74}}, 0x800) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc}]}, 0x1c}}, 0x4001) syz_emit_ethernet(0xec9, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0xe93, 0x11, 0x1, @private2, @local, {[], {0x4e23, 0x4e21, 0xe93, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x100, @void}, "7592ad43f8fd35c8162560896308f90d933e29ac70abd07801a31c9d755aa609a39526e3d234e3b8d1e29c5ec611fc7ba86f0b7f3cf0da5e994711e0978a51172b9fd3e7bf3387570906c2ed54c8b277701c75ea204e4606c60aee9e1d2e2be5f9a88fecb1f01d431070cd35cdc88c9d06d08e3e1bf2703c63757e979b0d97f121eee9f7a6ae3ebbccbbe5ca76c692313c553a9e351f45e9f60c7ff1a93e85a922105d617bd2cde523e5f0a300bb89802178e69cf6dfe6aca57cb8234c5dfc833585e40beb21a682274e04e779252158e289105fbe7a4c6ee6cb7256ce852ef08a5df7403520c709169f2595cd9f88d4196b846a8060959e31f9184171f2fa6a9adb937ead89e4f0d6afd42e6efbd85a277ff059f5bafac72003ecdbdbd649bfde812f028f18370351fa945612ea8e31aceee6f687c831df4b5a53151a7ce6f5bc00b7c4ac4a0e6525033b70403627003b439f33106c9b1042dcb33eb7037ba3b8ede83c0014d003cea8afec8f5777d86c609fefb9e506dd4ea7427ed8e11b697053a22be5cfbcb613fd6a23bdb5f053145ca120f4a752add9323f37d31f51e0518aa76b6a9d0c8cd57401b711f1a33628686e15f8ecc026e57474587bfe62d5277e42a9b66ff3938485dcfabe7c9560bffe67bc7613d4f38cfa56b1c7f5d23b957f763e20ac11445cdc7f0971f1caf7fcd915149e1002fefa408007a82cef4d56f2036065be5d002df13e393bb7011c28e2e99624d6b035400173d3a0270b21cc2a231f10c3c5ee524dc7a5bebbe1b7f7faf0287066b1637a4569dde984eaa95f36b2153c452d332109a689c2f3b5fe7e04be3482e723d176246030e9ba489d93e98697314535b136a3661646b1100ee1e29a59e7d18cd1a6eb46254635601b6e924471239d9ed7bfea050890d55cc3d97cd2de1cbf2d56fd25dd01ae0fcd1cf3e74361547bfe5cb39c2094ff8597c1fcc775c7bab1a4d296c4121fe53cd79ddfb8541f061530d096b2aa4221079b69a6b5bd5d9b27ab5609021d7807566db74fa9f50e6ab5cfa1ae71c5cd7859270e91d01dac5e65950850dbce2948f69aec075a3b91e76bf626e4ebe480c232ac11c53c8ef93f4c6a027ce6158a97383b36a10cedd5b7cb59d88345e8edf8c280eeaadc89e29a5c32acb9c5a4962aedac6b14ef3a2548376fc7039fdb367d71580315e4a03276d2e35f2d394b187cbd5d50d912826bbd66d7f9814b53cf2cc2156f1d84427b512b0d55b5237e41ec9071ef9011e52a721fd4ddcb3b42580fd5670d0a5488cc39557ce9311300208576ca19c490417f282b25535939961d37d50f095f921b53ceef8c413966dad7987b2950afe50375db8ab5737b45b1a1775d1443fd7fa70e050cf37e78d93182233c710cbd48e1a22d58ddbf547325da2ef8aa8213f1caeab5bd62a8d3eea898ecca397899383c884a6bf26b7c5292df1beb2dc3547570337da892db9b5844607f2507d39007e5446833dfef8759e0d4072d98fa3409c964e98bbee5d2daf7afe2cafd166d201baa8eaca08e8939ce1588f5e4a8452a04d9364b356a0884a783636cbeaff6184405f1d3d210516b7387d07dda8532c3a8a6426e9c18faf41ef3f738e3e29a40a3523f16195fa37cc83dfcce4868e98139559023834f2335182cddf97fc643bc69c51167899df3d89dc3133a74491d82c5c3664cfc9c78ba6980d87f73a2f3e62a4c9904a0c2e49f7c2188a88a0a324a3feb46675c5b5fc16af7d7d77883d642f0cbaba4e4b2697ee1c15780004a898f26fe625aaedbe43274d3e9fc149e6a56531e66b4191545f382a81e848b36400efff63aee3d89308e71771cf2880d7ba9957649ae79288e469a66681b8fae894d64816c1389e8f1a4d1e82a75e4e8a42a173419b82d6d5698a76f090ad98fe68acd790f24b4f16a5763160c23e2eb0280bceb452c721955ed056ab50f7d83eb841184525bd54ff666f60bbf0bb47b92209860729c461f5de3e117b677268ebf23223daf71c2d3244712f22aa93a5c5824a7818c00eb86effe6b959d35fd94abe4efe097f4c6b6d63ef11980708a4e5c9fee822a3e467de7cb899642eeef902635627b77a65955e563e069b2f9981a1b1774b10b1b452897a11a7acd3ee583d75e0e2a20278d16c56a9e6737229ac5dbca0f4f2987ae08157b4faba9f905743085aa220df2f6537c20cb1b2347d43b1c4383da81ef61b9cfe12fe9d53136868c23b89a833c2df102bfc9bea2d9274cf66af091da4ad3de5c177f00e0d5f7f8d96e15cdf27b61005bff309439438372c7221317e4018f3043fd367e023ae6376172b43a93d7070e729a4d8490bde30d8bd1c97ab7314b5da8d73afd385806e8855b8481eb318119fa5593c4e1b38e93aedacdb1e950004c0df35d9ae80f5180875cfdddcdc26af30a9682cf025ce4f3adefeae0b36a0517224ac5c2975af5bd12054631f1c656417205bf80ce26d089d0ca88a1929106fdd2ada0dc38fa62819b546d05d48e6b695dafcdf7744c05294041241f91a9c481ef622db1a1ac6bb747a08e769c252427c27efb282b1d9cf95a5bd14326adb4daf2f94154c4ae5207855c2fca42dd4ac07b39d906c14db40cc87dee633f68ee966fe381203fa323b1dc1c6853ec8926b710d0ea69fcf573614e2c8c7b810c91a6f4dea84f18c57ac380c7194d05228abfbeb57453718a4862e1f6e9fde80d0095540d00b59f1f6b6c5bf053358e401a3c027abf65721d41ab139c909e3a189ed8b1a2c59ccfbb43751e7b54ddd59d416aa3700a6abecafb54014348430a3fdcc0e00f0038de80e0d078bf743c3c89bafc7e185585cd4bd688ddaa65b9cd37e6b425541c75f8f4b58fadf308381355652b45e5a0ca857357baa542d6f905bf145a67c9456b2d71e1b00e2f21bc1458609bbfe17cae212bfbc8573623b8b5e2a30bf24c143e161aadc32fbcd649ea80039a3ed263f44d5cc96e1efa0d3ae68705e26295b4a645a6d18b6ad6a70f8acc7eb4010d4ab843d968ff7bec6c91db9b913b325f7c94620269a4e6f94e9a6d775f0ec6bff9cc97ed01970704a19a3d67db5aa1ed9e4984a711d58599916c3915fe02551dcba38fc76c62d74c822d80611e7653817ba03a69151a19286a82199b19fad8e236fedf522e0b97319339df65ce8568daef0ca5a4025cc7b57ddc1a114e4e5b2e9491f6c18e6ba241392b6e87e663d3b8158eded4345be4622c51ea4e50e009b819fe298687636a7ba4f28813a1721ea38089dad7f3df17a320a3bc70b31ef0ea9848c812658ea0f810d526196f82e585a3140817e90dcd9d67147e0b241611b2cce265e7a47e8db75e69daf17dd547deaf9befb0dd65c28cffe1c851f06291308d28f34ad011cc8ff639b94f4d6d162ebfec65ae91b09f0a6208b7ffc254b92d88a7b1fffbc4ffb83d7448225251070813bd7ae9f487f336cfe477882856937af45f9738b3d95274fcd0d428ab6ee6d63e0b47b379497f409f6fb6a6182e473eea7795adcb6447a6a4ec8eab420dd980314fc45a15afd2b17f985b6a258c3bdc2d6096ed07e353b1b265e91ba7a35b5be433b1612ee95cf577c76c88c3e8dd921e88ab1f7f48f87400666a89270283ce55e8ba6cffa5dfbe587a90c97e44e3290d3e53d52cf42260e62ae39831942ef12376c8a8e2dd4e14344c5ee016ed9a3b0a715fdf9fc7b83256344b65c0496b2e27c4d71a76517296ef71be401cc3bae8a9350e476b82a8998504a1dcac582cd79cba9ad4fbde41ee4b0b9119ea0d4f93dce1186177e8e7c2c217eb5b0ab5a0ce6c9ec25fc22a81d60127f44bbd90246bfd611a435713810070b66c7d6a8bec4820390669c31eb0fa83879d53dcac7c318f81e4afb2f535ebd17a0a47e14b8ec3d24d79ff51b25d95401163eeb908ccd34cc83dc5f11cb3744bbc0037c4c67ada26b108a7c28c7ce51eec7ae81dfdc027ff73fb1dc40636de22f7298bff176a583258f1c139997162f71a02838300e4bacd343ae87793d772f738df5e4fe61fd335b2e25532f4a9a03d003c32e68cc2c28219385614851e873fa2d44543e9a6b0c9e845943a8329e48341839c46c902842d514a5e7de0cd1788788560b33b663a71830d01268325c83c427554fb9c43c42064cc00639bd651c37125019bd092f2a7e5f9016f44864ed6412310711c676cb1d18567de50e2e03fdc187221056fd306ec11f7a81a9f80e239085ce0fcbb79711384d77a90ada7333cd6ebc1f3db3b1df530756051ff98f48979cd9c9b79166b844c75c4506a9a0a8834b63fc111df91c7b2314de4538358c344298e58406e3abee9bb81150078b5f315265604d3ff32462674674346d54dd99d42ba465555d0c806bd258040154e86c544905d801609928f50974a44570b53a204ea8ac34c34cca0e93885a55c06271ce4d542e8a7f6337b6740707a964fab2b982e217cc4387508c5dc33f8294bedcaab9ec998576de7be46045d9e2591184104a496647379c55939f549e30cf320daa6e92a8e663be80cafddb1b00b9e22523bee360b9d6307c498c82777dd8322a7e359dc4a8f3188ebfcb950e6d251fd1d3535dced180915337c7a50b325858316b4b50cd457340be87fb5bc7ef9b2c555c1f81087b81c3656a75d4714c2b0dfe484823c6ae5b52ee40f9f46276cc2ffd4f147642d0e41ab0b0944cee4c43ac440afb47ba060a84028adda320f84005346f1d3d235638016f6d9699c2e185057217e8d480a28a34ac7586f83168027b2747f4c5d30cdde4658806d4bbe90140c8a66ca6464eafe3c746276b56ac34980103ae19569e81af2513f6d764e9d8d78372aaf987aae1d2a36415f4e96ef444d714dab8283668ca8d036d9dbd0965d707691ebc36a99265b1b8b2d9fe9210d2f52c133acec1180743e2134fc39f0ad7267962495e6d586a99bff1cf20cfa1e06beedad5b6178e07ce769dc86676e4ad75ed0709b175e9c161759ffa019f067fbd81251f9d1f4bb000b4b1b8c0d426bd8c6f1918b022e9d1537c5ece496ea04d3ef56a1eaa91bb73b95c26082266649da71f6f6b63734fa52a2b324e34fc6fd422121ab70f411742c17a23e87d943c0d63e08e5af0e5358b18c562b693522a1ca25bd19075f75adf0bf8ba8da1d21095b69b4415e3dc1949178a564c0cf1653593519bf0ad39ea9e8f8f578772e20b65ea7663eb5959b2e4166b882b34b9c762abaf17105ee4b7623e75cc29f63e575099102ab"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x200004, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x40}, {0x0, 0x1, 0x0, 0x0, 0x2}, 0x2}}]}}]}, 0x58}}, 0x8000) 814.845191ms ago: executing program 3 (id=1349): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000140001800d0001010064703a73797a3100000000"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) 729.527506ms ago: executing program 1 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, &(0x7f0000000040)) r2 = accept$ax25(r1, 0x0, &(0x7f0000000080)) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x6}, 0x1c) 540.96248ms ago: executing program 1 (id=1351): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x10, 0xffffffffffffffff, 0x16aa6000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r3, &(0x7f0000004640), 0x0, 0x40000000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r2, 0xfffffffa}, 0x8) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x20}, 0x20}}, 0x0) 538.999297ms ago: executing program 3 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000000000010008002600b815000008000c006400000008000d0000000000"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000240), &(0x7f00000004c0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "e3da62162895237d", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x4, 0x0) write(r10, &(0x7f00000002c0)="0f", 0x1) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000580)=0x8) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="c00e02003c000b05d25a806f8c6394f90324fc602f000600000000000000000037153e370248018080351700d1bd7dba80bbd88316ed2bfe279e61bb3fcf7c2f406a15d458d50afa631dfbeef5a21970bca93288784edb2e9b4d91af6899a1ed2992abff988482f7f28b529471fd0139540961edf5b94b2cd645f50afdb32a3b159d15aa83699dbed52e01d0093294e275dabcc40bc3f4efc521c068c5d3ea0f9a2981c3c7f6059284541d44d31b3c24f4f35185b7a4ab4073d7761b6832de9bc34374dfc45a8da6b0d7f6a62cc2db9159b6799dd5172ff818378bff8197316756ae4d5ead76206a85bfcdbd1bc50000", 0xf0}], 0x1}, 0x0) 492.071939ms ago: executing program 1 (id=1353): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) accept4(r1, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000dc36000000000000000000001801000020786c2500000000002020207b1af80100ffff00bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006e0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 308.070573ms ago: executing program 1 (id=1354): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c21000907800800398d8af"], 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 125.148381ms ago: executing program 1 (id=1355): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x141) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x841) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="02"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="02"], 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000feffffff2e00000008000300", @ANYRES32=r3, @ANYBLOB="050034008b000000bb6728a4"], 0x28}}, 0x10) 81.93189ms ago: executing program 3 (id=1356): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000002f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, &(0x7f0000000080)=""/248, 0x1b, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000002e40)=ANY=[@ANYBLOB="000000003201d39d778f0699f8d8ed4972c0eeca8f2eaa3da29bd44b0f65676c8432645042e9265bb68a06f18d51a100a8a429cc843e85d12094da7cbaa10b20ecb354bdb40fa2a8c3b5b2941bccb529107880ee31109576becb801dbd351931f52ebe5d8bd1d2a3eecc1e81f227fff8ebc56888be196e697c5d38b53e519b89d6b349c467fd354813bf024a05d7b7b62b56706d3b1a72c9449eb5"], 0x138) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffebe90f89997708004500001c000000e7000290780a010105e0000001177c907864010101"], 0x0) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x7, @mcast1, 0x0, 0x2}, 0x20) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002940)={0x1b, 0x0, 0x0, 0x322cfbb9, 0x0, r6, 0x7ff, '\x00', 0x0, r1, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002c00)=@o_path={&(0x7f0000002bc0)='./file0\x00', 0x0, 0x4000, r5}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r10, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002c40), &(0x7f0000002c80)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x1b, 0x1c, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002ac0)='syzkaller\x00', 0x1, 0x70, &(0x7f0000002b00)=""/112, 0x41100, 0x10, '\x00', 0x0, @fallback=0x13, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b80)={0x3, 0xd, 0x4, 0x9}, 0x10, 0x0, r9, 0x4, &(0x7f0000002d00)=[r10, r11], &(0x7f0000002d40)=[{0x5, 0x3, 0x1, 0x4}, {0x2, 0x3, 0x4, 0x9}, {0x3, 0x3, 0xb, 0x8}, {0x0, 0x3, 0xb, 0x7}], 0x10, 0x9, @void, @value}, 0x94) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x20}, 0x10) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x3, {0xa, 0x4e20, 0x640c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002840)=[{{&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x2}, 0x10001}, {{&(0x7f0000000540)=@ethernet, 0x80, &(0x7f0000000600)=[{&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f00000005c0)=""/42, 0x2a}], 0x2, &(0x7f0000002740)=""/206, 0xce}, 0x65}], 0x2, 0x20, &(0x7f0000002900)={r12, r13+10000000}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000002f00)={{0x3c, @multicast2, 0x4e21, 0x0, 'lblc\x00', 0x4, 0xf04, 0x69}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x3, 0xe5, 0x8, 0xfffffffa}}, 0x44) write(r0, &(0x7f0000000240)="0db5f840a504dd6ada2fea755c3b89d79c5779ce1a3123b4f863f0e5c01afa2cf5dee20297b2c3515674f9993f8cc24332442c407e9f37acf2f9cb4c483631ae83adf79a4f6444dcdbd83204a68074050cfa9e1e5012268ec60b9e4bba7b6b17dca704d7a1d16c4c042d62263c96036cd7a2191cbe3bad8f90134f1404282609dcd4726319397a9fd4b8c0deb2372daeaa26a39f7fb2c86b86c4c775eeda0b7cc039edb007f9b8ad", 0xa8) 0s ago: executing program 1 (id=1357): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x9}, 0x20) (async) close(r0) kernel console output (not intermixed with test programs): fs: Directory 'hsr0' with parent 'hsr' already present! [ 251.335668][T10976] Cannot create hsr debugfs directory [ 251.373330][T11097] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 251.392809][T11097] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 251.477922][T11097] block nbd1: not configured, cannot reconfigure [ 251.484973][ T5073] hsr_slave_0: left promiscuous mode [ 251.520798][ T5073] hsr_slave_1: left promiscuous mode [ 251.526833][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.567677][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.589598][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.597123][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.690590][ T5073] veth1_macvtap: left promiscuous mode [ 251.696229][ T5073] veth0_macvtap: left promiscuous mode [ 251.737823][ T5073] veth1_vlan: left promiscuous mode [ 251.743231][ T5073] veth0_vlan: left promiscuous mode [ 251.852409][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.863227][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.873243][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.883572][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.891660][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 251.901476][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.058108][ T5837] Bluetooth: hci2: command tx timeout [ 252.483047][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 252.531518][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 252.868746][ T5837] Bluetooth: hci0: command tx timeout [ 253.977674][ T5837] Bluetooth: hci4: command tx timeout [ 254.148017][ T5837] Bluetooth: hci2: command tx timeout [ 254.270700][ T5073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.375961][T11111] chnl_net:caif_netlink_parms(): no params data found [ 254.422987][T11170] netlink: 'syz.1.1039': attribute type 9 has an invalid length. [ 254.431242][T11170] netlink: 'syz.1.1039': attribute type 6 has an invalid length. [ 254.469988][ T5073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.591668][ T5073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.727329][ T5073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.864028][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.887058][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.904759][T11111] bridge_slave_0: entered allmulticast mode [ 254.922873][T11111] bridge_slave_0: entered promiscuous mode [ 254.961964][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.982334][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.997219][T11111] bridge_slave_1: entered allmulticast mode [ 255.007047][T11111] bridge_slave_1: entered promiscuous mode [ 255.122698][T10951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.150900][T10951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.200690][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.233507][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.297661][T10951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.476457][T10951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.523057][T11111] team0: Port device team_slave_0 added [ 255.544449][T11111] team0: Port device team_slave_1 added [ 255.558489][ T5073] bridge_slave_1: left allmulticast mode [ 255.567672][ T5073] bridge_slave_1: left promiscuous mode [ 255.573421][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.583645][ T5073] bridge_slave_0: left allmulticast mode [ 255.591443][ T5073] bridge_slave_0: left promiscuous mode [ 255.599020][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.616071][T11223] netlink: 'syz.1.1046': attribute type 10 has an invalid length. [ 256.032413][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.044556][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.055428][ T5073] bond0 (unregistering): Released all slaves [ 256.068881][ T5837] Bluetooth: hci4: command tx timeout [ 256.172032][T11223] team0: Device hsr_slave_0 failed to register rx_handler [ 256.299013][T11228] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 256.358806][T10976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.372414][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.400074][T11228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.427260][T11228] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 256.443043][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.461594][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.506222][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.519592][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.526587][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.554063][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.607905][T10976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.709307][T10976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.725504][T10976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.825147][T11111] hsr_slave_0: entered promiscuous mode [ 256.838808][T11111] hsr_slave_1: entered promiscuous mode [ 256.855019][T11111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.865276][T11111] Cannot create hsr debugfs directory [ 256.930625][ T5073] hsr_slave_0: left promiscuous mode [ 256.941250][ T5073] hsr_slave_1: left promiscuous mode [ 256.947176][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.961743][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.972408][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.980558][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.020237][ T5073] veth1_macvtap: left promiscuous mode [ 257.025826][ T5073] veth0_macvtap: left promiscuous mode [ 257.032032][ T5073] veth1_vlan: left promiscuous mode [ 257.037436][ T5073] veth0_vlan: left promiscuous mode [ 257.052008][T11251] xt_CT: No such helper "snmp_trap" [ 257.534960][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 257.582664][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 258.056951][T11259] nbd: must specify a device to reconfigure [ 258.109632][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.137966][ T5837] Bluetooth: hci4: command tx timeout [ 258.450499][T10951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.521894][T10976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.560569][T10951] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.592757][T10976] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.667320][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.674531][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.710989][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.718230][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.734925][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.742128][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.850536][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.857743][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.006864][T11271] sctp: [Deprecated]: syz.1.1061 (pid 11271) Use of int in max_burst socket option deprecated. [ 259.006864][T11271] Use struct sctp_assoc_value instead [ 259.046159][T10976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.073128][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 259.194680][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.264271][T11111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.329725][T11111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.380668][T11111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.453436][T11111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.466195][T11287] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 259.630285][T10951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.774757][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.844556][T10976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.870123][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 259.901839][T10951] veth0_vlan: entered promiscuous mode [ 259.921999][T11303] xfrm1: entered allmulticast mode [ 259.936632][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.960456][T11308] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 259.999711][T10951] veth1_vlan: entered promiscuous mode [ 260.054495][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.061719][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.155860][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.163093][ T5073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.217868][ T5837] Bluetooth: hci4: command tx timeout [ 260.329408][T10951] veth0_macvtap: entered promiscuous mode [ 260.360917][T10976] veth0_vlan: entered promiscuous mode [ 260.401880][T11111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.440023][T10951] veth1_macvtap: entered promiscuous mode [ 260.461780][T11325] veth1_macvtap: left promiscuous mode [ 260.467332][T11325] macsec0: entered promiscuous mode [ 260.478374][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'. [ 260.524190][T10976] veth1_vlan: entered promiscuous mode [ 260.546741][T11330] veth1_macvtap: entered promiscuous mode [ 260.571620][T11330] macsec0: left promiscuous mode [ 260.612908][T11333] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 260.674452][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.716241][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.744627][T10951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.809162][T10951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.880103][T10951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.927932][T10951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.936724][T10951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.004972][T10951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.016053][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1072'. [ 261.094933][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.192477][T10976] veth0_macvtap: entered promiscuous mode [ 261.257103][T10976] veth1_macvtap: entered promiscuous mode [ 261.377686][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.385599][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.420467][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.444083][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.455446][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.469045][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.480802][T10976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.550144][T10976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.563926][T10976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.612377][T10976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.634677][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.636185][T10976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.660825][T10976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.679644][T10976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.684309][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.707634][T10976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.021496][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.057160][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.070235][T11390] x_tables: unsorted entry at hook 3 [ 262.235511][ T5073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.255713][ T5073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.272590][T11111] veth0_vlan: entered promiscuous mode [ 262.342632][T11111] veth1_vlan: entered promiscuous mode [ 262.697115][ T5073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.886016][ T5073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.629431][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.656314][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.673932][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.691608][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.723492][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.741089][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.194555][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.235564][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.244478][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.258099][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.265828][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.280206][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.364718][T11442] block nbd3: not configured, cannot reconfigure [ 265.707099][ T5073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.756900][T11442] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 265.776657][T11442] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 265.828218][ T55] Bluetooth: hci0: command tx timeout [ 265.900007][ T5073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.954446][T11111] veth0_macvtap: entered promiscuous mode [ 266.025957][T11111] veth1_macvtap: entered promiscuous mode [ 266.091935][T11455] x_tables: unsorted underflow at hook 3 [ 266.098813][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 266.176802][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.205348][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.219147][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.236051][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.255040][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.275726][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.288148][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.299200][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.313026][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.324838][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.335544][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.347966][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.378488][ T55] Bluetooth: hci2: command tx timeout [ 266.431062][T11111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.450102][T11111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.461507][T11111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.470475][T11111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.486058][ T5073] bridge_slave_1: left allmulticast mode [ 266.492695][ T5073] bridge_slave_1: left promiscuous mode [ 266.501780][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.510862][ T5073] bridge_slave_0: left allmulticast mode [ 266.516735][ T5073] bridge_slave_0: left promiscuous mode [ 266.524387][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.572021][T11471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1092'. [ 266.913072][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.924885][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.936157][ T5073] bond0 (unregistering): Released all slaves [ 267.323766][T11428] chnl_net:caif_netlink_parms(): no params data found [ 267.359653][T11473] netlink: 'syz.3.1093': attribute type 3 has an invalid length. [ 267.380904][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.393292][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.447639][ T5073] hsr_slave_0: left promiscuous mode [ 267.453906][ T5073] hsr_slave_1: left promiscuous mode [ 267.461546][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.469633][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.477964][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.485698][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.510160][ T5073] veth1_macvtap: left promiscuous mode [ 267.515716][ T5073] veth0_macvtap: left promiscuous mode [ 267.521521][ T5073] veth1_vlan: left promiscuous mode [ 267.526827][ T5073] veth0_vlan: left promiscuous mode [ 267.897755][ T55] Bluetooth: hci0: command tx timeout [ 268.005097][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 268.061945][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 268.459927][ T55] Bluetooth: hci2: command tx timeout [ 268.526520][T11437] chnl_net:caif_netlink_parms(): no params data found [ 268.561127][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.569573][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.768047][T11488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1094'. [ 268.827698][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.847699][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.876362][T11428] bridge_slave_0: entered allmulticast mode [ 268.905115][T11428] bridge_slave_0: entered promiscuous mode [ 268.988029][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.995282][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.003499][T11428] bridge_slave_1: entered allmulticast mode [ 269.011883][T11428] bridge_slave_1: entered promiscuous mode [ 269.094322][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.104310][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.112057][T11437] bridge_slave_0: entered allmulticast mode [ 269.119822][T11437] bridge_slave_0: entered promiscuous mode [ 269.128210][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.135453][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.142830][T11437] bridge_slave_1: entered allmulticast mode [ 269.154278][T11437] bridge_slave_1: entered promiscuous mode [ 269.163926][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.259081][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.296816][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.311348][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.363029][T11428] team0: Port device team_slave_0 added [ 269.399335][T11428] team0: Port device team_slave_1 added [ 269.410234][T11437] team0: Port device team_slave_0 added [ 269.444951][T11437] team0: Port device team_slave_1 added [ 269.455963][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.463596][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.491563][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.505733][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.513262][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.541182][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.618728][ T5073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.640138][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.647240][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.674635][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.707041][ T5073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.736286][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.743428][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.769988][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.830719][ T5073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.851740][T11428] hsr_slave_0: entered promiscuous mode [ 269.858216][T11428] hsr_slave_1: entered promiscuous mode [ 269.926973][T11437] hsr_slave_0: entered promiscuous mode [ 269.935236][T11437] hsr_slave_1: entered promiscuous mode [ 269.946517][T11437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.954432][T11437] Cannot create hsr debugfs directory [ 269.980650][ T55] Bluetooth: hci0: command tx timeout [ 269.988522][ T5073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.202897][T11437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.280814][T11437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.335122][T11437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.396754][T11437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.475338][ T5073] bridge_slave_1: left allmulticast mode [ 270.481157][ T5073] bridge_slave_1: left promiscuous mode [ 270.486915][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.497298][ T5073] bridge_slave_0: left allmulticast mode [ 270.504794][ T5073] bridge_slave_0: left promiscuous mode [ 270.514587][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.531365][ T5073] bridge_slave_1: left allmulticast mode [ 270.537049][ T5073] bridge_slave_1: left promiscuous mode [ 270.542883][ T55] Bluetooth: hci2: command tx timeout [ 270.557919][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.596780][ T5073] bridge_slave_0: left allmulticast mode [ 270.617666][ T5073] bridge_slave_0: left promiscuous mode [ 270.623517][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.640618][T11504] Bluetooth: MGMT ver 1.23 [ 271.007826][T11515] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1103'. [ 271.017052][T11513] netlink: 1344 bytes leftover after parsing attributes in process `syz.3.1102'. [ 271.043264][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.048389][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.063676][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.076903][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.088915][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.108498][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.125175][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.737033][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.754798][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.766072][ T5073] bond0 (unregistering): Released all slaves [ 271.955848][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.972717][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.996193][ T5073] bond0 (unregistering): Released all slaves [ 272.057671][ T5837] Bluetooth: hci0: command tx timeout [ 272.302118][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 272.576215][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1109'. [ 272.617876][ T5837] Bluetooth: hci2: command tx timeout [ 272.819596][T11544] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 272.819604][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'. [ 272.820001][T11516] chnl_net:caif_netlink_parms(): no params data found [ 272.832529][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1110'. [ 272.876351][T11545] bridge2: entered promiscuous mode [ 272.882391][T11545] bridge2: entered allmulticast mode [ 272.896755][T11437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.911368][T11437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.956372][ T5073] hsr_slave_0: left promiscuous mode [ 272.962580][ T5073] hsr_slave_1: left promiscuous mode [ 272.971096][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.978724][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.986802][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.994455][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.008906][ T5073] hsr_slave_0: left promiscuous mode [ 273.015753][ T5073] hsr_slave_1: left promiscuous mode [ 273.038249][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.045780][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.054520][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.063413][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.110654][ T5073] veth1_macvtap: left promiscuous mode [ 273.122029][ T5073] veth0_macvtap: left promiscuous mode [ 273.127858][ T5073] veth1_vlan: left promiscuous mode [ 273.133249][ T5073] veth0_vlan: left promiscuous mode [ 273.143682][ T5073] veth1_macvtap: left promiscuous mode [ 273.154597][ T5073] veth0_macvtap: left promiscuous mode [ 273.163410][ T5073] veth1_vlan: left promiscuous mode [ 273.178122][ T5837] Bluetooth: hci4: command tx timeout [ 273.193844][ T5073] veth0_vlan: left promiscuous mode [ 273.253924][T11550] syz.1.1112 (11550) used greatest stack depth: 16368 bytes left [ 273.452833][T11562] Bluetooth: MGMT ver 1.23 [ 273.952992][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 274.002361][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 274.851844][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 274.908237][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 275.259412][ T5837] Bluetooth: hci4: command tx timeout [ 275.372309][T11437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.382621][T11437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.666779][T11516] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.677989][T11516] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.723394][T11516] bridge_slave_0: entered allmulticast mode [ 275.749297][T11516] bridge_slave_0: entered promiscuous mode [ 275.760323][T11428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.788322][T11581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 275.796239][T11516] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.805038][T11516] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.812568][T11516] bridge_slave_1: entered allmulticast mode [ 275.836648][T11516] bridge_slave_1: entered promiscuous mode [ 275.888138][T11428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.954150][T11516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.980002][T11428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.000977][T11516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.026579][T11428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.169263][T11516] team0: Port device team_slave_0 added [ 276.180787][T11593] netlink: 'syz.3.1122': attribute type 9 has an invalid length. [ 276.192075][T11516] team0: Port device team_slave_1 added [ 276.254479][T11516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.265574][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.304059][T11516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.317725][T11516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.324829][T11516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.362315][T11516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.459707][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.521769][T11516] hsr_slave_0: entered promiscuous mode [ 276.531861][T11516] hsr_slave_1: entered promiscuous mode [ 276.544274][T11516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.552124][T11516] Cannot create hsr debugfs directory [ 276.682143][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.722642][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.729853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.760818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.768123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.797825][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.867042][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.902675][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.909926][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.962087][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.969318][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.136226][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 277.158490][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.171912][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.270639][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.285556][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.351466][ T5837] Bluetooth: hci4: command tx timeout [ 277.369170][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.390636][T11516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.405155][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.432563][T11516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.458692][T11516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.467051][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.478763][T11516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.492920][T11628] netlink: 'syz.1.1131': attribute type 4 has an invalid length. [ 277.538163][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.557966][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.575569][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.594310][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.607993][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.636744][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.656566][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.665626][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.673792][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.769574][T11516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.796396][T11428] veth0_vlan: entered promiscuous mode [ 277.824066][T11516] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.880256][T11636] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20004 [ 277.898664][T11428] veth1_vlan: entered promiscuous mode [ 277.913177][T11437] veth0_vlan: entered promiscuous mode [ 277.954779][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.962047][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.974744][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.981977][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.023832][T11428] veth0_macvtap: entered promiscuous mode [ 278.035354][T11437] veth1_vlan: entered promiscuous mode [ 278.053979][T11428] veth1_macvtap: entered promiscuous mode [ 278.096627][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.117215][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.137136][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.184946][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.201190][T11437] veth0_macvtap: entered promiscuous mode [ 278.226841][T11428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.241714][T11428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.251102][T11428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.260044][T11428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.273240][T11437] veth1_macvtap: entered promiscuous mode [ 278.334743][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.371544][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.394722][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.413509][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.425933][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.483261][T11437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.500535][T11437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.519819][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.566264][T11437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.591027][T11437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.603431][T11437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.616444][T11437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.767598][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.775502][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.835210][T11516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.044810][T11670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.064535][T11670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.078768][T11670] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 279.100668][T11670] bond0 (unregistering): Released all slaves [ 279.144487][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.179142][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.242853][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.250940][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.304838][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.325825][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.418072][ T5837] Bluetooth: hci4: command tx timeout [ 279.515946][T11692] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 279.558561][T11692] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 279.578722][T11692] bridge0: port 3(team0) entered blocking state [ 279.593889][T11692] bridge0: port 3(team0) entered disabled state [ 279.609984][T11692] team0: entered allmulticast mode [ 279.615376][T11692] team_slave_0: entered allmulticast mode [ 279.633316][T11692] team_slave_1: entered allmulticast mode [ 279.643756][T11692] team0: left allmulticast mode [ 279.649032][T11692] team_slave_0: left allmulticast mode [ 279.654782][T11692] team_slave_1: left allmulticast mode [ 279.774015][T11516] veth0_vlan: entered promiscuous mode [ 279.796419][T11516] veth1_vlan: entered promiscuous mode [ 280.115069][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.314124][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.374830][T11516] veth0_macvtap: entered promiscuous mode [ 280.400672][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.421766][T11516] veth1_macvtap: entered promiscuous mode [ 280.440015][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.451831][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.462312][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.472918][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.483240][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.493776][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.504846][T11516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.517262][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.528450][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.539315][T11516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.550754][T11516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.562314][T11516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.580629][T11516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.591335][T11516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.600706][T11516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.609870][T11516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.681587][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.711709][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.723742][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.745121][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.760431][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.838813][ T12] bridge_slave_1: left allmulticast mode [ 280.845474][ T12] bridge_slave_1: left promiscuous mode [ 280.861882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.879117][ T12] bridge_slave_0: left allmulticast mode [ 280.884848][ T12] bridge_slave_0: left promiscuous mode [ 280.891531][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.236221][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.246395][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.267657][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.300978][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.335280][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.352218][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.408591][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.424249][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.434602][ T12] bond0 (unregistering): Released all slaves [ 281.770912][T11705] chnl_net:caif_netlink_parms(): no params data found [ 282.004541][ T12] hsr_slave_0: left promiscuous mode [ 282.014868][ T12] hsr_slave_1: left promiscuous mode [ 282.021095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.028665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.036634][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.044777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.069835][ T12] veth1_macvtap: left promiscuous mode [ 282.075446][ T12] veth0_macvtap: left promiscuous mode [ 282.081207][ T12] veth1_vlan: left promiscuous mode [ 282.086999][ T12] veth0_vlan: left promiscuous mode [ 282.209045][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.218556][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.232284][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.241582][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.250356][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.258731][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.619896][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.664543][ T12] team0 (unregistering): Port device team_slave_0 removed [ 283.240105][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.247337][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.258251][T11705] bridge_slave_0: entered allmulticast mode [ 283.265355][T11705] bridge_slave_0: entered promiscuous mode [ 283.308873][T11730] gtp1: entered promiscuous mode [ 283.314347][T11730] gtp1: entered allmulticast mode [ 283.388083][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.395274][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.417641][ T55] Bluetooth: hci0: command tx timeout [ 283.441734][T11705] bridge_slave_1: entered allmulticast mode [ 283.470744][T11738] __nla_validate_parse: 20 callbacks suppressed [ 283.470765][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 283.497971][T11705] bridge_slave_1: entered promiscuous mode [ 283.665087][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.693798][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.705187][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.718669][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.727854][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.735631][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.743953][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.762363][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.849601][T11705] team0: Port device team_slave_0 added [ 283.862538][T11705] team0: Port device team_slave_1 added [ 283.951495][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.965982][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.002199][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.078664][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.095975][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.143783][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.201189][T11717] chnl_net:caif_netlink_parms(): no params data found [ 284.301332][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.378291][ T5837] Bluetooth: hci2: command tx timeout [ 284.437965][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.482183][T11705] hsr_slave_0: entered promiscuous mode [ 284.493369][T11705] hsr_slave_1: entered promiscuous mode [ 284.564088][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.583246][T11760] tipc: Started in network mode [ 284.588677][T11760] tipc: Node identity 8a8c419832b2, cluster identity 4711 [ 284.596063][T11760] tipc: Enabled bearer , priority 0 [ 284.681025][T11761] syzkaller0: entered promiscuous mode [ 284.686581][T11761] syzkaller0: entered allmulticast mode [ 284.693085][T11761] tipc: Resetting bearer [ 284.704789][T11759] tipc: Resetting bearer [ 284.821320][T11767] netlink: 'syz.1.1160': attribute type 10 has an invalid length. [ 285.507656][ T5837] Bluetooth: hci0: command tx timeout [ 285.707846][ T5934] tipc: Node number set to 3091087768 [ 285.817829][ T5837] Bluetooth: hci4: command tx timeout [ 286.461446][ T5837] Bluetooth: hci2: command tx timeout [ 286.633361][T11759] tipc: Disabling bearer [ 286.686700][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.707318][T11767] vlan0: entered allmulticast mode [ 286.733524][T11767] [H: entered allmulticast mode [ 286.760198][T11767] team0: Port device vlan0 added [ 286.973714][T11717] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.983591][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.992162][T11717] bridge_slave_0: entered allmulticast mode [ 286.999538][T11717] bridge_slave_0: entered promiscuous mode [ 287.057887][T11717] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.068175][T11717] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.087763][T11717] bridge_slave_1: entered allmulticast mode [ 287.095116][T11717] bridge_slave_1: entered promiscuous mode [ 287.203669][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 287.213492][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1165'. [ 287.228600][T11717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.320336][T11717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.436059][T11791] netlink: 'syz.1.1167': attribute type 4 has an invalid length. [ 287.464612][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.487293][T11717] team0: Port device team_slave_0 added [ 287.508924][T11717] team0: Port device team_slave_1 added [ 287.555826][T11740] chnl_net:caif_netlink_parms(): no params data found [ 287.584103][ T5837] Bluetooth: hci0: command tx timeout [ 287.604453][T11791] netlink: 'syz.1.1167': attribute type 8 has an invalid length. [ 287.783217][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.867378][T11717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.884622][T11717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.897743][ T5837] Bluetooth: hci4: command tx timeout [ 287.929733][T11717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.080631][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.128617][T11717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.135634][T11717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.237818][T11717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.364395][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.497182][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.526399][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.537838][ T5837] Bluetooth: hci2: command tx timeout [ 288.544193][T11740] bridge_slave_0: entered allmulticast mode [ 288.557786][T11740] bridge_slave_0: entered promiscuous mode [ 288.578817][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.586084][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.593598][T11740] bridge_slave_1: entered allmulticast mode [ 288.600997][T11740] bridge_slave_1: entered promiscuous mode [ 288.616392][T11717] hsr_slave_0: entered promiscuous mode [ 288.631818][T11717] hsr_slave_1: entered promiscuous mode [ 288.638318][T11717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.646805][T11717] Cannot create hsr debugfs directory [ 288.729585][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.740847][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 288.771586][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.932111][T11740] team0: Port device team_slave_0 added [ 288.991750][T11740] team0: Port device team_slave_1 added [ 288.998354][ T12] bridge_slave_1: left allmulticast mode [ 289.010865][ T12] bridge_slave_1: left promiscuous mode [ 289.024931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.043654][ T12] bridge_slave_0: left allmulticast mode [ 289.050246][ T12] bridge_slave_0: left promiscuous mode [ 289.056069][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.073804][ T12] bridge_slave_1: left allmulticast mode [ 289.080213][ T12] bridge_slave_1: left promiscuous mode [ 289.085928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.094880][ T12] bridge_slave_0: left allmulticast mode [ 289.107601][ T12] bridge_slave_0: left promiscuous mode [ 289.113379][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.657759][ T5837] Bluetooth: hci0: command tx timeout [ 289.820944][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.833130][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.843429][ T12] bond0 (unregistering): Released all slaves [ 289.977747][ T5837] Bluetooth: hci4: command tx timeout [ 289.983863][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.000884][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.011916][ T12] bond0 (unregistering): Released all slaves [ 290.063263][T11828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1180'. [ 290.079790][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 290.106119][T11831] netlink: 'syz.3.1181': attribute type 7 has an invalid length. [ 290.137061][T11705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.172185][T11705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.255361][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.265064][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.328613][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.365360][T11705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.397188][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.405857][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.433262][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.466041][T11705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.627684][ T5837] Bluetooth: hci2: command tx timeout [ 290.730126][T11740] hsr_slave_0: entered promiscuous mode [ 290.736687][T11740] hsr_slave_1: entered promiscuous mode [ 290.760183][T11740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.776915][T11740] Cannot create hsr debugfs directory [ 291.042257][T11850] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 291.067992][T11850] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 291.110598][T11852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.147168][ T12] hsr_slave_0: left promiscuous mode [ 291.184288][ T12] hsr_slave_1: left promiscuous mode [ 291.197768][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.200702][T11855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.205660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.234133][T11856] netlink: 'syz.1.1189': attribute type 13 has an invalid length. [ 291.242196][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1189'. [ 291.253211][T11855] netlink: 'syz.3.1190': attribute type 2 has an invalid length. [ 291.253308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.277116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.317030][ T12] hsr_slave_0: left promiscuous mode [ 291.323408][ T12] hsr_slave_1: left promiscuous mode [ 291.331609][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.340546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.356227][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.365346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.402767][ T12] veth1_macvtap: left promiscuous mode [ 291.408769][ T12] veth0_macvtap: left promiscuous mode [ 291.414360][ T12] veth1_vlan: left promiscuous mode [ 291.419966][ T12] veth0_vlan: left promiscuous mode [ 291.426418][ T12] veth1_macvtap: left promiscuous mode [ 291.432119][ T12] veth0_macvtap: left promiscuous mode [ 291.437835][ T12] veth1_vlan: left promiscuous mode [ 291.443165][ T12] veth0_vlan: left promiscuous mode [ 292.029327][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.057712][ T5837] Bluetooth: hci4: command tx timeout [ 292.088644][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.936118][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.977453][ T12] team0 (unregistering): Port device team_slave_0 removed [ 293.683946][T11866] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1193'. [ 293.755278][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.764132][T11717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.861146][T11717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.878756][T11717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.920640][T11876] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 293.956381][T11717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.062869][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.164636][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.171864][ T5073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.272285][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.279482][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.311530][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 294.342944][T11705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.364568][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.444233][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 294.580473][T11717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.668558][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1201'. [ 294.703829][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 294.715725][T11740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.723534][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 294.741062][T11740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.763568][T11740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.816364][T11740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.881357][T11717] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.932550][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.939775][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.997460][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.004674][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.086962][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.137930][T11908] Bluetooth: MGMT ver 1.23 [ 295.178343][T11740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.196989][T11740] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.224466][T11910] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 295.230213][T11717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.233906][T11911] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 295.254143][T11717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.309114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.316352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.389826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.397016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.440228][T11920] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 295.445294][T11705] veth0_vlan: entered promiscuous mode [ 295.519650][T11705] veth1_vlan: entered promiscuous mode [ 295.588191][T11925] syzkaller1: tun_chr_ioctl cmd 15 [ 295.608893][T11925] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1209'. [ 295.651931][T11929] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 295.668835][T11705] veth0_macvtap: entered promiscuous mode [ 295.681147][T11705] veth1_macvtap: entered promiscuous mode [ 295.694732][T11925] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 295.704467][T11925] syzkaller1: Refused to change device type [ 295.715525][T11929] veth1_macvtap: left promiscuous mode [ 295.823526][T11705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.844480][T11705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.875949][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.910202][T11717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.932142][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.961756][T11705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.997963][T11705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.006751][T11705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.038255][T11705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.111446][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 296.133841][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.170929][T11717] veth0_vlan: entered promiscuous mode [ 296.216091][T11717] veth1_vlan: entered promiscuous mode [ 296.260312][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 296.270605][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.289275][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.335753][T11717] veth0_macvtap: entered promiscuous mode [ 296.357058][T11717] veth1_macvtap: entered promiscuous mode [ 296.365530][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.385597][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.438688][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.461613][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.478790][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.489642][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.501059][T11717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.540592][T11717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.577564][T11717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.598980][T11717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.637059][T11717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.668242][T11717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.677038][T11717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.695947][T11717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.856943][T11740] veth0_vlan: entered promiscuous mode [ 297.033898][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.066776][T11740] veth1_vlan: entered promiscuous mode [ 297.172241][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.260062][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.286015][T11740] veth0_macvtap: entered promiscuous mode [ 297.294615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.302953][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.319996][T11740] veth1_macvtap: entered promiscuous mode [ 297.342162][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.352114][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.399448][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.419971][T11740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.441659][T11740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.453220][T11740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.463972][T11740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.473944][T11740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.484541][T11740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.508485][T11740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.530447][T11740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.544674][T11740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.554677][T11740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.566644][T11740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.589251][T11740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.599553][T11740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.608835][T11740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.617852][T11740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.626549][T11740] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.749558][ T82] bridge_slave_1: left allmulticast mode [ 297.756273][ T82] bridge_slave_1: left promiscuous mode [ 297.762778][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.772187][ T82] bridge_slave_0: left allmulticast mode [ 297.778715][ T82] bridge_slave_0: left promiscuous mode [ 297.784454][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.334012][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.373632][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.383642][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.397268][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.413104][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.425323][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.456373][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.471718][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.483106][ T82] bond0 (unregistering): Released all slaves [ 298.542488][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.556255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.657397][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.669781][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.852760][ T82] hsr_slave_0: left promiscuous mode [ 298.863006][ T82] hsr_slave_1: left promiscuous mode [ 298.869115][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.876559][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.885450][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.893039][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.915363][ T82] veth1_macvtap: left promiscuous mode [ 298.921384][ T82] veth0_macvtap: left promiscuous mode [ 298.927023][ T82] veth1_vlan: left promiscuous mode [ 298.933391][ T82] veth0_vlan: left promiscuous mode [ 299.485486][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.501735][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.519480][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.533705][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.549417][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.569896][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.766163][ T82] team0 (unregistering): Port device team_slave_1 removed [ 299.813613][ T82] team0 (unregistering): Port device team_slave_0 removed [ 300.426264][T11970] chnl_net:caif_netlink_parms(): no params data found [ 300.468801][ T5837] Bluetooth: hci0: command tx timeout [ 300.597660][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.604818][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.626535][T11970] bridge_slave_0: entered allmulticast mode [ 300.635840][T11970] bridge_slave_0: entered promiscuous mode [ 300.651020][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.663690][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.671136][T11970] bridge_slave_1: entered allmulticast mode [ 300.679989][T11970] bridge_slave_1: entered promiscuous mode [ 300.738082][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 300.796484][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.838106][T11981] chnl_net:caif_netlink_parms(): no params data found [ 300.877360][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.000522][T11970] team0: Port device team_slave_0 added [ 301.177815][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.178099][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.210169][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.219423][T11970] team0: Port device team_slave_1 added [ 301.237695][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.247147][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.259893][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.274169][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.360818][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.389715][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.396747][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.425565][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.439762][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.446788][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.477105][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.554912][T12019] bond0: entered promiscuous mode [ 301.567584][T12019] bond0: entered allmulticast mode [ 301.574503][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.619396][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.657938][ T5837] Bluetooth: hci2: command tx timeout [ 301.731977][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.800146][T11970] hsr_slave_0: entered promiscuous mode [ 301.806492][T11970] hsr_slave_1: entered promiscuous mode [ 301.823655][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.841547][T11981] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.853468][T11981] bridge_slave_0: entered allmulticast mode [ 301.861890][T11981] bridge_slave_0: entered promiscuous mode [ 301.906313][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1231'. [ 301.915801][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.923531][T11981] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.931158][T11981] bridge_slave_1: entered allmulticast mode [ 301.940423][T11981] bridge_slave_1: entered promiscuous mode [ 302.035471][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.049114][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.251820][T11981] team0: Port device team_slave_0 added [ 302.262119][T11981] team0: Port device team_slave_1 added [ 302.339290][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.395360][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.412622][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.439264][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.510182][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.536938][T12049] Bluetooth: MGMT ver 1.23 [ 302.542317][ T5837] Bluetooth: hci0: command tx timeout [ 302.561908][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.585351][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.625304][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.701351][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.800275][T12014] chnl_net:caif_netlink_parms(): no params data found [ 302.848139][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 302.871004][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.899002][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 303.080849][T11981] hsr_slave_0: entered promiscuous mode [ 303.087158][T11981] hsr_slave_1: entered promiscuous mode [ 303.108242][T11981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.115908][T11981] Cannot create hsr debugfs directory [ 303.127943][T12058] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 303.214701][T12060] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 303.339577][ T5837] Bluetooth: hci4: command tx timeout [ 303.483374][ T82] bridge_slave_1: left allmulticast mode [ 303.496229][ T82] bridge_slave_1: left promiscuous mode [ 303.503425][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.538452][ T82] bridge_slave_0: left allmulticast mode [ 303.547508][ T82] bridge_slave_0: left promiscuous mode [ 303.553422][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.583138][ T82] bridge_slave_1: left allmulticast mode [ 303.589755][ T82] bridge_slave_1: left promiscuous mode [ 303.595509][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.605453][ T82] bridge_slave_0: left allmulticast mode [ 303.611770][ T82] bridge_slave_0: left promiscuous mode [ 303.618758][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.737770][ T5837] Bluetooth: hci2: command tx timeout [ 304.321680][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.333920][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.346029][ T82] bond0 (unregistering): Released all slaves [ 304.477140][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.488913][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.500093][ T82] bond0 (unregistering): Released all slaves [ 304.617685][ T5837] Bluetooth: hci0: command tx timeout [ 304.626380][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.637739][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.645051][T12014] bridge_slave_0: entered allmulticast mode [ 304.668761][T12014] bridge_slave_0: entered promiscuous mode [ 304.728227][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.753437][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.761484][T12014] bridge_slave_1: entered allmulticast mode [ 304.772377][T12014] bridge_slave_1: entered promiscuous mode [ 304.826862][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 304.836284][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 304.974055][T12014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.986501][T12081] netlink: 'syz.1.1243': attribute type 3 has an invalid length. [ 305.047418][T12014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.097887][T11970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 305.108372][T11970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 305.299051][T11970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.401910][T12014] team0: Port device team_slave_0 added [ 305.417714][ T5837] Bluetooth: hci4: command tx timeout [ 305.434244][T12014] team0: Port device team_slave_1 added [ 305.458103][T11970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.677022][T12014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.696647][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.734381][T12014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.744499][T12084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1244'. [ 305.749667][T12014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.761260][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.791910][T12014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.837550][ T5837] Bluetooth: hci2: command tx timeout [ 305.855558][ T82] hsr_slave_0: left promiscuous mode [ 305.864167][ T82] hsr_slave_1: left promiscuous mode [ 305.878237][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.885882][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.904022][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.933506][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.990094][ T82] hsr_slave_0: left promiscuous mode [ 306.016955][ T82] hsr_slave_1: left promiscuous mode [ 306.017038][T12110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1251'. [ 306.039058][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.046902][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.065378][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.071859][T12112] SET target dimension over the limit! [ 306.077783][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.119238][ T82] veth1_macvtap: left promiscuous mode [ 306.124855][ T82] veth0_macvtap: left promiscuous mode [ 306.130923][ T82] veth1_vlan: left promiscuous mode [ 306.138524][ T82] veth0_vlan: left promiscuous mode [ 306.145209][ T82] veth1_macvtap: left promiscuous mode [ 306.150954][ T82] veth0_macvtap: left promiscuous mode [ 306.157298][ T82] veth1_vlan: left promiscuous mode [ 306.162907][ T82] veth0_vlan: left promiscuous mode [ 306.703640][ T5837] Bluetooth: hci0: command tx timeout [ 306.759167][ T82] team0 (unregistering): Port device team_slave_1 removed [ 306.813800][ T82] team0 (unregistering): Port device team_slave_0 removed [ 307.344331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.498044][ T5837] Bluetooth: hci4: command tx timeout [ 307.686715][ T82] team0 (unregistering): Port device team_slave_1 removed [ 307.731112][ T82] team0 (unregistering): Port device team_slave_0 removed [ 307.898594][ T5837] Bluetooth: hci2: command tx timeout [ 308.403137][T12014] hsr_slave_0: entered promiscuous mode [ 308.431006][T12014] hsr_slave_1: entered promiscuous mode [ 308.437327][T12014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.454966][T12014] Cannot create hsr debugfs directory [ 308.595993][T11981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.641422][T11981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.805574][T11981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.826402][T11981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.936582][T12129] netlink: 'syz.3.1256': attribute type 5 has an invalid length. [ 308.995712][T12131] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 309.046608][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.081435][T12132] netlink: 'syz.1.1257': attribute type 4 has an invalid length. [ 309.216460][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.324858][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.332271][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.388369][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.395602][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.479928][T12150] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 309.489673][T12150] team0: Device ipvlan5 is already an upper device of the team interface [ 309.578166][ T5837] Bluetooth: hci4: command tx timeout [ 309.614972][T11970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.666174][T11981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.854734][T11981] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.938857][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.946148][ T5073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.016598][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.023919][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.107311][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.139324][T12014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.178917][T12014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.203390][T12014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.223505][T12174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 310.252059][T12174] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 310.266933][T11970] veth0_vlan: entered promiscuous mode [ 310.299147][T12014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.353807][T11970] veth1_vlan: entered promiscuous mode [ 310.482540][T11970] veth0_macvtap: entered promiscuous mode [ 310.519856][T11970] veth1_macvtap: entered promiscuous mode [ 310.568902][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.586096][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.598770][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'. [ 310.616345][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.636984][T12190] netem: incorrect gi model size [ 310.643508][T12190] netem: change failed [ 310.682020][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.697045][T12190] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 310.700601][T11970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.724511][T11970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.734873][T12190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1271'. [ 310.744793][T11970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.757543][T11970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.784626][T12197] netlink: 'syz.1.1272': attribute type 4 has an invalid length. [ 310.814667][T12196] netlink: 'syz.1.1272': attribute type 4 has an invalid length. [ 310.864011][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.931469][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 310.943261][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 310.995502][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.026944][T11981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.050362][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.057610][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.089351][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.096537][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.172156][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.186152][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.238431][T11981] veth0_vlan: entered promiscuous mode [ 311.312589][T11981] veth1_vlan: entered promiscuous mode [ 311.344968][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.358831][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.442424][T11981] veth0_macvtap: entered promiscuous mode [ 311.488959][T11981] veth1_macvtap: entered promiscuous mode [ 311.512405][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.545837][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.557633][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.568489][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.593310][T11981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.609556][T11981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.627592][T11981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.649080][T11981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.724627][T11981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.744446][T11981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.764562][T11981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.774171][T11981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.961426][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.036258][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.094227][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.204589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.232365][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.289348][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.325776][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.343378][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.475224][T12014] veth0_vlan: entered promiscuous mode [ 312.533614][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.550121][T12014] veth1_vlan: entered promiscuous mode [ 312.587443][T12014] veth0_macvtap: entered promiscuous mode [ 312.596071][T12014] veth1_macvtap: entered promiscuous mode [ 312.615366][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.626632][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.638245][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.649154][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.659170][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.670184][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.682078][T12014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.695396][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.706387][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.716557][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.727298][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.740333][T12014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.754538][T12014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.764688][T12014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.777258][T12014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.798972][T12014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.938082][ T67] bridge_slave_1: left allmulticast mode [ 312.943802][ T67] bridge_slave_1: left promiscuous mode [ 312.957802][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.967278][ T67] bridge_slave_0: left allmulticast mode [ 312.974224][ T67] bridge_slave_0: left promiscuous mode [ 312.982605][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.368686][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.378944][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.390390][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.400592][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.426573][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.448055][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.555831][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.566591][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.576753][ T67] bond0 (unregistering): Released all slaves [ 313.618665][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.627181][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.710976][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.720302][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.071224][ T67] hsr_slave_0: left promiscuous mode [ 314.080610][ T67] hsr_slave_1: left promiscuous mode [ 314.088450][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.096008][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.104654][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.112605][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.154085][ T67] veth1_macvtap: left promiscuous mode [ 314.166910][ T67] veth0_macvtap: left promiscuous mode [ 314.171594][T12245] netlink: 'syz.1.1279': attribute type 4 has an invalid length. [ 314.173692][ T67] veth1_vlan: left promiscuous mode [ 314.194382][ T67] veth0_vlan: left promiscuous mode [ 314.495620][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.507544][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.516468][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.539403][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.554338][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.563472][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.926630][ T67] team0 (unregistering): Port device team_slave_1 removed [ 314.973104][ T67] team0 (unregistering): Port device team_slave_0 removed [ 315.497844][T12233] chnl_net:caif_netlink_parms(): no params data found [ 315.502460][ T55] Bluetooth: hci0: command tx timeout [ 315.758559][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.765807][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.773718][T12233] bridge_slave_0: entered allmulticast mode [ 315.782766][T12233] bridge_slave_0: entered promiscuous mode [ 315.793562][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.801017][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.808541][T12233] bridge_slave_1: entered allmulticast mode [ 315.815775][T12233] bridge_slave_1: entered promiscuous mode [ 315.852328][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.865040][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.894528][T12247] chnl_net:caif_netlink_parms(): no params data found [ 315.933386][T12233] team0: Port device team_slave_0 added [ 315.954798][T12233] team0: Port device team_slave_1 added [ 315.992430][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.007017][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.096647][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.125926][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.143652][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.180168][T12263] xt_ecn: cannot match TCP bits for non-tcp packets [ 316.199581][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.293953][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.345179][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.356171][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.365797][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.374946][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.386721][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 316.396677][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.522491][T12269] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 316.549693][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.570897][T12247] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.578547][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.585842][T12247] bridge_slave_0: entered allmulticast mode [ 316.593319][T12247] bridge_slave_0: entered promiscuous mode [ 316.622200][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 316.634514][T12233] hsr_slave_0: entered promiscuous mode [ 316.642138][T12233] hsr_slave_1: entered promiscuous mode [ 316.650011][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'. [ 316.677942][T12247] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.685191][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.698811][ T55] Bluetooth: hci2: command tx timeout [ 316.707875][T12247] bridge_slave_1: entered allmulticast mode [ 316.715200][T12247] bridge_slave_1: entered promiscuous mode [ 316.775414][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.893491][T12281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 316.918486][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.970794][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.050036][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.161907][T12247] team0: Port device team_slave_0 added [ 317.189354][T12247] team0: Port device team_slave_1 added [ 317.309181][T12293] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1291'. [ 317.360070][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.367104][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.397173][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.410745][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.419100][T12297] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1291'. [ 317.434780][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.468395][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.593923][ T55] Bluetooth: hci0: command tx timeout [ 317.612863][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.700266][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1293'. [ 317.755546][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.895651][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.991921][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.017080][T12247] hsr_slave_0: entered promiscuous mode [ 318.027299][T12247] hsr_slave_1: entered promiscuous mode [ 318.034115][T12247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.041976][T12247] Cannot create hsr debugfs directory [ 318.047938][T12266] chnl_net:caif_netlink_parms(): no params data found [ 318.393254][T12266] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.406318][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.415486][T12266] bridge_slave_0: entered allmulticast mode [ 318.427333][T12266] bridge_slave_0: entered promiscuous mode [ 318.444819][ T67] bridge_slave_1: left allmulticast mode [ 318.454230][ T67] bridge_slave_1: left promiscuous mode [ 318.460509][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.467757][ T55] Bluetooth: hci4: command tx timeout [ 318.475964][ T67] bridge_slave_0: left allmulticast mode [ 318.482331][ T67] bridge_slave_0: left promiscuous mode [ 318.488313][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.512436][ T67] bridge_slave_1: left allmulticast mode [ 318.521616][ T67] bridge_slave_1: left promiscuous mode [ 318.538691][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.559066][ T67] bridge_slave_0: left allmulticast mode [ 318.564792][ T67] bridge_slave_0: left promiscuous mode [ 318.579870][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.780935][ T55] Bluetooth: hci2: command tx timeout [ 319.344363][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 319.423355][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.435622][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.445950][ T67] bond0 (unregistering): Released all slaves [ 319.590343][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.602078][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.613811][ T67] bond0 (unregistering): Released all slaves [ 319.647108][T12266] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.655508][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.665024][ T55] Bluetooth: hci0: command tx timeout [ 319.671140][T12266] bridge_slave_1: entered allmulticast mode [ 319.678456][T12266] bridge_slave_1: entered promiscuous mode [ 319.945769][T12233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.000601][T12266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.021330][T12266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.062493][T12233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.195119][T12233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.237187][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 320.289841][T12266] team0: Port device team_slave_0 added [ 320.298920][T12233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.335799][T12362] bridge_slave_1: left allmulticast mode [ 320.341881][T12362] bridge_slave_1: left promiscuous mode [ 320.348105][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.362054][T12362] bond0: (slave bond_slave_0): Releasing backup interface [ 320.391449][T12362] bond0: (slave bond_slave_1): Releasing backup interface [ 320.435244][T12362] team0: Port device team_slave_0 removed [ 320.448923][T12362] team0: Port device team_slave_1 removed [ 320.465975][T12362] bond0: (slave batadv_slave_0): Releasing backup interface [ 320.478756][T12362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.498060][T12362] team0: Port device vlan0 removed [ 320.524195][T12362] team0: Port device geneve0 removed [ 320.537875][ T55] Bluetooth: hci4: command tx timeout [ 320.610933][T12266] team0: Port device team_slave_1 added [ 320.790586][T12376] delete_channel: no stack [ 320.829842][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 320.848583][T12266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.855850][T12377] delete_channel: no stack [ 320.865399][ T55] Bluetooth: hci2: command tx timeout [ 320.866226][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.872866][T12377] delete_channel: no stack [ 320.903035][T12377] delete_channel: no stack [ 320.913778][T12377] delete_channel: no stack [ 320.918439][T12377] delete_channel: no stack [ 320.923064][T12377] delete_channel: no stack [ 320.925187][T12266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.927751][T12377] delete_channel: no stack [ 320.927884][T12377] delete_channel: no stack [ 320.928029][T12377] delete_channel: no stack [ 320.952423][T12377] delete_channel: no stack [ 320.957018][T12377] delete_channel: no stack [ 320.961723][T12377] delete_channel: no stack [ 320.966339][T12377] delete_channel: no stack [ 320.973644][T12377] delete_channel: no stack [ 320.992121][T12377] delete_channel: no stack [ 320.996727][T12377] delete_channel: no stack [ 321.008617][T12377] delete_channel: no stack [ 321.013349][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1313'. [ 321.018663][T12377] delete_channel: no stack [ 321.026856][T12377] delete_channel: no stack [ 321.031845][T12377] delete_channel: no stack [ 321.036508][T12377] delete_channel: no stack [ 321.041212][T12377] delete_channel: no stack [ 321.041915][T12266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.045899][T12377] delete_channel: no stack [ 321.063210][T12266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.067781][T12377] delete_channel: no stack [ 321.098493][T12266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.107724][T12377] delete_channel: no stack [ 321.113674][T12377] delete_channel: no stack [ 321.146187][T12377] delete_channel: no stack [ 321.157889][T12377] delete_channel: no stack [ 321.172786][T12377] delete_channel: no stack [ 321.177458][T12377] delete_channel: no stack [ 321.202200][T12377] delete_channel: no stack [ 321.208504][T12377] delete_channel: no stack [ 321.214236][ T67] hsr_slave_0: left promiscuous mode [ 321.224035][ T67] hsr_slave_1: left promiscuous mode [ 321.230812][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.238553][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.247104][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.255932][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.272731][ T67] hsr_slave_0: left promiscuous mode [ 321.278813][ T67] hsr_slave_1: left promiscuous mode [ 321.284718][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.296900][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.306993][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.314628][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.351534][ T67] veth1_macvtap: left promiscuous mode [ 321.358353][ T67] veth0_macvtap: left promiscuous mode [ 321.364357][ T67] veth1_vlan: left promiscuous mode [ 321.369798][ T67] veth0_vlan: left promiscuous mode [ 321.380134][ T67] veth1_macvtap: left promiscuous mode [ 321.385717][ T67] veth0_macvtap: left promiscuous mode [ 321.397238][ T67] veth1_vlan: left promiscuous mode [ 321.405279][ T67] veth0_vlan: left promiscuous mode [ 321.489553][T12388] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 321.747910][ T55] Bluetooth: hci0: command tx timeout [ 322.011889][ T67] team0 (unregistering): Port device team_slave_1 removed [ 322.066112][ T67] team0 (unregistering): Port device team_slave_0 removed [ 322.618295][ T55] Bluetooth: hci4: command tx timeout [ 322.937791][ T55] Bluetooth: hci2: command tx timeout [ 322.944364][ T67] team0 (unregistering): Port device team_slave_1 removed [ 323.004048][ T67] team0 (unregistering): Port device team_slave_0 removed [ 323.553839][T12266] hsr_slave_0: entered promiscuous mode [ 323.569323][T12266] hsr_slave_1: entered promiscuous mode [ 323.576438][T12266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.607599][T12266] Cannot create hsr debugfs directory [ 323.806428][T12247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.825788][T12247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.866278][T12247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.936963][T12247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.055869][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.147384][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.190508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.197732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.223262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.230503][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.278426][T12407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1322'. [ 324.292813][T12407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1322'. [ 324.425667][T12233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.474713][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.591943][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.612838][T12399] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 324.660997][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.668300][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.679931][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.687196][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.699886][ T55] Bluetooth: hci4: command tx timeout [ 324.710462][T12266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.761093][T12266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.785500][T12266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.823781][T12266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.889656][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.995323][T12233] veth0_vlan: entered promiscuous mode [ 325.046569][T12233] veth1_vlan: entered promiscuous mode [ 325.159389][T12233] veth0_macvtap: entered promiscuous mode [ 325.181819][T12266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.202273][T12233] veth1_macvtap: entered promiscuous mode [ 325.240960][T12266] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.284649][T12233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.296118][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.307947][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.323154][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.344409][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.351618][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.361406][T12233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.374510][T12233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.384170][T12233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.395389][T12233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.424018][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.431230][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.474895][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.620274][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.646557][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.672629][T12247] veth0_vlan: entered promiscuous mode [ 325.730150][ T5073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.742513][T12247] veth1_vlan: entered promiscuous mode [ 325.758664][ T5073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.850325][T12247] veth0_macvtap: entered promiscuous mode [ 325.880281][T12247] veth1_macvtap: entered promiscuous mode [ 325.948635][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.984752][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.995363][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.006189][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.068838][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.079421][T12456] netlink: 'syz.3.1332': attribute type 4 has an invalid length. [ 326.129707][T12453] netlink: 'syz.3.1332': attribute type 4 has an invalid length. [ 326.156105][T12266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.220138][T12247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.257664][T12247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.289002][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.347077][T12247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.374361][T12247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.392490][T12247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.402912][T12247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.586066][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.722291][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.823597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.824502][T12266] veth0_vlan: entered promiscuous mode [ 326.845905][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.864320][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.908883][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.917719][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.931595][T12266] veth1_vlan: entered promiscuous mode [ 327.024478][T12266] veth0_macvtap: entered promiscuous mode [ 327.060962][T12266] veth1_macvtap: entered promiscuous mode [ 327.111285][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.168921][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.187019][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.197012][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.208910][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.218843][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.229591][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.240832][T12266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.253063][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.263937][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.274369][T12266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.285085][T12266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.296404][T12266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.315358][T12266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.324372][T12266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.333866][T12266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.343639][T12266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.421706][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.438353][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.464695][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.519856][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.639766][T12475] veth0_to_team: entered promiscuous mode [ 327.648165][T12475] veth0_to_team: entered allmulticast mode [ 327.710941][ T1146] bridge_slave_1: left allmulticast mode [ 327.729269][ T1146] bridge_slave_1: left promiscuous mode [ 327.759740][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.814206][ T1146] bridge_slave_0: left allmulticast mode [ 327.847686][ T1146] bridge_slave_0: left promiscuous mode [ 327.853530][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.152116][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.162184][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.172093][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.191140][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.208532][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.216831][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.485624][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.496595][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.506853][ T1146] bond0 (unregistering): Released all slaves [ 328.781263][T12483] chnl_net:caif_netlink_parms(): no params data found [ 328.854381][ T1146] hsr_slave_0: left promiscuous mode [ 328.864887][ T1146] hsr_slave_1: left promiscuous mode [ 328.872056][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.879662][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.889052][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.896516][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.943080][ T1146] veth1_macvtap: left promiscuous mode [ 328.958718][ T1146] veth0_macvtap: left promiscuous mode [ 328.964405][ T1146] veth1_vlan: left promiscuous mode [ 328.978578][ T1146] veth0_vlan: left promiscuous mode [ 329.536618][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.548688][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.566217][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.578735][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.594057][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 329.602642][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.816720][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 329.868722][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 330.307985][ T5837] Bluetooth: hci0: command tx timeout [ 330.344232][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.352121][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.359848][T12483] bridge_slave_0: entered allmulticast mode [ 330.367121][T12483] bridge_slave_0: entered promiscuous mode [ 330.399781][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.406931][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.420403][T12483] bridge_slave_1: entered allmulticast mode [ 330.427263][T12483] bridge_slave_1: entered promiscuous mode [ 330.480157][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.501999][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.565794][T12483] team0: Port device team_slave_0 added [ 330.606828][T12483] team0: Port device team_slave_1 added [ 330.662963][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.671241][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.699849][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.712495][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.723595][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.806349][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.845861][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 330.875740][T12510] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1338'. [ 330.992954][T12483] hsr_slave_0: entered promiscuous mode [ 331.008373][T12483] hsr_slave_1: entered promiscuous mode [ 331.296145][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.313651][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.322609][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.331299][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.350368][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.362534][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.391252][ T1146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.450864][T12501] chnl_net:caif_netlink_parms(): no params data found [ 331.535995][ T1146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.642112][ T1146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.658962][ T5837] Bluetooth: hci2: command tx timeout [ 331.774226][T12541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 331.839388][ T1146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.951002][T12547] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 332.049170][T12553] netlink: 'syz.1.1348': attribute type 4 has an invalid length. [ 332.085131][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.093553][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.122527][T12501] bridge_slave_0: entered allmulticast mode [ 332.141750][T12501] bridge_slave_0: entered promiscuous mode [ 332.158182][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.166406][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.176789][T12501] bridge_slave_1: entered allmulticast mode [ 332.202324][T12501] bridge_slave_1: entered promiscuous mode [ 332.338430][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.387262][ T5837] Bluetooth: hci0: command tx timeout [ 332.399904][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.405419][T12563] ipt_rpfilter: unknown options [ 332.457400][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.566935][T12501] team0: Port device team_slave_0 added [ 332.663864][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.690094][T12501] team0: Port device team_slave_1 added [ 332.732986][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 332.799922][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.880671][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.928444][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.955239][ C0] ================================================================== [ 332.955255][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x464/0x4a0 [ 332.955289][ C0] Read of size 2 at addr ffff888021bc1c2a by task syz-executor/12501 [ 332.955302][ C0] [ 332.955316][ C0] CPU: 0 UID: 0 PID: 12501 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 332.955333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 332.955346][ C0] Call Trace: [ 332.955351][ C0] [ 332.955357][ C0] dump_stack_lvl+0x241/0x360 [ 332.955376][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.955392][ C0] ? __pfx__printk+0x10/0x10 [ 332.955407][ C0] ? _printk+0xd5/0x120 [ 332.955419][ C0] ? __virt_addr_valid+0x183/0x530 [ 332.955443][ C0] ? __virt_addr_valid+0x183/0x530 [ 332.955468][ C0] print_report+0x169/0x550 [ 332.955486][ C0] ? __virt_addr_valid+0x183/0x530 [ 332.955509][ C0] ? __virt_addr_valid+0x183/0x530 [ 332.955531][ C0] ? __virt_addr_valid+0x45f/0x530 [ 332.955554][ C0] ? __phys_addr+0xba/0x170 [ 332.955577][ C0] ? rose_timer_expiry+0x464/0x4a0 [ 332.955591][ C0] kasan_report+0x143/0x180 [ 332.955609][ C0] ? rose_timer_expiry+0x464/0x4a0 [ 332.955627][ C0] rose_timer_expiry+0x464/0x4a0 [ 332.955642][ C0] call_timer_fn+0x187/0x650 [ 332.955665][ C0] ? call_timer_fn+0xc0/0x650 [ 332.955687][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.955701][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 332.955725][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.955740][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.955754][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.955768][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.955782][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 332.955798][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.955813][ C0] __run_timer_base+0x66a/0x8e0 [ 332.955838][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 332.955861][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.955883][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.955904][ C0] run_timer_softirq+0xb7/0x170 [ 332.955925][ C0] handle_softirqs+0x2d4/0x9b0 [ 332.955945][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 332.955962][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 332.955980][ C0] ? irqtime_account_irq+0xd1/0x1d0 [ 332.956005][ C0] __irq_exit_rcu+0xf7/0x220 [ 332.956029][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 332.956048][ C0] irq_exit_rcu+0x9/0x30 [ 332.956063][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.956079][ C0] [ 332.956084][ C0] [ 332.956089][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.956111][ C0] RIP: 0010:console_flush_all+0x996/0xeb0 [ 332.956134][ C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 56 eb 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 47 eb 20 00 eb 06 e8 40 eb 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 76 28 88 00 4c 8b [ 332.956147][ C0] RSP: 0018:ffffc90003ba6900 EFLAGS: 00000293 [ 332.956164][ C0] RAX: ffffffff81a0cc20 RBX: ffffffff8f38bbf8 RCX: ffff888031473c00 [ 332.956175][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.956184][ C0] RBP: ffffc90003ba6ab0 R08: ffffffff81a0cbf7 R09: 1ffffffff28a8908 [ 332.956195][ C0] R10: dffffc0000000000 R11: fffffbfff28a8909 R12: ffffffff8f38bba0 [ 332.956206][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc90003ba6b00 [ 332.956220][ C0] ? console_flush_all+0x967/0xeb0 [ 332.956237][ C0] ? console_flush_all+0x990/0xeb0 [ 332.956261][ C0] ? console_flush_all+0x1a3/0xeb0 [ 332.956281][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 332.956302][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.956325][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.956348][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 332.956370][ C0] console_unlock+0x14f/0x3b0 [ 332.956387][ C0] ? __pfx_console_unlock+0x10/0x10 [ 332.956406][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 332.956428][ C0] vprintk_emit+0x730/0xa10 [ 332.956445][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 332.956469][ C0] _printk+0xd5/0x120 [ 332.956481][ C0] ? batadv_hardif_enable_interface+0x566/0x9f0 [ 332.956498][ C0] ? __pfx__printk+0x10/0x10 [ 332.956512][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.956534][ C0] batadv_hardif_enable_interface+0x7d0/0x9f0 [ 332.956554][ C0] batadv_softif_slave_add+0x79/0x100 [ 332.956574][ C0] do_setlink+0xe7f/0x4300 [ 332.956597][ C0] ? mark_lock+0x9a/0x360 [ 332.956611][ C0] ? __pfx_do_setlink+0x10/0x10 [ 332.956626][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.956649][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.956674][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 332.956688][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 332.956705][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.956719][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.956736][ C0] ? rcu_is_watching+0x15/0xb0 [ 332.956754][ C0] ? __mutex_lock+0xba3/0x1010 [ 332.956772][ C0] ? __mutex_lock+0x602/0x1010 [ 332.956791][ C0] ? rtnl_newlink+0xc55/0x1d30 [ 332.956806][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 332.956827][ C0] ? ns_capable+0x8a/0xf0 [ 332.956844][ C0] ? rtnl_link_get_net_capable+0x168/0x340 [ 332.956863][ C0] rtnl_newlink+0x1704/0x1d30 [ 332.956882][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.956897][ C0] ? __pfx_validate_chain+0x10/0x10 [ 332.956920][ C0] ? validate_chain+0x11e/0x5920 [ 332.956935][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 332.956957][ C0] ? __pfx_lock_release+0x10/0x10 [ 332.956980][ C0] ? __pfx_validate_chain+0x10/0x10 [ 332.956996][ C0] ? mark_lock+0x9a/0x360 [ 332.957015][ C0] ? __lock_acquire+0x1397/0x2100 [ 332.957049][ C0] ? __pfx_lock_release+0x10/0x10 [ 332.957076][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.957091][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.957105][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 332.957120][ C0] ? __lock_acquire+0x1397/0x2100 [ 332.957142][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.957163][ C0] netlink_rcv_skb+0x206/0x480 [ 332.957185][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.957201][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.957232][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.957255][ C0] netlink_unicast+0x7f6/0x990 [ 332.957279][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 332.957298][ C0] ? __virt_addr_valid+0x45f/0x530 [ 332.957322][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 332.957344][ C0] ? __check_object_size+0x47a/0x730 [ 332.957365][ C0] netlink_sendmsg+0x8de/0xcb0 [ 332.957395][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.957430][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 332.957466][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.957496][ C0] __sock_sendmsg+0x221/0x270 [ 332.957520][ C0] __sys_sendto+0x363/0x4c0 [ 332.957548][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 332.957586][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.957617][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.957648][ C0] __x64_sys_sendto+0xde/0x100 [ 332.957676][ C0] do_syscall_64+0xf3/0x230 [ 332.957700][ C0] ? clear_bhb_loop+0x35/0x90 [ 332.957730][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.957758][ C0] RIP: 0033:0x7fa82178ec7c [ 332.957782][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 332.957801][ C0] RSP: 002b:00007ffd89cff980 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.957822][ C0] RAX: ffffffffffffffda RBX: 00007fa8224d4620 RCX: 00007fa82178ec7c [ 332.957837][ C0] RDX: 0000000000000028 RSI: 00007fa8224d4670 RDI: 0000000000000003 [ 332.957851][ C0] RBP: 0000000000000000 R08: 00007ffd89cff9d4 R09: 000000000000000c [ 332.957864][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 332.957876][ C0] R13: 0000000000000000 R14: 00007fa8224d4670 R15: 0000000000000000 [ 332.957898][ C0] [ 332.957906][ C0] [ 332.957912][ C0] Allocated by task 12247: [ 332.957922][ C0] kasan_save_track+0x3f/0x80 [ 332.957939][ C0] __kasan_kmalloc+0x98/0xb0 [ 332.957956][ C0] __kmalloc_noprof+0x285/0x4c0 [ 332.957978][ C0] fib6_info_alloc+0x2e/0xf0 [ 332.957996][ C0] ip6_route_info_create+0x445/0x12b0 [ 332.958026][ C0] ip6_route_add+0x28/0x160 [ 332.958046][ C0] addrconf_add_dev+0x35b/0x540 [ 332.958066][ C0] inet6_addr_add+0x1ee/0xe30 [ 332.958082][ C0] inet6_rtm_newaddr+0xa89/0xf10 [ 332.958105][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.958120][ C0] netlink_rcv_skb+0x206/0x480 [ 332.958146][ C0] netlink_unicast+0x7f6/0x990 [ 332.958170][ C0] netlink_sendmsg+0x8de/0xcb0 [ 332.958196][ C0] __sock_sendmsg+0x221/0x270 [ 332.958211][ C0] __sys_sendto+0x363/0x4c0 [ 332.958230][ C0] __x64_sys_sendto+0xde/0x100 [ 332.958249][ C0] do_syscall_64+0xf3/0x230 [ 332.958270][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.958293][ C0] [ 332.958297][ C0] Freed by task 16: [ 332.958305][ C0] kasan_save_track+0x3f/0x80 [ 332.958321][ C0] kasan_save_free_info+0x40/0x50 [ 332.958343][ C0] __kasan_slab_free+0x59/0x70 [ 332.958360][ C0] kfree+0x196/0x430 [ 332.958377][ C0] rcu_core+0xaaa/0x17a0 [ 332.958391][ C0] handle_softirqs+0x2d4/0x9b0 [ 332.958407][ C0] run_ksoftirqd+0xca/0x130 [ 332.958425][ C0] smpboot_thread_fn+0x544/0xa30 [ 332.958444][ C0] kthread+0x7a9/0x920 [ 332.958468][ C0] ret_from_fork+0x4b/0x80 [ 332.958490][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.958509][ C0] [ 332.958515][ C0] Last potentially related work creation: [ 332.958522][ C0] kasan_save_stack+0x3f/0x60 [ 332.958538][ C0] kasan_record_aux_stack+0xaa/0xc0 [ 332.958561][ C0] call_rcu+0x168/0xac0 [ 332.958577][ C0] ip6_route_info_create+0xa33/0x12b0 [ 332.958598][ C0] ip6_route_add+0x28/0x160 [ 332.958618][ C0] addrconf_add_dev+0x35b/0x540 [ 332.958638][ C0] inet6_addr_add+0x1ee/0xe30 [ 332.958656][ C0] inet6_rtm_newaddr+0xa89/0xf10 [ 332.958681][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.958698][ C0] netlink_rcv_skb+0x206/0x480 [ 332.958724][ C0] netlink_unicast+0x7f6/0x990 [ 332.958747][ C0] netlink_sendmsg+0x8de/0xcb0 [ 332.958774][ C0] __sock_sendmsg+0x221/0x270 [ 332.958792][ C0] __sys_sendto+0x363/0x4c0 [ 332.958816][ C0] __x64_sys_sendto+0xde/0x100 [ 332.958839][ C0] do_syscall_64+0xf3/0x230 [ 332.958861][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.958886][ C0] [ 332.958892][ C0] The buggy address belongs to the object at ffff888021bc1c00 [ 332.958892][ C0] which belongs to the cache kmalloc-512 of size 512 [ 332.958910][ C0] The buggy address is located 42 bytes inside of [ 332.958910][ C0] freed 512-byte region [ffff888021bc1c00, ffff888021bc1e00) [ 332.958932][ C0] [ 332.958937][ C0] The buggy address belongs to the physical page: [ 332.958957][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021bc0400 pfn:0x21bc0 [ 332.958977][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.958994][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 332.959026][ C0] page_type: f5(slab) [ 332.959046][ C0] raw: 00fff00000000240 ffff88801b041c80 ffffea0000ec7710 ffffea000070f910 [ 332.959065][ C0] raw: ffff888021bc0400 000000000010000f 00000000f5000000 0000000000000000 [ 332.959084][ C0] head: 00fff00000000240 ffff88801b041c80 ffffea0000ec7710 ffffea000070f910 [ 332.959101][ C0] head: ffff888021bc0400 000000000010000f 00000000f5000000 0000000000000000 [ 332.959119][ C0] head: 00fff00000000002 ffffea000086f001 ffffffffffffffff 0000000000000000 [ 332.959137][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 332.959150][ C0] page dumped because: kasan: bad access detected [ 332.959166][ C0] page_owner tracks the page as allocated [ 332.959175][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5850, tgid 5850 (syz-executor), ts 82464070442, free_ts 82417471779 [ 332.959215][ C0] post_alloc_hook+0x1f4/0x240 [ 332.959259][ C0] get_page_from_freelist+0x365c/0x37a0 [ 332.959282][ C0] __alloc_frozen_pages_noprof+0x292/0x710 [ 332.959304][ C0] alloc_pages_mpol+0x311/0x660 [ 332.959329][ C0] allocate_slab+0x8f/0x3a0 [ 332.959349][ C0] ___slab_alloc+0xc27/0x14a0 [ 332.959379][ C0] __slab_alloc+0x58/0xa0 [ 332.959409][ C0] __kmalloc_noprof+0x2e6/0x4c0 [ 332.959436][ C0] fib6_info_alloc+0x2e/0xf0 [ 332.959458][ C0] ip6_route_info_create+0x445/0x12b0 [ 332.959486][ C0] ip6_route_add+0x28/0x160 [ 332.959511][ C0] addrconf_permanent_addr+0x7c7/0xc50 [ 332.959539][ C0] addrconf_notify+0x9f5/0x1020 [ 332.959567][ C0] notifier_call_chain+0x1a5/0x3f0 [ 332.959594][ C0] __dev_notify_flags+0x207/0x400 [ 332.959620][ C0] dev_change_flags+0xf0/0x1a0 [ 332.959645][ C0] page last free pid 5834 tgid 5834 stack trace: [ 332.959657][ C0] free_frozen_pages+0xe0d/0x10e0 [ 332.959689][ C0] stack_depot_save_flags+0x7c6/0x940 [ 332.959717][ C0] kasan_save_track+0x51/0x80 [ 332.959737][ C0] kasan_save_free_info+0x40/0x50 [ 332.959767][ C0] __kasan_slab_free+0x59/0x70 [ 332.959788][ C0] kfree+0x196/0x430 [ 332.959812][ C0] free_modprobe_argv+0x5c/0x80 [ 332.959845][ C0] call_usermodehelper_exec+0x14d/0x4a0 [ 332.959869][ C0] __request_module+0x3ee/0x640 [ 332.959900][ C0] dev_load+0x18f/0x1f0 [ 332.959930][ C0] dev_ioctl+0x52e/0x1340 [ 332.959961][ C0] sock_do_ioctl+0x240/0x460 [ 332.959980][ C0] sock_ioctl+0x626/0x8e0 [ 332.959998][ C0] __se_sys_ioctl+0xf5/0x170 [ 332.960024][ C0] do_syscall_64+0xf3/0x230 [ 332.960048][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.960076][ C0] [ 332.960083][ C0] Memory state around the buggy address: [ 332.960095][ C0] ffff888021bc1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.960111][ C0] ffff888021bc1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.960139][ C0] >ffff888021bc1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.960150][ C0] ^ [ 332.960162][ C0] ffff888021bc1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.960176][ C0] ffff888021bc1d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.960187][ C0] ================================================================== [ 332.960250][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 332.960264][ C0] CPU: 0 UID: 0 PID: 12501 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 332.960289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 332.960302][ C0] Call Trace: [ 332.960311][ C0] [ 332.960320][ C0] dump_stack_lvl+0x241/0x360 [ 332.960346][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.960368][ C0] ? __pfx__printk+0x10/0x10 [ 332.960393][ C0] ? vscnprintf+0x5d/0x90 [ 332.960425][ C0] panic+0x349/0x880 [ 332.960459][ C0] ? check_panic_on_warn+0x21/0xb0 [ 332.960491][ C0] ? __pfx_panic+0x10/0x10 [ 332.960523][ C0] ? mark_lock+0x9a/0x360 [ 332.960543][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 332.960565][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.960587][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.960608][ C0] ? print_report+0x502/0x550 [ 332.960636][ C0] check_panic_on_warn+0x86/0xb0 [ 332.960667][ C0] ? rose_timer_expiry+0x464/0x4a0 [ 332.960689][ C0] end_report+0x77/0x160 [ 332.960713][ C0] kasan_report+0x154/0x180 [ 332.960739][ C0] ? rose_timer_expiry+0x464/0x4a0 [ 332.960765][ C0] rose_timer_expiry+0x464/0x4a0 [ 332.960788][ C0] call_timer_fn+0x187/0x650 [ 332.960820][ C0] ? call_timer_fn+0xc0/0x650 [ 332.960851][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.960872][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 332.960906][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.960928][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.960949][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.960969][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.960989][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 332.961019][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 332.961041][ C0] __run_timer_base+0x66a/0x8e0 [ 332.961077][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 332.961110][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.961141][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.961171][ C0] run_timer_softirq+0xb7/0x170 [ 332.961201][ C0] handle_softirqs+0x2d4/0x9b0 [ 332.961230][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 332.961255][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 332.961283][ C0] ? irqtime_account_irq+0xd1/0x1d0 [ 332.961317][ C0] __irq_exit_rcu+0xf7/0x220 [ 332.961340][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 332.961369][ C0] irq_exit_rcu+0x9/0x30 [ 332.961391][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.961414][ C0] [ 332.961422][ C0] [ 332.961431][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.961461][ C0] RIP: 0010:console_flush_all+0x996/0xeb0 [ 332.961490][ C0] Code: 48 21 c3 0f 85 16 02 00 00 e8 56 eb 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 47 eb 20 00 eb 06 e8 40 eb 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 76 28 88 00 4c 8b [ 332.961509][ C0] RSP: 0018:ffffc90003ba6900 EFLAGS: 00000293 [ 332.961529][ C0] RAX: ffffffff81a0cc20 RBX: ffffffff8f38bbf8 RCX: ffff888031473c00 [ 332.961546][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.961559][ C0] RBP: ffffc90003ba6ab0 R08: ffffffff81a0cbf7 R09: 1ffffffff28a8908 [ 332.961576][ C0] R10: dffffc0000000000 R11: fffffbfff28a8909 R12: ffffffff8f38bba0 [ 332.961593][ C0] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc90003ba6b00 [ 332.961612][ C0] ? console_flush_all+0x967/0xeb0 [ 332.961637][ C0] ? console_flush_all+0x990/0xeb0 [ 332.961671][ C0] ? console_flush_all+0x1a3/0xeb0 [ 332.961701][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 332.961729][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.961762][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.961796][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 332.961827][ C0] console_unlock+0x14f/0x3b0 [ 332.961852][ C0] ? __pfx_console_unlock+0x10/0x10 [ 332.961879][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 332.961911][ C0] vprintk_emit+0x730/0xa10 [ 332.961936][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 332.961970][ C0] _printk+0xd5/0x120 [ 332.961988][ C0] ? batadv_hardif_enable_interface+0x566/0x9f0 [ 332.962018][ C0] ? __pfx__printk+0x10/0x10 [ 332.962039][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.962070][ C0] batadv_hardif_enable_interface+0x7d0/0x9f0 [ 332.962100][ C0] batadv_softif_slave_add+0x79/0x100 [ 332.962130][ C0] do_setlink+0xe7f/0x4300 [ 332.962162][ C0] ? mark_lock+0x9a/0x360 [ 332.962182][ C0] ? __pfx_do_setlink+0x10/0x10 [ 332.962205][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.962237][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.962272][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 332.962294][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 332.962317][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.962339][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.962364][ C0] ? rcu_is_watching+0x15/0xb0 [ 332.962388][ C0] ? __mutex_lock+0xba3/0x1010 [ 332.962415][ C0] ? __mutex_lock+0x602/0x1010 [ 332.962443][ C0] ? rtnl_newlink+0xc55/0x1d30 [ 332.962465][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 332.962494][ C0] ? ns_capable+0x8a/0xf0 [ 332.962519][ C0] ? rtnl_link_get_net_capable+0x168/0x340 [ 332.962546][ C0] rtnl_newlink+0x1704/0x1d30 [ 332.962574][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.962595][ C0] ? __pfx_validate_chain+0x10/0x10 [ 332.962628][ C0] ? validate_chain+0x11e/0x5920 [ 332.962650][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 332.962682][ C0] ? __pfx_lock_release+0x10/0x10 [ 332.962715][ C0] ? __pfx_validate_chain+0x10/0x10 [ 332.962738][ C0] ? mark_lock+0x9a/0x360 [ 332.962759][ C0] ? __lock_acquire+0x1397/0x2100 [ 332.962808][ C0] ? __pfx_lock_release+0x10/0x10 [ 332.962847][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.962869][ C0] rtnetlink_rcv_msg+0x791/0xcf0 [ 332.962890][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 332.962911][ C0] ? __lock_acquire+0x1397/0x2100 [ 332.962942][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.962973][ C0] netlink_rcv_skb+0x206/0x480 [ 332.963006][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.963035][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.963079][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.963113][ C0] netlink_unicast+0x7f6/0x990 [ 332.963146][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 332.963174][ C0] ? __virt_addr_valid+0x45f/0x530 [ 332.963207][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 332.963239][ C0] ? __check_object_size+0x47a/0x730 [ 332.963269][ C0] netlink_sendmsg+0x8de/0xcb0 [ 332.963308][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.963348][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 332.963382][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.963414][ C0] __sock_sendmsg+0x221/0x270 [ 332.963436][ C0] __sys_sendto+0x363/0x4c0 [ 332.963466][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 332.963507][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.963540][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.963575][ C0] __x64_sys_sendto+0xde/0x100 [ 332.963604][ C0] do_syscall_64+0xf3/0x230 [ 332.963630][ C0] ? clear_bhb_loop+0x35/0x90 [ 332.963662][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.963691][ C0] RIP: 0033:0x7fa82178ec7c [ 332.963709][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 332.963727][ C0] RSP: 002b:00007ffd89cff980 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.963749][ C0] RAX: ffffffffffffffda RBX: 00007fa8224d4620 RCX: 00007fa82178ec7c [ 332.963765][ C0] RDX: 0000000000000028 RSI: 00007fa8224d4670 RDI: 0000000000000003 [ 332.963779][ C0] RBP: 0000000000000000 R08: 00007ffd89cff9d4 R09: 000000000000000c [ 332.963793][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 332.963806][ C0] R13: 0000000000000000 R14: 00007fa8224d4670 R15: 0000000000000000 [ 332.963830][ C0] [ 332.964130][ C0] Kernel Offset: disabled